Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: CQKLjiChK/fvNveclKOeuaACuHitFAKqFRedvq5qSOo=
Subject key identifier: 15:83:AB:35:43:29:DC:63:1D:DB:65:37:11:CF:03:46:9F:F2:0C:CE
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019D28F2082DBADF8C7F67D1782B26C7FA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 026C
Signing time: Thu 26 Mar 2026 07:00:43 +0000
Manifest this update: Thu 26 Mar 2026 07:00:43 +0000
Manifest next update: Fri 27 Mar 2026 07:00:43 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: OH+yhzlksmPnys7QWdCUcOQZbeGLn/yxMbhEM/T5tS8=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:08:2d:ba:df:8c:7f:67:d1:78:2b:26:c7:fa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Mar 26 07:00:43 2026 GMT
Not After : Mar 27 07:00:43 2026 GMT
Subject: CN=1583ab354329dc631ddb653711cf03469ff20cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:f4:09:45:fd:08:bb:8d:6e:96:b7:1a:76:
83:ed:ec:6b:83:6d:5a:12:76:16:5d:a5:bd:d6:f2:
0b:af:e6:48:4b:f3:55:38:c4:1e:58:a1:ea:e3:a1:
5a:90:97:35:43:d8:91:3b:04:d2:5e:a0:67:f1:4c:
90:ea:e5:92:09:21:a4:68:82:bf:9b:c3:d3:0d:ef:
43:d3:a3:63:a0:48:c8:5d:b5:df:19:a0:16:2b:18:
ad:9a:87:77:0a:a2:e2:8f:0a:15:85:3c:8f:f9:3d:
4d:95:86:9a:2c:be:a7:fb:54:a5:5e:cb:e5:13:06:
04:f0:8b:39:79:b5:09:c4:92:37:10:0c:00:1a:be:
6d:ae:4c:86:94:fc:cb:23:1b:e8:4a:0c:50:a3:bf:
07:47:37:c6:97:9b:47:04:16:57:80:90:70:55:a7:
97:2b:31:43:5c:60:b2:3b:bb:a2:d7:be:eb:50:7f:
c5:5c:be:60:15:b2:6e:1c:36:2d:27:5c:c2:60:47:
89:08:f6:2e:ff:2f:c7:63:34:2a:64:4d:56:84:fb:
dd:32:fe:8a:10:25:74:e3:b3:f1:a8:f5:8a:55:8b:
e6:53:0b:f8:3a:2a:4d:6d:0e:a1:53:ff:7d:34:35:
f1:0e:61:d3:cc:b7:13:d8:ef:60:ab:63:16:f6:00:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:AB:35:43:29:DC:63:1D:DB:65:37:11:CF:03:46:9F:F2:0C:CE
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:29:9d:8a:10:46:3c:2b:a2:c1:77:2b:2e:e0:28:f3:5e:44:
0b:6b:37:22:c1:20:b6:33:66:21:28:75:a0:c4:b7:37:51:62:
45:bc:30:d9:69:0e:ae:53:c1:37:9f:40:fb:3e:26:65:58:43:
8c:0b:2c:f8:0b:3f:0f:88:db:d0:af:b0:56:3e:ad:04:d7:26:
9d:93:05:7c:a6:51:c5:c5:61:79:d4:5b:fe:71:a4:cb:2b:39:
4b:ba:70:06:7b:37:80:8a:9a:7e:c8:91:d6:7d:ea:68:91:9d:
40:34:33:fc:ba:a9:80:56:2e:5d:a5:37:34:8d:37:ed:fc:71:
08:57:5f:28:b5:fd:07:68:6b:2c:4f:e7:94:50:b8:81:47:e6:
66:95:2b:7b:56:f0:89:22:4d:27:b8:97:3b:b5:57:93:07:44:
d8:ab:e3:ed:3b:da:79:3f:c3:bc:8f:93:a7:1f:e2:ae:bb:4e:
dc:b1:ed:9e:7b:c6:33:e5:dc:62:f8:93:28:a1:ad:68:7a:d5:
b0:5a:cb:ec:33:f4:75:cb:79:d4:03:d4:d9:59:95:3b:d7:0f:
ea:b9:77:74:f1:f4:b3:03:27:5a:fe:87:5b:69:39:8d:1f:d0:
28:6b:df:3b:90:45:d2:7b:29:ff:a1:d6:6a:2f:17:20:69:c6:
79:67:7f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:42 2026 by rpki-client