
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
File: JvRVgKY2EDzJWr6BCg0GkouaDd8.mft (raw, json)
Hash identifier: 781qIqvAvym0x9SgyaGPDc29cFJ5idC8/MKASdUC1Z0=
Subject key identifier: 83:AE:A4:9E:57:40:C5:7A:1A:96:9A:33:05:37:BF:3E:5C:97:20:23
Authority key identifier: 26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
Certificate issuer: /CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Certificate serial: 019D2A0453ED39457F51FADB1340B5FB34E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
Manifest number: 4D
Signing time: Thu 26 Mar 2026 12:00:19 +0000
Manifest this update: Thu 26 Mar 2026 12:00:19 +0000
Manifest next update: Fri 27 Mar 2026 12:00:19 +0000
Files and hashes: 1: JvRVgKY2EDzJWr6BCg0GkouaDd8.crl (hash: acaKv9Vl7JlXRlcATl8B8tXCVfTI0A04NW1PNJHYUa8=)
2: w-nnLB0gJHLqHYNGFppYN7WkZFM.roa (hash: QK4oKJXySakBc6G1Ar7UfRyPt44Ci6G96TsVap7g1D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:53:ed:39:45:7f:51:fa:db:13:40:b5:fb:34:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Validity
Not Before: Mar 26 12:00:19 2026 GMT
Not After : Mar 27 12:00:19 2026 GMT
Subject: CN=83aea49e5740c57a1a969a330537bf3e5c972023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:9d:f8:f5:2e:1e:cd:95:46:92:90:b0:ae:
94:e9:9b:85:9a:1f:e9:5a:b3:ea:c6:c7:c4:6e:3f:
54:1b:5a:cf:77:86:f5:5d:c8:32:88:a5:a1:d3:49:
2e:43:26:d4:39:01:9c:54:54:65:ca:61:1f:f5:23:
e1:83:4a:bf:1d:2e:34:8b:32:db:cf:83:89:cf:4b:
2e:bc:27:0a:b2:7d:7f:2a:79:63:4c:e0:95:d0:14:
c4:84:51:c4:1c:13:9b:a2:5b:37:bc:97:c8:db:f5:
a8:c1:76:c7:e6:23:b6:d4:f4:c9:b4:71:0a:2e:af:
e6:28:4f:6d:6a:82:1a:c8:20:07:4c:70:d2:b9:79:
8c:b8:54:9f:8a:a7:4b:18:d8:e4:c7:0f:2a:8b:da:
2e:1e:53:0d:f7:c7:96:43:c4:20:08:c0:6c:ac:dd:
f8:da:77:28:6a:0e:9f:37:d4:cf:7c:31:b0:7f:58:
f6:5d:59:69:ad:f7:c3:3d:d1:e6:9f:14:da:44:82:
d0:04:78:8a:e0:0c:45:71:cd:df:48:84:f2:0e:1e:
0a:51:c8:2e:5b:4c:67:66:2b:58:6b:08:45:53:39:
44:44:86:44:c8:64:99:30:c6:3f:dc:ce:94:93:ce:
6c:0b:c6:ef:8b:79:f3:dd:b3:6b:81:d4:f3:78:1a:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:A4:9E:57:40:C5:7A:1A:96:9A:33:05:37:BF:3E:5C:97:20:23
X509v3 Authority Key Identifier:
keyid:26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:11:3a:2c:af:da:ac:fc:70:72:72:a8:2f:09:dc:50:80:48:
90:ba:16:e9:31:2a:73:51:d3:96:34:39:5e:63:93:6f:f4:75:
94:3e:67:ee:d0:be:16:c7:53:da:8a:20:83:a3:31:d9:2b:08:
d7:1e:c1:31:5e:b4:2d:76:f1:9c:fe:71:3e:5a:5a:46:40:5f:
8a:3d:2b:39:f5:c1:f9:a8:ea:05:98:f5:b0:19:67:9a:42:27:
de:35:e5:50:f2:06:4a:27:8c:5b:68:b5:64:f5:d8:0a:54:83:
fe:27:1b:fa:d7:b3:a7:c0:df:03:d3:23:eb:fc:60:4e:77:fb:
eb:57:f0:cb:1c:7e:65:9d:44:72:23:61:5a:13:52:42:84:31:
8e:43:47:a9:d7:52:be:83:e3:9d:8b:8b:bb:8a:cd:11:a7:db:
ba:f4:7b:ce:a7:06:c6:df:2e:6a:c9:d7:dd:90:d6:e2:bc:d0:
eb:99:3f:fa:e9:2f:f1:a2:b2:ae:de:8f:75:3b:e8:e7:1a:0a:
52:30:23:e2:12:cb:d2:d4:ad:7b:42:55:a2:e3:ad:e2:cc:91:
a7:a7:08:5b:f1:b3:8e:78:b6:bd:17:58:4b:47:0b:7b:94:08:
e8:82:dd:21:a1:be:fc:49:01:50:43:3d:2b:65:32:df:3f:e7:
ef:38:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:13:51 2026 by rpki-client