Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: ZzAvltNy2o26fm9yV24ieSbq/+5yEMQpO6wPB26pQbE=
Subject key identifier: 55:26:D1:08:8F:07:B2:B1:70:C1:D2:27:B3:07:43:65:85:A6:70:95
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 019D265F57DD9BEECCFC666DE779FCF4F62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 14DF
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: IMVu+S+tnpmRJC1bT9Wf22s9nbgAB/l/GGqNysCJZqg=)
2: p5WK8SqdNKrQAJq8_gZrFH1Py64.roa (hash: Nm8rFW/KHjUYCTq0McUqQzXzdbDIF9y2fLjjuqM6uz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:57:dd:9b:ee:cc:fc:66:6d:e7:79:fc:f4:f6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=5526d1088f07b2b170c1d227b307436585a67095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:72:99:57:4a:28:f1:42:1f:0d:d2:3d:01:
6c:1f:b4:0c:ac:34:5f:5d:d3:88:ef:70:73:c1:26:
d1:47:9a:22:19:8f:55:27:15:2d:1a:85:59:d9:1a:
27:6f:0b:92:60:0c:91:eb:19:c7:ca:5b:a7:90:d6:
69:10:ed:ab:7d:50:61:c5:d1:0e:bc:09:5d:16:fb:
9b:db:62:eb:b9:be:59:b6:db:b6:e4:bc:3d:ff:8c:
bb:a9:05:7f:f4:bc:41:e7:0b:20:ef:9e:4c:a7:22:
ad:1f:60:07:6d:9d:3c:64:a6:34:a9:ad:17:82:36:
22:ec:5d:df:b9:7d:c8:fe:75:43:7d:a6:42:6f:a9:
a4:13:62:b7:f6:47:a8:61:0a:25:12:9b:75:b2:9a:
27:73:2c:33:b0:3c:fd:82:5a:3a:70:ec:5b:20:db:
0e:56:84:ce:45:ad:96:0d:44:ed:a1:e5:36:91:03:
c6:cf:2c:a0:f8:90:7f:d6:12:cf:20:60:b0:c2:44:
b6:bf:c4:e6:2c:4b:61:e2:ea:83:9b:d1:d3:1e:c0:
cf:64:96:bc:52:53:56:ec:db:19:96:f4:da:7e:c2:
21:2b:4c:b4:6d:8c:3e:31:2f:f7:4b:87:fa:20:3a:
ea:19:b1:9d:8b:75:a6:79:c0:eb:b0:54:7b:c3:e1:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:D1:08:8F:07:B2:B1:70:C1:D2:27:B3:07:43:65:85:A6:70:95
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0b:05:0f:68:0f:ac:68:aa:e6:85:3d:fc:ec:46:45:4a:86:
eb:d4:2e:d7:57:ed:ee:f7:f3:2b:de:45:be:6b:33:6e:38:d3:
6e:e6:08:c9:fe:1b:87:fa:08:81:74:aa:14:f9:4a:9e:82:4d:
fc:13:52:ac:13:43:a0:26:f8:b2:d9:9b:21:16:a8:ad:9b:fa:
17:9e:45:e7:0f:2e:39:9c:14:6b:18:97:9b:4f:60:e9:a4:83:
d9:27:44:7a:de:2b:27:ea:3a:f7:25:11:f2:58:50:13:6a:1b:
b5:14:b1:cc:06:81:3e:c6:df:d3:af:6e:a4:da:eb:34:fc:34:
1c:b9:20:be:d9:53:b9:56:37:a9:49:cf:9c:8c:1c:47:80:39:
14:38:4c:69:0d:89:a7:14:65:56:d2:c1:a2:aa:be:1f:ce:2e:
30:16:45:06:4f:25:d2:e8:9c:17:3d:9b:86:82:bd:34:67:52:
1b:81:ea:ba:f3:79:14:24:82:0c:a5:5f:a1:03:d8:ac:cb:74:
34:5e:99:bb:bd:01:3a:ec:c6:c0:cd:63:62:bf:70:bb:d0:83:
15:49:69:a8:d1:31:d9:61:b9:21:13:3d:4b:92:60:f9:b5:49:
1d:e9:3c:94:09:b7:97:b5:34:20:37:3e:14:ff:88:8e:eb:25:
cb:45:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:20:54 2026 by rpki-client