Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
File: JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft (raw, json)
Hash identifier: PwGfO1Xv6JaxEJz2oWBK0kcq9xPZddgXYRMLc3jHfpc=
Subject key identifier: 9A:1C:F9:E9:A1:08:20:B4:2B:27:A2:75:2A:A3:46:E6:C1:4C:98:29
Authority key identifier: 26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
Certificate issuer: /CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Certificate serial: 019D25BAD039C2A384F16FED632824C58C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
Manifest number: 8A
Signing time: Wed 25 Mar 2026 16:01:33 +0000
Manifest this update: Wed 25 Mar 2026 16:01:33 +0000
Manifest next update: Thu 26 Mar 2026 16:01:33 +0000
Files and hashes: 1: JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl (hash: qKXvcZpJ4vIKsWP1ghY9U9HkzNFYTix3C2wHDxb+nBw=)
2: dYe6I9SYNrNnhKkXOoAoD02mEm0.roa (hash: 09A3/mfGOz3JnMMn3RkVi1jZZF6RAGtFJEOIwgWgPJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d0:39:c2:a3:84:f1:6f:ed:63:28:24:c5:8c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Validity
Not Before: Mar 25 16:01:33 2026 GMT
Not After : Mar 26 16:01:33 2026 GMT
Subject: CN=9a1cf9e9a10820b42b27a2752aa346e6c14c9829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:05:e8:08:cc:97:da:82:8f:c4:15:1b:91:
03:74:a1:7c:9a:7b:33:92:2c:57:ed:49:05:d7:b0:
fe:d1:c5:2e:71:44:0b:60:be:9f:58:18:90:3d:8b:
40:f5:f0:12:ba:a7:6a:8d:a2:b3:21:fc:5a:22:29:
d0:67:23:2c:4d:e6:45:79:b3:5d:e4:44:85:7e:a0:
0c:6e:9c:c2:82:a9:09:1b:20:96:f5:67:1a:f9:db:
ad:6e:fd:dd:71:cd:a5:7e:73:9d:1c:88:ff:1f:e0:
f5:a7:4b:ce:2d:3c:72:74:f2:34:d5:dd:2a:9e:92:
ba:dd:60:e0:50:a5:50:2f:36:4d:75:52:30:85:33:
2a:64:f0:30:0a:5e:4c:58:2d:6c:f9:e8:8e:69:fc:
03:31:ef:af:38:f0:fe:9b:25:1a:c3:53:1c:18:c6:
9c:dc:40:44:2f:c0:6b:62:f2:45:89:b9:a3:c4:63:
e0:a6:0d:73:94:f1:cc:29:4e:86:23:69:9f:da:7b:
cf:44:a1:69:d4:7d:99:3e:7b:4c:8f:ee:98:62:c0:
c7:4b:f3:f2:59:45:ea:bc:d4:77:c8:dd:d2:ff:3a:
b9:17:81:69:a6:76:1c:49:3d:4a:9d:dc:af:28:31:
9e:38:a5:27:ae:1d:1e:71:0e:61:17:f5:e6:45:bc:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:F9:E9:A1:08:20:B4:2B:27:A2:75:2A:A3:46:E6:C1:4C:98:29
X509v3 Authority Key Identifier:
keyid:26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a4:4e:97:dd:24:43:24:ce:29:0c:4e:2a:e0:64:48:4a:ee:
4d:8b:98:5d:56:81:e9:db:94:f9:01:c4:f9:74:bf:15:05:e3:
95:de:7e:48:3c:f2:6c:b7:10:63:96:26:5b:a6:0e:3a:e7:48:
b0:90:8e:7e:96:8d:a2:c3:da:5a:84:28:0a:bc:63:cf:01:7b:
01:f1:66:36:c0:02:b6:d2:7d:94:38:8f:78:bb:b7:60:31:ef:
74:f4:77:5b:19:6d:49:c6:4e:1a:80:40:7c:04:fe:10:f4:aa:
b0:dd:0a:b4:f7:a3:15:4e:0e:b5:39:62:29:20:09:4d:b0:2b:
c1:d8:a4:be:09:99:d7:00:e1:64:be:76:e3:f6:43:87:36:a1:
9e:ea:2a:83:15:ed:e0:a9:2a:70:f3:1d:52:55:c7:b5:3c:94:
fa:a6:87:34:ee:32:63:ec:a4:80:af:d3:f0:b5:ee:91:ff:1e:
97:3e:cc:88:49:ae:08:b6:e7:e4:6a:fc:dc:fd:27:ac:3c:2a:
b8:cb:3a:26:43:a5:52:db:55:1c:8d:0f:16:22:3f:b6:bf:5e:
60:1e:a4:84:35:40:02:4b:62:28:ca:69:60:c9:0d:4c:14:1f:
05:b6:3c:89:fc:93:90:b9:70:a0:4b:23:1f:4d:c2:e7:5a:18:
36:3b:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:31 2026 by rpki-client