Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier: EHNtW8yzeW5m5BQJ60VeD646GEEmjeUxJZpvS5UpPis=
Subject key identifier: A9:15:A6:F2:2D:48:9E:2C:8A:BC:9F:D6:1F:8B:7C:E9:09:45:0B:F0
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial: 019D265FF1224A7530FD88DF03062D8FDE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number: 03D7
Signing time: Wed 25 Mar 2026 19:01:55 +0000
Manifest this update: Wed 25 Mar 2026 19:01:55 +0000
Manifest next update: Thu 26 Mar 2026 19:01:55 +0000
Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: WKHMMRwD7zfHoFhWdofTw/INXqBN4REyIP9/JOkvyFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f1:22:4a:75:30:fd:88:df:03:06:2d:8f:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
Validity
Not Before: Mar 25 19:01:55 2026 GMT
Not After : Mar 26 19:01:55 2026 GMT
Subject: CN=a915a6f22d489e2c8abc9fd61f8b7ce909450bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8c:d3:7e:50:46:9b:ba:b1:39:75:d5:28:a2:
5f:0f:4b:74:84:94:36:b6:ba:71:24:ba:70:5f:69:
01:a4:07:d4:08:1e:cd:2c:35:d4:da:ad:7a:f1:b9:
9f:1f:18:f7:28:91:48:55:af:1d:59:ce:96:b6:25:
69:22:e1:42:d6:a8:5c:08:b4:11:82:77:0d:0d:dd:
fd:6f:0c:14:43:8e:40:26:f8:28:19:20:ab:ab:02:
98:9e:02:93:16:10:fb:e4:d7:37:1d:5b:79:59:a7:
47:34:da:55:81:0c:fc:97:d5:45:78:1a:0c:3c:16:
87:61:5c:2c:53:d0:ef:05:f3:fe:97:34:35:ca:a0:
4d:3a:d4:3e:cc:51:f5:88:0d:13:7b:14:6f:4b:2a:
ca:81:c8:67:d8:41:11:64:4f:e5:1d:5b:e3:00:69:
01:d7:d2:bf:2a:ba:ad:9c:6f:61:8c:93:cf:75:ea:
61:e5:ed:32:78:17:f5:a7:57:3e:dd:6e:31:51:fe:
27:cf:cf:df:56:f4:c7:1d:19:f4:eb:09:92:bf:3e:
cf:1e:12:ba:dc:59:59:3a:b1:9f:80:e6:6d:00:5a:
94:b3:00:60:7a:59:61:b8:db:f5:9b:77:ba:51:5d:
a7:35:9b:d9:d5:78:78:40:f0:12:c1:f2:f7:4f:4c:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:A6:F2:2D:48:9E:2C:8A:BC:9F:D6:1F:8B:7C:E9:09:45:0B:F0
X509v3 Authority Key Identifier:
keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9e:73:75:51:01:90:1c:de:6d:79:f9:8e:7e:4f:69:58:cc:
e3:12:c5:25:a3:be:3e:c8:78:ab:ac:0e:da:e6:b6:8b:15:d0:
14:e8:bf:af:37:62:c4:5f:e8:4b:9e:cd:f7:2b:08:07:01:db:
37:d4:18:e3:3c:0b:61:3f:54:95:e1:5a:b8:34:2e:0e:76:29:
4d:99:fc:b5:18:b8:cb:e9:fb:5e:5a:8c:89:76:cb:f9:d4:7b:
01:1b:f0:42:51:43:33:4b:b1:a0:73:1c:51:01:be:b8:f3:6d:
34:ec:76:8a:93:a7:9d:bf:8a:f3:e5:21:45:b0:70:31:c8:98:
2f:bc:33:87:dd:5e:0f:ec:36:e6:a5:22:be:4e:be:12:da:bc:
82:f4:e0:1c:c6:d2:f8:30:96:2f:8d:88:38:cb:9d:54:b9:96:
b0:4f:43:46:4e:73:dd:17:e3:bb:5d:6c:9d:68:c8:4c:2c:ac:
b1:a6:57:c5:8b:20:3c:ec:c0:1c:ec:d5:2a:2d:cd:18:4c:04:
a4:82:3e:59:b8:71:ba:35:32:98:11:33:e8:a8:a4:ba:47:f7:
db:a9:67:2a:f0:cc:8d:c4:17:4e:d7:35:f9:de:b5:34:9b:5d:
12:ee:ee:61:51:c2:ad:ee:a6:3f:6e:da:94:56:d0:25:53:08:
dc:ae:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:31 2026 by rpki-client