Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: 5wmExpcrITPE1442a1Hlp1FjRaMHPspDjr5l6Wi5hnE=
Subject key identifier: B3:74:81:87:A0:F6:F5:96:79:7A:6D:F2:22:1B:5E:6C:C8:F4:30:C4
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019D26CD537253DD72D174B0D9E572FC3265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: IB+pu/rfm0PuTz/x7Cs9wwyJswvq34XwBZsWuaIOSYQ=)
2: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (hash: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:53:72:53:dd:72:d1:74:b0:d9:e5:72:fc:32:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=b3748187a0f6f596797a6df2221b5e6cc8f430c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:08:54:36:74:7e:63:98:49:e6:df:f4:b4:8c:
b3:a4:63:f4:bc:11:86:53:5e:d6:8d:23:12:8a:ae:
3b:11:63:71:71:4e:f7:79:4c:a9:f7:a0:7c:69:eb:
3b:42:d2:65:9c:d4:8e:25:07:d8:10:74:d4:0e:9d:
73:a8:6c:26:d1:38:28:44:1f:dc:f9:c1:94:fd:b6:
c9:28:d9:00:af:0a:61:8c:72:5d:2f:9a:70:f6:bb:
c8:de:8d:dd:6e:17:db:b2:46:e5:11:8c:29:54:d6:
03:0e:69:03:ee:5b:c4:f2:f7:fc:fe:ec:94:0b:35:
ac:15:3d:29:87:70:b9:eb:3f:16:2a:f3:19:61:c2:
ee:81:a2:da:aa:03:09:2e:f3:7d:69:b7:79:02:c5:
e5:1d:78:91:c0:cc:68:f2:1a:64:5b:85:c1:cb:ab:
d7:7e:90:47:bf:77:a2:c9:36:56:4a:27:bc:d9:ad:
05:fd:bf:93:6e:dd:f5:cd:d4:91:e9:a3:29:3d:43:
46:97:8c:d5:ab:bd:4a:f7:2d:f6:d6:3f:c2:c3:0c:
b1:db:b1:cb:7c:ab:f1:33:5b:0c:48:cb:44:e4:27:
15:ce:8c:41:35:a8:93:cf:39:22:55:db:17:4e:7b:
f2:ee:d8:ce:b4:b1:7f:c7:2d:b0:35:9c:f6:8b:22:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:81:87:A0:F6:F5:96:79:7A:6D:F2:22:1B:5E:6C:C8:F4:30:C4
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:11:ab:2c:ba:35:5c:a8:1b:e5:6a:b1:3b:3a:96:de:79:05:
78:c5:38:de:69:25:85:88:98:6d:41:77:5b:9c:21:06:21:52:
f3:0e:67:af:a4:f9:ab:9f:5e:b3:b0:c5:1d:d9:c9:59:20:7b:
63:d0:9a:f3:86:e5:fe:15:e4:63:ce:e8:55:fe:35:d0:42:c5:
0a:25:92:0f:58:61:d2:33:3e:5f:25:55:61:c7:85:13:4d:14:
cc:57:c4:e4:ee:2a:5b:a5:fa:cb:0a:63:e6:f6:34:b8:ca:99:
16:2d:60:dc:62:87:8d:66:d6:b3:50:72:12:1b:22:6e:9d:3b:
91:71:a2:9e:f2:fd:7b:cc:1a:a7:8b:10:00:8d:fb:ce:03:36:
9d:60:7b:cf:f7:e0:70:e5:6e:1a:94:8a:f1:f1:ba:b7:82:3f:
5e:95:bc:1f:d8:13:98:26:c2:e1:55:e3:29:4a:83:7e:78:8f:
58:07:aa:5c:8a:b0:d2:0b:64:68:67:a4:61:61:e1:d5:1d:f7:
6b:a9:01:64:9f:72:b3:fe:22:6f:3a:d3:9c:6b:27:6e:58:23:
61:33:41:4d:80:9b:20:cb:09:2c:cd:e0:5a:cd:cf:89:4c:68:
18:2a:61:aa:c9:83:26:22:64:39:52:3b:fa:3f:5b:85:da:9c:
85:59:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:24 2026 by rpki-client