Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: AYAwa5a3R1mQ5XPk8LqD0Mndyi3yKaFLOuS8yTVg4qg=
Subject key identifier: 73:6A:B8:27:F8:EA:26:1B:05:4D:33:27:86:8D:03:FC:4C:3F:9F:0D
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 019D28166C38D078A95B95332541E612220F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: RvawC4g7yiPM3HHbx95vx/+AaAiATFRwJA0NkI2Z4+c=)
2: VnCUFpdYn6p9SWgBKCYPBMB_uag.roa (hash: CTE/bVTVJxivSVfHlKssz3gbLXyaKsvtaNtZL1+VzWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6c:38:d0:78:a9:5b:95:33:25:41:e6:12:22:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=736ab827f8ea261b054d3327868d03fc4c3f9f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:35:d3:f8:9b:46:ce:ae:d3:c2:6a:2b:32:
23:a1:35:b0:45:6c:95:f2:75:b9:76:6d:84:01:f4:
2f:ff:6a:74:31:8b:66:f0:db:39:f5:06:f8:b3:fb:
0e:a4:8e:b8:06:db:35:f8:34:30:f0:26:75:3f:d6:
23:38:2a:eb:64:0c:59:66:f4:3c:df:de:40:6b:90:
0f:62:dd:5b:d6:04:f3:23:5b:08:7d:be:07:3a:e9:
00:6e:84:45:ba:cd:d4:a5:99:1c:9a:32:77:ab:a3:
41:03:51:70:3c:da:f2:bd:60:12:7f:d8:d6:a9:96:
11:d8:7c:e3:33:d3:5e:a0:17:42:00:c9:df:71:29:
ce:a1:07:87:bf:6f:d7:4b:32:3e:aa:00:97:1a:08:
db:4b:0b:05:8b:ea:8d:20:41:30:ed:48:25:68:9d:
8c:db:6e:6e:dd:b4:e8:f0:b8:07:e3:54:bb:94:1d:
e3:98:ed:36:82:d5:6c:39:67:4e:42:06:48:e4:11:
28:f1:39:06:92:62:3b:ce:dd:a9:86:a2:6c:f6:2f:
44:e9:5f:3e:d5:ef:e1:80:75:f6:57:cb:1f:4d:a1:
02:1e:07:13:00:8b:4c:5f:77:e4:14:37:65:0f:c1:
e7:46:35:65:53:36:57:9a:f8:72:0a:93:c6:5a:b7:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6A:B8:27:F8:EA:26:1B:05:4D:33:27:86:8D:03:FC:4C:3F:9F:0D
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:15:b4:f7:a4:c5:d1:d5:59:3f:9e:a6:4e:f4:80:2e:a0:3c:
9e:7c:79:ff:96:a9:3a:c6:68:86:fa:d8:3f:77:70:d8:58:c8:
27:f9:6f:16:af:59:e5:d6:56:fe:9f:4e:59:be:da:ce:c6:2e:
ce:9d:12:59:f9:65:bb:84:e2:9f:81:de:39:e6:3b:bc:bd:76:
2d:f5:c3:26:f1:e1:71:0c:2b:b7:6b:2a:d3:5a:ab:35:f2:69:
86:b6:a7:0f:67:7b:44:9d:50:dc:81:a4:e9:a8:74:4b:62:38:
c9:33:d3:22:5d:59:b0:1b:e8:62:be:f8:b5:f6:5a:4a:b9:07:
0c:36:e3:0e:99:14:2c:c3:9b:06:f5:9a:94:b7:84:e4:a0:99:
7d:dd:a4:00:af:1d:81:92:50:2d:9b:57:fe:55:42:cb:fe:5a:
6a:8d:4a:0b:74:38:cc:b5:89:b7:ff:10:d2:9c:5e:bd:fe:6c:
a9:ea:b1:77:f5:44:07:24:df:52:82:25:64:76:07:7e:fa:97:
1e:72:6c:f9:d3:77:ed:6c:2b:b3:94:fc:89:39:3b:7f:7c:f3:
d5:95:b9:85:23:bf:28:26:aa:c3:30:7e:eb:37:5c:6e:6e:52:
06:d1:5e:91:6a:b5:fc:dc:b6:36:cd:df:ca:0a:c1:9f:b9:d1:
df:8a:ad:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:47 2026 by rpki-client