Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: ZqVlE0y3NH7/C1dB7490f4A6hng605W7XahvxW6JQdY=
Subject key identifier: BC:54:29:03:75:01:67:D1:D1:ED:C5:21:85:AA:C7:F5:68:C8:B7:FC
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 019D27A8DBEC2368D11021E3AF1078181F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 16A2
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: 89+k0I02QgGA+68Ww5mzfoWAaY12onsWoNnfzHqgEjI=)
2: KrmrfuyTmay6BxzsP6g7DR2EuMs.roa (hash: i89qUuvLONj+YCXDaSghoBx5U4M3h/mBM7QmhvsqeeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:db:ec:23:68:d1:10:21:e3:af:10:78:18:1f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=bc542903750167d1d1edc52185aac7f568c8b7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:a2:0a:07:1e:d7:c0:5e:6c:64:3f:d1:9d:
3a:ad:f3:b5:51:96:c9:74:6a:60:0c:47:b8:09:77:
c5:bb:b4:47:fb:d4:b0:20:73:aa:e5:06:47:64:8a:
df:8b:77:81:94:fe:fb:8f:46:27:26:b5:01:47:43:
ab:05:bd:72:d4:da:2a:dd:a0:1f:6c:02:6d:02:96:
c5:32:e4:3e:fa:47:0e:d3:ca:53:d9:41:b7:71:fd:
d1:79:e4:a1:30:2e:8b:82:73:65:8b:be:83:8b:21:
55:a4:f6:18:8b:9b:f5:f8:64:cd:2d:9b:8a:13:2a:
b2:55:8c:ad:f1:25:b9:2a:87:05:fc:0c:75:82:a1:
0b:a3:f1:95:6c:72:14:83:06:c5:dc:ed:c2:55:0d:
4c:af:16:8f:16:98:a4:14:df:09:b3:ca:e0:ef:8a:
86:a1:be:2e:58:02:70:db:e7:0d:21:d3:58:2f:ed:
57:87:d6:50:66:e8:fa:ac:39:db:b3:7c:ec:22:52:
0c:67:83:0d:5b:58:d0:fb:00:2d:ea:0d:86:50:1f:
69:e7:9a:25:b4:ad:39:00:43:dd:d7:d8:f9:ad:c0:
fd:89:bd:3c:e5:8b:20:b3:1c:11:22:40:9b:ce:10:
a0:75:bb:d6:d6:17:bc:12:8a:c7:24:98:37:67:f9:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:29:03:75:01:67:D1:D1:ED:C5:21:85:AA:C7:F5:68:C8:B7:FC
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a0:6f:bd:4f:ac:bf:9b:e5:1e:15:6b:e3:55:5b:29:bf:ba:
d1:c7:10:14:d7:6d:ce:2c:b3:90:64:72:85:31:9c:1f:79:74:
5b:d9:b0:65:14:bf:36:81:50:b0:c1:a9:0e:5a:7f:6d:39:7d:
e3:f3:1f:f3:cf:4e:25:58:7c:03:0a:5f:ff:13:a2:1f:bf:16:
39:61:c0:9c:3f:ac:6d:4e:13:d3:64:54:2d:2d:31:b2:1a:ef:
f5:9b:d0:70:2d:f4:d9:de:7a:35:f1:a1:6a:04:5c:e5:85:a1:
99:e8:db:4b:01:d2:c3:cd:9d:50:f1:0f:c4:3c:0a:fe:f8:66:
22:cf:39:48:da:62:0f:9d:60:d4:66:c1:d2:f1:b4:e5:0e:5a:
02:a0:df:16:e7:03:08:ff:1d:fa:70:c6:8d:7e:de:4f:ff:c4:
d5:fe:56:ee:d8:bf:ed:56:a8:cb:1e:a7:6d:4a:5e:b7:8f:34:
30:45:6c:c9:c2:8a:67:df:cf:4e:03:99:ca:f2:b3:e6:b7:ea:
9d:34:32:38:96:5a:de:54:5f:d7:6c:60:81:4e:f7:9d:28:65:
dd:8a:54:90:e6:82:cf:26:54:83:3e:46:98:c2:aa:92:7e:eb:
7e:c8:56:3a:f2:7f:01:f2:17:e4:e8:58:0c:35:06:93:32:0f:
a7:bb:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:26 2026 by rpki-client