Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: 4E/FD0OcC/F5OGKhAYalVX4ocwKtiR1QGnN4GKtalHg=
Subject key identifier: A4:73:C1:D6:05:CC:FC:E0:97:59:CE:38:02:99:AB:3E:A4:AF:27:29
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019D26CD10F8B048BE45F9F1BC0473EE2B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 1441
Signing time: Wed 25 Mar 2026 21:01:06 +0000
Manifest this update: Wed 25 Mar 2026 21:01:06 +0000
Manifest next update: Thu 26 Mar 2026 21:01:06 +0000
Files and hashes: 1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: /d7d60zbiHQujoid5VwgMNHl1EE7e77zfaTeJnM+6wA=)
2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:10:f8:b0:48:be:45:f9:f1:bc:04:73:ee:2b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Mar 25 21:01:06 2026 GMT
Not After : Mar 26 21:01:06 2026 GMT
Subject: CN=a473c1d605ccfce09759ce380299ab3ea4af2729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:19:84:ee:7b:62:64:13:00:78:e8:32:07:
15:c1:0f:a9:c7:16:0b:d3:28:fc:c5:1a:2d:99:29:
0b:9e:a7:e6:a6:7a:92:86:a6:41:7e:5e:d9:7d:7b:
8c:f0:b3:70:2e:28:ac:2e:f7:ac:3c:be:c6:9e:e7:
44:f6:1a:cd:72:4b:1e:ce:4a:1e:10:47:18:f6:68:
2a:e8:c2:b4:ff:06:53:13:87:0b:43:78:b6:18:83:
2a:0f:04:32:2d:ff:5e:94:cc:2a:69:67:e8:1d:a6:
66:18:6c:af:ee:bc:4b:99:e9:f7:c1:a4:1b:f1:7b:
46:7e:86:b7:60:b0:11:bb:02:2c:f1:3c:11:88:c8:
90:d7:d9:f2:1e:82:4d:f1:7f:f0:bd:e4:37:2e:18:
a4:0d:62:da:97:24:03:7c:eb:20:ab:c3:c8:8e:c4:
97:40:4f:ad:3b:3b:41:b2:ef:32:4a:b9:50:68:8b:
07:07:a1:a6:08:3d:1c:7f:e9:0b:38:74:b2:4f:22:
88:5f:57:02:f8:f4:9f:36:0a:7c:08:5e:14:9f:a5:
5e:18:88:15:e9:a2:c3:0c:d9:42:37:e3:36:b7:4c:
9e:21:e7:9c:09:fa:de:25:1a:42:01:b6:1d:24:99:
2f:49:b1:84:ad:58:4d:fc:d8:61:54:a9:2a:a0:53:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:73:C1:D6:05:CC:FC:E0:97:59:CE:38:02:99:AB:3E:A4:AF:27:29
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ae:b3:e3:84:4f:8a:40:a6:00:30:91:87:fe:68:54:ae:e9:
00:4b:0d:4f:39:1a:e4:97:4b:b7:a4:c8:81:b1:23:3a:96:cb:
34:02:f4:a7:81:be:6d:42:cd:a6:8d:b6:52:ce:33:83:f2:bc:
d0:83:b2:f2:c6:0a:0e:b5:c5:a0:60:5e:99:69:84:4e:19:a7:
d2:dd:c3:f9:1c:da:bf:73:82:a6:6d:c7:1b:de:84:92:49:54:
a0:fd:49:ed:e2:76:a8:ac:63:d5:17:ac:5d:2a:03:f2:89:f1:
5e:2d:db:b9:9d:ac:61:55:6b:e0:53:31:67:49:1a:dc:e8:7a:
97:fd:b8:f6:03:92:ae:82:12:e9:a7:a9:6f:a7:f1:38:14:ae:
2c:d2:c6:6a:ec:a7:a3:ef:10:42:78:d5:5b:ec:6f:e5:95:97:
85:89:91:75:38:d4:5a:ce:61:a2:3d:b5:b5:52:c9:a1:3d:65:
66:38:47:a8:e5:5d:59:b6:b8:7e:d5:12:8b:2a:e0:60:a7:43:
26:63:78:7b:fc:0a:bf:fc:a0:fb:cc:55:3f:4c:7f:c5:67:8c:
2e:de:53:13:21:59:a8:42:a7:b7:9a:f8:78:93:1e:99:ea:85:
66:2e:85:18:56:6e:6e:e3:72:85:2d:65:8f:fd:46:1e:fe:74:
60:94:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:33 2026 by rpki-client