Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier: K+c7ZU/fAoYMSrIVx1zzHBjeY2060+G2zJlBsEddbYY=
Subject key identifier: A0:EC:27:45:0F:90:B6:40:A4:B3:D1:A1:20:52:AA:1A:AA:41:B2:9C
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 019D27A8F34D0560C8B1E66A3D90BAA2D890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number: 1368
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: CqqPebvxDyQ9VmOyZwBKKuRqCRAiRa1UfqCg8EiBohI=)
2: fxml6X6RQAn0rnCF7UcyPPHDlSM.roa (hash: a27AW/vQtgWKJVubyWNJsfqn7BeJp/kgORFP8iI7QAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f3:4d:05:60:c8:b1:e6:6a:3d:90:ba:a2:d8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=a0ec27450f90b640a4b3d1a12052aa1aaa41b29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:d4:a7:8c:11:e7:7f:16:d0:29:fe:2f:9c:
bc:b7:d0:e7:f1:dd:00:fa:58:ea:77:dc:59:eb:1e:
79:b0:b6:d3:18:ca:0d:22:e0:f6:c5:b4:e7:35:46:
4b:66:45:40:16:23:90:de:11:6d:94:f2:93:e4:85:
46:2f:e6:f7:b1:53:a7:5b:79:2d:5d:46:01:30:d0:
72:75:93:e2:1f:a9:85:d3:16:91:69:7d:12:63:37:
88:fd:d9:fe:df:26:d3:49:b7:74:6e:6b:11:89:b7:
69:93:3c:53:86:b0:32:89:70:5f:13:44:b9:5e:94:
1f:60:c1:74:b2:5b:84:bf:7c:99:44:1b:6c:68:13:
6f:22:8f:3e:15:3b:c5:13:db:f2:74:87:73:11:72:
96:81:9a:e6:2b:01:3d:2c:a3:70:76:dc:70:c2:ec:
ab:0b:a8:71:71:09:a7:29:8e:91:e3:64:46:f8:fa:
93:c1:0d:b9:d5:56:42:1f:c6:04:2e:bd:09:ba:b9:
0c:16:96:2f:d2:72:e2:05:cf:f1:c4:22:db:02:58:
a6:d3:7e:39:85:99:75:9e:d1:a9:18:b8:cd:20:d7:
12:9c:31:da:b1:90:8b:ad:ec:51:f2:05:27:aa:76:
bd:75:9b:67:6f:26:e3:12:6f:37:9b:ee:32:fc:fd:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:27:45:0F:90:B6:40:A4:B3:D1:A1:20:52:AA:1A:AA:41:B2:9C
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bb:7a:ea:63:4c:d7:57:cd:f2:d3:77:5c:7c:7f:a6:cf:49:
a5:03:b1:9e:53:04:99:00:7d:fd:30:01:35:44:b1:35:fd:f5:
f6:02:f6:fe:74:dd:7b:25:08:ef:47:ab:41:81:dc:2d:a1:6a:
de:cf:54:b1:54:86:af:92:b0:65:b4:50:2a:b3:d9:69:f8:d2:
c5:4a:ed:ba:37:1d:67:ab:d8:09:d2:90:8f:79:04:cd:56:48:
7b:47:1a:45:4c:44:42:1c:61:19:45:f5:28:d9:84:1b:4a:94:
41:81:4c:ff:15:e6:17:4d:54:dd:60:11:40:9c:bf:de:c2:97:
c4:f2:4f:1d:f4:41:e3:79:20:8d:a2:7d:41:87:ab:d3:fa:61:
21:6e:01:79:4a:16:dc:4a:77:77:34:f4:5b:b7:3e:f4:0a:79:
8c:30:80:b4:bc:e8:fd:09:09:9a:0c:65:21:52:cb:bf:ae:d4:
2d:92:22:56:63:65:8d:52:6d:25:4d:86:08:55:c6:01:81:59:
d3:13:4d:74:27:fb:96:59:45:de:8d:03:33:e2:6f:40:0c:4b:
0c:2b:9c:aa:fd:4d:0d:cf:52:5d:7c:0f:be:21:ff:f9:5e:e0:
fa:7e:34:19:2e:44:03:92:c7:3b:bc:a5:34:ec:6f:f6:fd:8f:
2e:e2:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:54:51 2026 by rpki-client