Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: 5M0j2OZWzhtboAw/YD59ABO9AlioMMS5t4Y2c9HuFWE=
Subject key identifier: 9E:95:8F:C4:A5:35:F1:EE:FC:35:EC:3F:40:EA:0A:1B:BE:68:60:4E
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 019D27723E620BBE51C565B2E782209CB697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: GHTdayMiWDlw-FficQL48lxhZOg.roa (hash: FsnkdiClv5Pq5UfPSWarTRIqcdA96NlEZ5WqhhR+uB4=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: DHZYceEf3sNUe720Sox7pj/xRJ201XmB8yU2GbLNumI=)
3: YoG-FSIwZG75jmbunNKK5iNqjxI.roa (hash: 4W4AIOU7bTCXgAo+Q56kCjhAV3Ite04SA4ttlsHvgNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3e:62:0b:be:51:c5:65:b2:e7:82:20:9c:b6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=9e958fc4a535f1eefc35ec3f40ea0a1bbe68604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:50:60:25:1e:a9:20:7f:9a:7f:78:13:3e:
c8:b0:d3:ac:5f:ae:0b:24:91:f6:54:2d:02:73:5a:
b2:79:49:13:49:f6:03:b3:c4:35:17:ad:78:c5:b8:
b5:1b:88:2d:09:7d:11:38:13:02:64:20:e6:39:45:
87:fd:62:3b:4e:10:1a:e7:bd:d8:a1:50:fa:9b:2c:
ff:72:28:a7:07:a7:3a:34:d1:cb:43:73:54:af:89:
a2:66:7e:ee:08:88:10:8a:ae:64:05:a9:24:fc:18:
19:c0:f3:f1:dd:bd:4a:0f:e0:13:fa:3b:04:5b:6f:
88:8d:1a:cb:d7:0d:a5:c5:3e:14:34:8b:b3:ab:73:
41:bf:e2:6d:0b:b6:7c:df:28:b5:8a:8d:d3:da:18:
87:22:22:59:b6:86:49:3a:a4:b2:30:7b:e2:84:af:
41:2b:b9:d6:df:d2:0b:f2:b9:12:b7:f1:d8:a0:90:
4e:4d:ba:d4:1a:50:00:75:61:ed:8a:48:b6:44:bb:
0d:60:b8:fa:55:f4:c9:7d:a3:b1:98:55:5d:2f:96:
b8:fe:b2:fc:b6:85:c8:94:cf:ee:b2:80:1b:eb:08:
f5:40:48:fc:e6:e4:5d:87:a0:e2:17:de:8f:ea:6a:
ff:da:81:7b:dd:1e:43:51:34:c1:0e:7a:69:e8:80:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:8F:C4:A5:35:F1:EE:FC:35:EC:3F:40:EA:0A:1B:BE:68:60:4E
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9b:e6:ea:a8:54:ca:34:d9:92:38:ee:e5:4f:a1:ee:af:45:
7c:17:f7:e4:26:c5:3f:61:04:06:02:79:ec:18:0c:94:2d:c1:
6f:71:6b:35:81:88:c5:89:d4:ec:4c:93:4b:06:5e:8c:75:a2:
0b:83:7f:99:72:6f:fd:b3:b7:7d:01:1e:41:c8:24:b5:50:41:
8d:94:b4:57:d8:97:69:11:e7:1b:b5:c4:38:a8:de:30:30:24:
37:c0:45:f0:5f:1c:ce:b8:8a:99:eb:60:06:5a:b5:13:06:ca:
0a:18:d7:9e:0e:d1:3e:87:df:20:0c:3b:d7:93:14:db:d0:eb:
19:c8:0c:49:21:e9:de:f8:52:ab:e4:25:33:a2:9b:e2:96:91:
2e:f4:a7:8e:72:b6:fe:d5:98:9d:e3:20:d6:e3:13:a4:a5:09:
2e:a7:ec:35:7e:21:8b:ae:42:21:4f:d6:42:28:99:32:e1:d2:
30:33:86:5c:ab:bb:39:db:06:a9:45:e1:8a:68:f0:3a:39:7f:
02:a6:c3:d0:bc:6d:ef:76:6c:79:f1:da:45:1c:8e:30:31:2c:
1a:1a:e8:8a:6d:b8:4e:f4:0e:02:d4:e8:22:45:bb:f8:4e:c3:
b4:8c:11:9c:33:ce:24:c4:d9:1c:97:88:94:c3:a6:74:e9:ee:
cc:72:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:48 2026 by rpki-client