Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: lkZnAjXXsBzp+4ieI7sfWa/BTWltZGfI96nTAK+P6No=
Subject key identifier: 26:42:A6:6B:03:81:B7:8E:81:68:08:88:7A:18:B9:90:8E:76:D1:70
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 019D270396313D75A67392E53D328E762358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 1109
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: BpslTqYbkenlb6nNKxJII8mR/E3CtIf7+SlvjC1H0OM=)
2: hzKfJWZlIV8JBysFWarDH5yRiEk.roa (hash: CAWz472DO1trBiLZNnU0TTJf5YszDXotuDHQXa3fYWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:96:31:3d:75:a6:73:92:e5:3d:32:8e:76:23:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=2642a66b0381b78e816808887a18b9908e76d170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:8a:07:21:97:2a:1d:6e:f5:2a:70:a8:88:
8e:79:40:19:d3:a2:21:28:9c:54:ed:b6:77:6c:74:
a4:98:ee:0c:3c:41:25:a8:84:c6:50:3f:b9:6a:fd:
ca:64:d8:49:48:36:f0:de:24:74:5c:da:fb:19:03:
8e:a3:94:72:a2:50:2f:dc:b3:85:ba:7e:cf:9a:bc:
9f:6e:cf:7d:c4:5c:97:e8:3c:cc:29:58:5d:06:bf:
1d:c4:35:94:b5:0c:f6:87:f4:52:ee:44:4e:c7:ce:
bd:62:f4:36:d5:04:a1:6c:5c:a0:ff:ec:0e:8a:af:
a9:82:f2:39:c7:e7:d7:78:91:97:f0:7c:92:e6:b4:
49:9f:75:e3:81:12:00:01:05:33:f3:bc:1e:0b:3d:
df:d0:d6:b1:be:98:37:3e:06:19:cc:5f:6e:43:58:
23:c7:ef:e5:7c:73:6f:96:fc:da:53:c6:3a:27:20:
40:c0:7d:26:df:49:d5:b9:4b:ec:60:5d:fc:b5:59:
3f:fc:b1:a6:e0:a5:84:f4:29:a2:9d:95:63:04:76:
41:4b:fc:2b:46:d9:75:06:bd:37:62:3d:3d:8d:21:
2b:1c:6a:44:76:87:77:c4:6f:7c:1b:26:48:4c:53:
4c:8a:dd:30:b4:1d:86:4c:5f:f1:95:b9:04:be:c7:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:42:A6:6B:03:81:B7:8E:81:68:08:88:7A:18:B9:90:8E:76:D1:70
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:86:9a:73:20:84:5a:cf:d2:f6:03:d5:2c:22:53:56:3d:79:
67:c4:8e:85:4f:54:57:46:83:53:8b:a3:9b:6d:fd:76:b1:79:
70:bb:c1:60:6e:74:21:ef:9a:fe:7d:9a:b4:7a:c6:00:28:4d:
7b:d4:de:a8:f3:99:d0:1f:53:6a:81:78:c7:37:2f:16:5b:2b:
b5:3c:e3:f7:1d:f8:af:52:67:fd:f3:38:5c:9a:ec:e6:65:e0:
d2:0a:dd:c2:ed:64:9d:c6:1e:a2:17:80:1a:7b:0f:b0:d0:f7:
af:2e:b1:42:76:c0:bd:f2:26:1e:b3:ef:39:f0:cb:5d:82:5d:
35:9c:85:61:6c:97:c2:e0:67:81:f9:4b:c8:73:3e:a6:db:a6:
51:f4:bd:db:2c:ac:96:44:6b:8e:fa:75:c7:3d:c3:d3:a1:71:
be:6c:1e:2a:c7:7e:aa:b4:ad:33:cf:98:b3:cd:4f:f6:3c:10:
a1:69:1f:8d:f0:6a:25:bb:08:ff:e7:7b:17:5f:2f:3f:3e:35:
00:24:d9:52:03:7f:6d:7f:8e:70:10:14:ee:a6:e6:65:c6:f3:
9e:17:d9:44:da:2a:f7:d0:c0:a3:1f:4f:97:ec:b0:23:b5:c4:
db:2e:d0:a5:23:16:3a:0d:bf:45:40:18:9c:32:37:6f:19:b1:
e8:4b:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:37 2026 by rpki-client