Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: IdaaT3a/RBEvOgXCg4cE3LpAYTlF89sWTC26ZWwS5Lc=
Subject key identifier: 67:97:0C:1E:34:CB:46:AF:AC:E9:13:7D:7A:3F:B1:C7:0D:CA:C9:6E
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019D26CCD0D3E7A631A1AF857F83012AC98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: NXWZ1VBhpHTAb6hzzLtwN7KW9bHc/E7QwyuVhJ9PjiQ=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d0:d3:e7:a6:31:a1:af:85:7f:83:01:2a:c9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=67970c1e34cb46aface9137d7a3fb1c70dcac96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:87:d1:67:35:6e:28:37:f0:90:62:da:6c:
30:e9:12:57:c4:5c:7b:8e:8a:fd:00:74:cc:16:e9:
32:a2:24:5b:3b:2e:ca:05:70:4e:13:99:b3:96:6a:
75:e9:60:e3:03:c1:bf:2a:c7:1e:53:b3:56:48:0e:
a1:ac:91:c5:98:ec:3f:a1:0d:a2:63:27:e1:ee:97:
cf:fc:ed:3f:58:f7:5c:b0:fc:82:cd:bc:8a:0a:a2:
c7:0e:27:bd:59:b8:eb:9d:34:f5:01:55:03:8e:f2:
fb:9b:be:2a:8c:0e:e9:86:5e:11:9d:48:4e:53:9a:
72:f2:1b:40:2e:c7:46:01:ce:df:17:a8:f3:c4:52:
36:e4:f8:1c:90:04:92:7c:53:9a:9c:88:24:4b:49:
89:ee:44:dd:bd:f1:a8:ae:c1:fb:35:b8:5d:9d:3d:
ac:cb:54:5f:5c:55:8e:e3:ee:37:20:3b:eb:55:d0:
68:b5:41:1f:7b:79:ca:0c:dc:87:82:99:33:21:50:
77:37:82:e1:1a:74:1c:c2:a2:15:94:b3:9d:8e:dd:
52:ae:2c:1a:7f:3a:93:84:67:7c:e4:80:84:05:de:
8f:3c:90:4d:ac:01:53:da:c0:99:35:cd:bc:0e:c2:
b7:d7:be:86:e8:1e:21:e7:c8:23:1e:78:9f:cb:87:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:97:0C:1E:34:CB:46:AF:AC:E9:13:7D:7A:3F:B1:C7:0D:CA:C9:6E
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:f5:8f:58:28:c0:68:65:01:f1:04:95:09:dc:87:36:18:c5:
a1:1a:39:e3:99:0e:ac:24:c1:a3:97:98:db:76:8a:3c:35:50:
0b:18:8f:da:19:6d:be:22:c8:ef:74:ff:28:ed:56:01:90:bd:
76:83:ce:25:ae:59:20:9c:6b:54:7c:a2:d1:54:11:d8:9b:b8:
c5:e0:6f:9d:9c:b8:9e:1a:db:3f:cf:8f:0a:dd:1f:34:1d:27:
d5:cf:aa:f0:09:94:68:ef:bf:01:9e:61:6f:e0:0e:f9:89:9f:
a1:cb:fe:70:04:46:01:16:fe:27:55:58:12:e0:40:0e:c3:8f:
17:63:08:cd:d0:07:76:c3:5e:f7:e8:63:15:2c:4e:53:15:59:
7b:9b:d6:df:a3:56:1d:b4:5f:0d:9d:bd:2e:43:ab:2e:11:83:
02:d5:b0:e5:59:58:24:b0:70:cd:cf:2c:8b:db:fd:ed:24:b2:
f5:51:51:af:a8:fe:72:9d:06:95:d2:c1:f5:30:c6:84:a5:8d:
53:e8:b0:ef:89:8a:af:0d:97:e3:0e:d5:47:8c:d2:88:d1:3d:
ee:6a:5c:70:5b:92:ce:84:d3:b9:83:0b:ee:9f:81:0c:b7:46:
90:b0:ba:fe:23:e7:1c:7e:f1:23:47:dc:82:31:cc:b3:dd:2c:
d3:3c:8e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:08 2026 by rpki-client