Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: FHrETAuYvCdCH9tN5ga+7CUesMOHzJEQDhxskmF3a2A=
Subject key identifier: 28:13:BB:E6:43:F1:E9:74:35:EE:38:7A:2C:64:70:E9:AB:0F:97:7E
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019D2695E284D4420E3B401E240E58BEAF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: 5cSLqlVmv0Rs2yDGBt7p1e13zDJorkCDE8cL6bNjvZw=)
2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e2:84:d4:42:0e:3b:40:1e:24:0e:58:be:af:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=2813bbe643f1e97435ee387a2c6470e9ab0f977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:c1:83:ed:be:19:0b:74:56:5d:d7:7f:fa:
08:01:a7:4d:d7:1f:5a:e3:5a:86:72:92:0f:b1:22:
f2:82:8f:16:30:01:25:23:99:fb:91:0d:7a:30:14:
82:f0:2a:c3:60:ce:0c:97:21:6b:37:30:9d:77:f0:
9b:9a:75:a5:ea:42:b5:37:cf:1b:bb:93:8c:a0:10:
ef:96:17:f0:69:44:a1:6f:ff:19:04:3d:48:f9:9e:
c2:eb:78:eb:6c:dd:54:10:8d:41:cf:bc:27:66:37:
7d:d2:60:ff:18:13:52:63:14:3b:2d:85:c0:82:a3:
66:7b:cf:11:5e:ac:e7:8a:d4:9d:5c:81:31:9f:7c:
55:0a:00:9f:b0:41:da:91:fd:e8:5c:ba:e3:a6:ce:
90:13:f9:0f:7c:d2:f7:63:cc:5f:bf:57:51:3d:ab:
9c:5c:1b:7a:e7:ea:d2:af:d8:c9:32:a0:12:4d:3b:
80:50:d5:24:6b:17:dd:2f:94:ba:b0:b8:8b:c4:8a:
5c:39:f7:ea:fd:5d:d3:d0:57:ad:df:f4:b1:52:45:
15:5f:82:42:f6:e3:09:ed:7c:ff:77:b8:27:93:99:
46:f6:43:8c:8f:0f:71:3b:f8:6e:db:40:73:43:fa:
b4:60:aa:80:01:0d:d7:6a:79:3a:08:77:42:a3:55:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:BB:E6:43:F1:E9:74:35:EE:38:7A:2C:64:70:E9:AB:0F:97:7E
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1c:da:db:9d:c1:c7:56:43:a7:07:7c:68:61:d7:6a:92:84:
55:73:32:e4:4b:79:04:cc:39:40:cf:33:8d:d9:aa:9c:89:e3:
be:dd:8e:49:53:5e:35:ce:70:c2:9c:a4:a3:fe:91:53:b6:0a:
ee:a3:06:05:56:66:35:30:38:f9:c2:ee:3d:6a:e3:7e:cb:24:
12:5a:62:74:3a:a3:f8:ac:0c:ef:dd:27:fb:b6:79:0d:66:55:
9b:ac:68:c3:fc:70:81:f7:0e:d0:f3:ea:09:ef:f9:6f:c6:09:
a9:87:a9:5e:f3:b6:38:25:f5:71:b5:d5:81:40:69:16:63:f5:
c2:3d:9b:c2:ae:24:a2:f4:da:ec:61:af:81:32:5f:9c:f9:60:
f1:c6:90:22:00:2b:e3:b7:d7:89:97:f5:a3:fb:a1:6d:a5:40:
2e:18:35:5b:46:7d:0b:b0:7e:56:32:b7:96:92:1e:3d:89:e3:
fa:7e:ec:70:57:1d:8d:0a:bd:fd:a7:cb:2b:0a:e4:ac:5d:d0:
8b:02:03:e6:e0:e7:42:cc:7c:04:04:cd:6c:05:8b:77:53:fa:
fd:35:ba:10:f6:93:e3:33:2b:1e:e1:26:79:ce:68:64:d1:2e:
cd:f0:bd:0e:d3:56:d1:47:38:78:c7:93:aa:e0:be:20:dc:d1:
ea:eb:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:27 2026 by rpki-client