Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: WEFzzqkfzrWYbWXMKraSeVtJlQwDC2UzLWMy7YHIcCY=
Subject key identifier: EE:58:1B:0B:5D:B0:9C:8F:E3:E3:5D:96:74:ED:5E:FD:82:E9:B8:A6
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019D24DE65EF170FD8CDE464B54DBCD62588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 12:00:48 +0000
Manifest this update: Wed 25 Mar 2026 12:00:48 +0000
Manifest next update: Thu 26 Mar 2026 12:00:48 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: rPAEe6Q9QGFcIjxEyFHUFSQXpTgg4ZrF0eovn87YJ2g=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:65:ef:17:0f:d8:cd:e4:64:b5:4d:bc:d6:25:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Mar 25 12:00:48 2026 GMT
Not After : Mar 26 12:00:48 2026 GMT
Subject: CN=ee581b0b5db09c8fe3e35d9674ed5efd82e9b8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:d2:0b:67:2c:9c:b6:54:c0:8c:bf:0c:4c:
1a:35:ad:36:1e:0b:06:c2:65:d6:b1:ab:9a:8a:34:
e2:87:fa:e1:a2:fe:14:3c:01:15:e7:50:8e:ff:b8:
e4:13:71:5c:ed:24:b7:22:99:8f:ff:72:8e:1a:26:
85:e7:ad:2e:47:73:95:c8:a9:f6:76:eb:dc:26:cc:
88:ee:a5:27:76:55:1e:64:ed:a7:1f:54:d7:08:97:
bf:c0:60:5b:7e:c4:5c:f4:f6:e2:8e:61:00:c6:77:
1e:1b:4d:31:67:b4:66:0a:c1:ea:33:bb:c8:1d:e2:
03:8f:b9:a9:a2:2b:b6:b9:5c:b7:7f:28:18:84:ca:
38:ff:c3:06:20:ed:15:52:06:14:47:47:75:f1:39:
e4:b5:a9:a1:a7:9a:2d:0a:2e:39:5f:0b:cb:26:22:
f0:c4:9d:32:6f:49:71:10:64:16:78:ea:2d:15:df:
fb:e7:52:b1:d4:e1:e6:5c:d3:e5:ae:b7:52:b1:4e:
41:32:1e:66:0b:47:93:5e:ba:77:87:b1:d5:7e:10:
4e:3f:3f:88:07:89:27:06:e9:53:65:0f:49:e5:c8:
8c:b3:ed:4b:dd:7c:ca:4e:31:95:34:6f:c1:a8:ec:
4b:5c:2f:84:b4:4c:ee:e2:ad:31:c5:4b:46:b6:8c:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:1B:0B:5D:B0:9C:8F:E3:E3:5D:96:74:ED:5E:FD:82:E9:B8:A6
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d2:c0:8d:de:69:58:d6:a9:72:7f:f4:66:28:bf:e0:03:e3:
cd:9d:73:a1:19:27:2e:62:81:b4:bf:c3:18:f0:6a:5e:b3:b8:
cd:87:63:04:81:cb:b1:1e:f4:1a:91:b1:8b:31:45:ce:de:2d:
15:d4:de:e3:d9:e1:95:03:98:5f:8d:4e:a7:97:96:1b:15:58:
e3:d8:48:1d:f2:81:67:2c:04:8d:57:d4:ad:e8:1e:86:35:dd:
49:26:78:fb:4c:63:9e:47:37:4e:7d:67:ee:d2:f4:4e:79:30:
ce:d3:ea:34:a7:6c:87:7d:1e:db:97:d9:33:4f:26:83:04:cf:
0a:99:2c:77:a2:c4:cb:52:e9:88:69:58:f8:3b:79:5e:e1:d7:
fd:b7:a2:89:3c:df:ed:db:03:f3:72:d3:fb:de:1d:d1:c5:2d:
09:7c:90:af:1a:96:21:48:03:b9:7b:49:6b:1e:f3:0b:89:5e:
59:f6:b8:cc:1a:21:96:16:5f:3b:31:73:b6:a7:70:82:84:6c:
97:fe:80:15:8f:2d:19:7c:47:18:df:87:b9:e7:3d:73:00:c2:
bb:b8:cf:ad:18:c0:80:d2:a7:2d:88:32:14:1a:a8:bd:b0:33:
a3:5d:28:2b:3f:64:5a:ce:2e:ef:13:cd:94:f5:b3:53:fb:d2:
fe:4a:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:38:17 2026 by rpki-client