Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File: JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier: QlNr9Y5LqoEd/2w1ACkBknoeCoT4hRZshYQCieq4q20=
Subject key identifier: 08:DB:4C:71:9D:99:D9:CB:25:C0:11:BC:FE:CC:F1:05:35:FD:6A:AC
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 019D28BBB3389B7A39EA373FF29E0738ED29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: IYGAT9JOggdgIzWw5Z6Q-LvafsU.roa (hash: 1AFyldkPiOPqEw+6SWUdNjowNkvDINTfUcjnk283dIQ=)
2: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: buolQUYaIS+R+VnU0Unsz+lF9w7SeO2Lo5P1uSY1EFw=)
3: LA_XeJ2XL6uqqIjDC-DrFSY7Rts.roa (hash: 9TX7Fzg1+Qnk+2k2ngL2zOqaTn3qXWn6P9IDGR9xUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b3:38:9b:7a:39:ea:37:3f:f2:9e:07:38:ed:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=08db4c719d99d9cb25c011bcfeccf10535fd6aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:4f:4d:67:90:3d:83:0a:68:c0:9c:8e:6f:
b7:68:cd:80:5e:29:18:1f:e2:3e:12:fd:94:d0:7d:
37:4d:03:72:39:dc:36:78:f9:9b:8f:06:86:2f:0a:
93:52:66:35:09:ab:51:64:dc:c4:30:c3:bb:ae:ed:
d2:c5:43:b6:60:7d:3b:1e:ee:6e:c9:8d:e5:d2:84:
25:41:ed:33:1d:73:51:59:12:60:8d:a6:43:39:64:
ba:80:4b:4c:98:c8:84:0d:0d:73:94:bd:47:c1:42:
8b:b2:a0:b9:fc:a6:66:98:90:99:30:3e:da:74:d2:
67:d2:8a:1d:91:9e:a6:7e:76:2d:43:d1:d9:06:7d:
0a:75:88:c7:c8:d5:43:f8:eb:75:a2:a9:ff:fc:38:
77:67:e3:0e:36:c8:50:7b:52:8c:1a:ad:bc:d7:9a:
68:6d:d9:03:9b:a4:3d:3f:4f:31:47:27:da:87:7f:
9c:7f:77:e4:db:f1:b3:60:1a:b3:ce:6e:83:f7:6b:
f3:d8:cd:ec:d2:3b:d3:df:0f:db:0c:f9:f5:e1:2c:
21:f9:f9:35:bf:3d:25:37:2b:02:db:c5:cf:3d:12:
c5:4a:ce:f7:71:7b:bb:d5:fd:56:9a:ce:16:64:80:
6b:d1:1d:14:06:ba:40:1a:96:c8:1c:51:01:18:25:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DB:4C:71:9D:99:D9:CB:25:C0:11:BC:FE:CC:F1:05:35:FD:6A:AC
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:35:78:42:a3:a5:d0:5a:35:a0:3f:7b:84:53:30:5d:f9:
9b:8a:01:f0:cd:9b:72:6d:d3:20:3b:83:42:1d:83:6e:1d:37:
67:de:6f:9b:5c:2f:69:13:0d:c9:0b:e4:02:a7:5f:cf:5f:8e:
4a:6d:b3:f4:ed:2e:02:ea:ec:1a:b7:84:8c:81:a9:9c:0f:8f:
00:c2:ac:5a:e4:41:c7:8a:ad:f6:ed:32:3f:5e:13:e9:6f:d6:
3a:a8:51:a3:2d:b8:46:fc:8f:a4:c8:be:75:b0:51:fb:70:3e:
37:7c:98:55:b3:78:08:01:bc:28:b7:cc:fb:40:83:32:2b:fd:
d1:6d:f6:01:8c:f8:fa:85:4c:8b:f2:36:d7:50:57:af:15:62:
49:93:35:85:c5:d6:9d:f2:f8:ee:3b:1f:0f:19:09:44:31:df:
bf:2d:4d:c1:eb:ac:4c:d7:73:37:21:e2:d9:2a:ab:aa:a1:4e:
1f:e0:4d:46:e6:58:63:62:7f:18:85:79:1c:4c:a4:8d:80:bb:
d2:65:22:c7:ee:d3:86:2b:28:a2:21:ea:61:36:42:59:3b:1a:
31:0a:d1:b9:e7:c9:29:11:60:15:d7:b0:7d:2d:e7:65:ca:03:
95:a2:f0:e1:59:79:33:dc:e8:f5:5e:4e:41:f9:ea:4f:88:fe:
4e:83:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:32 2026 by rpki-client