Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File: JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier: g3hCLop/egI7WAyEeTu0i6R6iCl7A4R2JQOoXQE593I=
Subject key identifier: 38:06:D2:F8:FC:DD:C7:78:28:55:D7:D0:E7:EC:FE:CF:EE:C5:44:95
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer: /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial: 019D2704A3095F5D40DAF957C06794F331A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number: 13A1
Signing time: Wed 25 Mar 2026 22:01:48 +0000
Manifest this update: Wed 25 Mar 2026 22:01:48 +0000
Manifest next update: Thu 26 Mar 2026 22:01:48 +0000
Files and hashes: 1: GhP6Vn--SqdLNlAbm7AaZpnExPU.roa (hash: LE4ZlCHS2qUrwNtls6Qsm1YOj9fYR0KcBc+qgdSoRxA=)
2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: hLHoYHDplPgJFVTo2fQdZ9cbnEN8aLbZh2LEHPqs8o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a3:09:5f:5d:40:da:f9:57:c0:67:94:f3:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Validity
Not Before: Mar 25 22:01:48 2026 GMT
Not After : Mar 26 22:01:48 2026 GMT
Subject: CN=3806d2f8fcddc7782855d7d0e7ecfecfeec54495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:e2:7f:51:4b:64:94:2d:70:7b:30:ab:90:
b0:c7:74:6a:6a:60:c9:16:94:f4:bc:ae:ec:ef:11:
32:52:8f:2c:f4:c8:6c:2c:2c:32:01:da:72:7c:16:
2f:21:0c:d7:8a:8a:00:d1:76:db:cf:a9:74:c2:26:
1e:10:9f:4c:0a:ea:34:b3:d6:eb:33:1e:3e:92:f6:
ba:75:bc:61:77:56:98:b5:8e:ab:5e:2f:80:bc:f6:
5f:a4:16:9a:a4:8a:38:8a:5e:de:74:af:95:b1:1d:
6d:4a:83:ee:2d:7b:6e:55:50:3a:44:1c:59:48:dd:
ad:8d:e5:7e:b1:4a:49:8c:cf:fb:64:c8:4e:04:79:
fe:29:83:57:3e:16:82:7b:18:57:4d:52:8f:37:7c:
44:24:d1:72:38:71:4f:d9:17:a2:9b:10:4b:62:49:
72:a0:8a:10:1e:cb:f9:c7:7d:91:ac:82:c8:5f:09:
f0:55:f6:68:c5:4d:ae:0f:26:8a:02:fb:c0:cf:0e:
8b:6d:d3:11:77:25:9f:4d:e0:ce:4f:62:32:0d:b9:
81:1a:3c:c4:75:d3:d2:00:e0:37:16:f1:71:a7:f0:
64:ef:5e:21:37:27:91:6a:90:fb:0d:a6:e1:9b:9e:
2a:2a:0d:34:e7:1e:c6:24:ec:7f:45:44:e8:89:31:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:D2:F8:FC:DD:C7:78:28:55:D7:D0:E7:EC:FE:CF:EE:C5:44:95
X509v3 Authority Key Identifier:
keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ad:87:54:7f:28:14:06:04:3a:c1:bf:26:84:26:8a:15:c2:
0a:ac:92:bd:61:2c:c8:b6:e3:84:bf:15:da:9b:c0:10:81:46:
22:3e:5a:18:d1:50:57:2f:6f:42:2a:b6:5f:d2:c3:af:31:42:
3e:a5:05:d0:7d:7c:40:07:70:62:78:c7:2e:5e:15:e6:d8:e6:
4e:86:e2:cf:6b:a3:22:93:aa:37:3e:da:e0:61:5d:5b:7e:22:
b9:fb:3a:8e:6b:1d:a9:d4:51:7c:70:5f:13:24:7a:ea:7a:06:
91:d7:9e:db:22:fb:02:1d:8a:10:f5:99:38:b5:9d:6c:11:7b:
af:24:7b:7b:9f:58:b4:36:86:32:7e:44:2a:81:3d:37:04:15:
fe:49:5c:93:23:74:75:b7:39:de:94:7f:99:ab:52:2a:70:60:
5c:aa:0f:0a:48:e2:1c:06:ff:fa:59:0e:3c:73:cb:25:c4:ea:
bd:4b:b5:64:71:33:cb:3c:3f:3a:65:d5:89:e8:f2:e0:37:35:
c1:a5:96:b2:1d:54:41:c8:c9:7f:29:0d:e9:db:4b:a8:bb:78:
bf:d2:69:43:0a:67:0e:e4:9f:d1:c7:85:44:49:27:5f:85:07:
bb:05:5f:b9:04:fa:d9:ac:b1:07:7a:18:51:4e:d5:8f:6f:75:
90:40:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:48 2026 by rpki-client