Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json)
Hash identifier: YNeuyX0/YLt9zlou5iUJ3+gAaznZKyqIYdFMXHxAd3I=
Subject key identifier: A1:99:D9:58:85:7D:44:CF:EA:2A:F6:C6:E7:29:BB:8D:AB:5D:FD:71
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 019D265F56228E201A915D97ACFEF1F68EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
Manifest number: 05CF
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: 1-R75F-n6DbqOXIjoSMedeoHrP0o.roa (hash: /TsfatXUwCna+KES11mxfaQ4XyB4jFqpfgKp2NEVYCE=)
2: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: qpHXpSYFnIuuFFgVWF7yi/9xdSzd3NTt/JzTBzxvDGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:56:22:8e:20:1a:91:5d:97:ac:fe:f1:f6:8e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=a199d958857d44cfea2af6c6e729bb8dab5dfd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:df:ea:ca:dd:5e:7a:03:90:c5:9b:79:a3:
44:c3:51:ee:3d:a2:32:72:d7:16:74:b2:b7:32:2b:
78:9f:1b:00:2d:a4:d8:75:29:a4:28:f8:b7:45:a4:
90:7e:47:34:d1:b3:88:24:9a:a0:be:92:25:18:5c:
2e:ac:96:7e:d9:27:d2:79:d3:e4:0b:45:3e:33:ad:
d8:8e:b5:da:78:02:85:17:7d:2b:2f:d7:57:5a:a6:
6f:a0:7d:8f:6c:e0:64:1c:9a:2e:32:92:35:cc:0a:
8c:64:aa:44:53:7d:2c:c7:79:2c:be:0a:05:87:32:
9e:d8:ec:b7:7f:f8:1f:3b:1f:ff:3e:f1:3b:60:c5:
62:1d:04:34:b0:8e:27:a9:69:99:4f:f9:73:39:b4:
ef:bd:c6:b5:60:93:0a:be:9b:7d:63:f4:52:d3:5c:
0d:ab:8d:3f:3f:9b:ee:2e:44:b9:7c:7c:39:cf:3c:
c8:27:93:60:f9:42:73:bc:b9:76:17:9b:7c:6e:df:
00:cf:2a:80:c0:25:9c:85:80:1e:d1:d1:f9:20:a2:
77:bc:35:29:2b:4d:e6:0c:0e:15:fa:41:6c:c5:5d:
78:1c:02:de:74:54:1a:15:3a:e3:55:8a:cc:bc:ce:
7b:63:bb:6d:e3:06:d9:73:b4:8f:75:a7:b8:ca:56:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:D9:58:85:7D:44:CF:EA:2A:F6:C6:E7:29:BB:8D:AB:5D:FD:71
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b4:85:b3:9c:e7:c0:78:1a:e6:a3:e0:7e:0d:76:0e:91:6e:
bf:55:b1:b1:20:29:d1:55:b5:61:ff:5e:38:2b:3e:69:da:34:
60:10:2f:1c:5d:21:8b:17:c3:cf:80:dc:0c:cd:17:34:b4:42:
86:53:c9:8a:3a:be:43:45:8a:10:75:ac:56:82:40:09:18:e7:
1b:41:b1:04:8c:39:d8:47:b4:0b:61:86:27:79:0c:1f:b3:1a:
dc:b9:dc:cd:ea:64:eb:d9:95:44:60:c1:42:81:79:89:10:ee:
b8:dc:c1:80:6b:ae:14:cc:19:e3:30:2d:3b:aa:88:6d:da:5f:
2c:a5:aa:5c:6a:7f:61:11:78:a8:6c:3e:e9:f5:82:11:29:9a:
c3:6a:7b:2c:86:45:36:a0:f9:28:8e:eb:71:e5:17:99:a7:62:
f8:ba:07:59:ae:d6:eb:6c:cf:72:df:6c:d7:e2:fd:1d:f4:e9:
7a:ba:dc:98:67:e0:48:53:b5:80:e1:56:ec:0e:9f:11:2f:b9:
b7:1d:ae:4f:82:90:02:7e:31:e5:1c:ff:63:9f:33:f7:52:b2:
14:be:1b:14:64:ac:12:7a:a1:a7:cb:14:67:13:ac:c0:7c:61:
ae:6d:17:92:a5:d5:08:49:e7:fa:15:f6:f6:ee:b5:9d:57:d6:
59:e2:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:32 2026 by rpki-client