Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: 11COJmhye5ECPUVHjhO7NYsJ1ZiwhPuTKenF8v5qLOc=
Subject key identifier: B1:5F:45:40:27:63:DE:8B:22:AE:07:94:5E:25:55:56:AD:FD:88:9B
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 019D25F1E2CD5D8238BEEEBCD90DBFC04A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 106B
Signing time: Wed 25 Mar 2026 17:01:42 +0000
Manifest this update: Wed 25 Mar 2026 17:01:42 +0000
Manifest next update: Thu 26 Mar 2026 17:01:42 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: vMR8gc2328wDH6GUB823eb7eCckbFqmsNuSD2+2V5WQ=)
2: egsIufM9DiHj_9SSdU6nff71R8Y.roa (hash: e9a1PO48oO66qDrGOo9Li3VvtXwHdcVqPnuihXWNVoQ=)
3: wSDNzntcWhNUBixkb6aX20BeB6s.roa (hash: jjJjLDXdJiAxkXQhCjVcOuaYUcxyHYmIDSfSBzcXqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e2:cd:5d:82:38:be:ee:bc:d9:0d:bf:c0:4a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Mar 25 17:01:42 2026 GMT
Not After : Mar 26 17:01:42 2026 GMT
Subject: CN=b15f45402763de8b22ae07945e255556adfd889b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:b0:15:29:08:82:aa:85:09:be:b8:44:dc:
77:7e:21:7b:d3:a3:5b:1f:7a:1f:e0:32:f0:eb:0e:
e3:70:76:c2:5d:2e:1b:2e:92:5f:fa:52:d5:06:31:
15:6f:3e:3f:5b:b6:42:95:c9:c3:fd:ae:17:e9:82:
27:7d:72:85:78:89:24:c5:72:5c:07:c1:77:3e:40:
3c:5d:f2:e3:78:c7:c5:ed:40:f9:7a:e2:0f:98:b1:
d0:e0:48:da:49:da:9a:07:6d:37:20:22:ff:ce:34:
03:a3:4e:93:41:82:fe:8a:a7:82:14:dc:f0:8c:d8:
5a:b0:41:55:26:b9:7a:52:21:96:d3:29:ad:3c:62:
1a:c5:2c:c5:ee:97:92:fa:db:95:29:4f:f0:81:7d:
b6:21:b3:a2:9f:ca:4b:71:be:f3:1d:23:7c:e9:fc:
c7:3a:07:7b:c9:e0:33:d4:d1:c7:e2:27:dc:9c:a2:
c2:4e:52:18:49:f9:72:b4:f9:28:f0:90:d9:ad:a2:
01:61:b5:63:30:da:6e:00:e2:d1:24:14:98:9f:14:
9a:f9:21:7a:ae:ea:12:d8:af:1e:09:9c:5d:0f:ee:
e9:e4:0b:30:b9:ac:03:f6:a5:45:54:f8:a7:18:9b:
77:43:e0:8f:73:50:62:22:53:c4:31:c7:e1:85:73:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:45:40:27:63:DE:8B:22:AE:07:94:5E:25:55:56:AD:FD:88:9B
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:aa:57:09:67:2c:d0:12:da:80:be:b4:15:eb:fe:51:ce:13:
79:55:96:ec:0c:35:8c:37:89:94:14:25:f0:ab:8f:6c:4b:92:
db:2c:eb:8d:82:30:98:c0:2a:6e:87:fb:7a:d9:de:01:ff:a6:
5b:0a:ac:6d:b5:33:53:f4:c7:d5:68:46:6e:88:e2:95:7e:b1:
a9:dc:6d:35:0a:af:d3:77:16:82:6b:9a:03:0c:5e:8b:b7:0a:
2c:36:eb:19:86:90:87:78:a9:ff:8d:5e:f0:3b:4c:99:bf:4e:
60:bb:58:0b:53:50:3e:28:88:9b:9a:f7:5a:19:0b:ac:be:53:
92:7e:7a:ac:53:ba:7c:f9:0d:4d:d2:63:92:62:a5:09:96:ce:
5d:ba:ec:5b:01:93:3c:d2:bb:98:b1:f1:48:30:36:2e:15:48:
47:cf:be:fc:1a:52:a5:29:32:96:a6:d0:3b:33:b1:5e:38:b7:
98:bd:99:0c:e3:7f:03:4b:31:4f:9a:a6:55:95:5c:b0:ba:4a:
45:6a:cc:3c:86:9b:7c:58:07:2a:9b:5c:b4:b7:70:a1:36:36:
12:a2:30:f7:8f:5e:b3:0b:5b:ca:b8:ff:f7:c4:0f:cb:9f:44:
7d:63:2c:68:c1:45:48:ea:b6:9c:1e:7c:26:1c:f8:a9:f5:c6:
73:7c:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:14 2026 by rpki-client