Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: d5rv+sy9aFRwH2vATvhXYHIZIfWPMIsVTy0QKRUIthk=
Subject key identifier: 53:35:53:BA:AB:A4:BC:80:E9:28:BF:D1:9F:DA:98:5E:6F:BB:12:C0
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 019D2772E682C1097D0026BF46987BA4B449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 0842
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: Wq4DJg4GVZMhuQcgMb7Uznz4AuTpqhqE8bG6/hJPje0=)
2: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (hash: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e6:82:c1:09:7d:00:26:bf:46:98:7b:a4:b4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=533553baaba4bc80e928bfd19fda985e6fbb12c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:51:76:39:2b:ea:8d:3b:85:50:d6:db:ae:
17:83:29:b0:97:a5:f3:5a:81:99:b9:f3:5f:10:a6:
f6:06:5c:04:fc:38:c4:71:a6:06:c9:75:1d:4c:ac:
1c:c8:f1:c0:de:ab:7a:5b:42:56:19:f4:77:e3:e9:
06:5c:14:c6:f3:91:c8:bf:0a:38:0f:d2:27:66:cd:
1a:be:51:18:82:0f:65:dc:6b:af:25:df:67:e0:5f:
7e:7e:d1:29:ef:e6:65:f2:86:27:38:a8:fc:95:cd:
51:17:2a:4f:6f:21:5a:44:2c:59:23:86:ca:e0:fe:
e8:e9:86:a3:4b:fd:b2:81:ab:ae:4b:b7:a9:ad:6e:
9b:6e:d5:23:1c:77:f3:31:84:92:7b:90:05:29:7d:
f8:92:22:9c:27:83:f2:6d:b7:be:69:f8:88:fa:10:
2e:9a:23:d1:18:16:28:cd:4f:d4:65:e4:8d:27:9d:
da:d8:ef:76:c5:fb:dc:17:59:2f:64:8e:56:70:15:
f2:ec:37:8b:6a:b9:cf:6b:71:cf:f2:f7:97:21:ba:
e4:7c:8b:a8:ca:14:a5:73:03:98:96:cf:a4:1d:9c:
ad:f6:9d:25:19:2d:cd:60:98:5d:10:47:a2:83:b9:
32:85:24:f6:5d:f8:cd:ce:fa:12:30:08:8b:ed:ec:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:53:BA:AB:A4:BC:80:E9:28:BF:D1:9F:DA:98:5E:6F:BB:12:C0
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:55:a3:9d:3c:1b:6f:1f:c2:bc:e6:f4:82:9c:a1:ee:a2:93:
7b:0f:2c:f4:19:a4:d0:b5:5b:55:5d:41:0a:cf:e5:0b:8f:e1:
76:b9:94:1a:1c:db:b9:12:9a:b0:53:93:f7:ec:f3:a2:66:09:
50:6d:ab:52:8a:5f:54:23:63:ee:2a:31:8d:17:b2:40:ef:99:
92:30:fd:bd:19:09:81:ee:b5:d4:c2:f6:2e:d7:12:4f:8a:73:
14:1f:44:7b:dc:a8:34:bb:21:b0:17:ac:ab:9c:63:6d:12:68:
b2:e5:25:9f:5f:d2:db:45:d9:03:5b:26:6a:a4:4b:1f:b4:cb:
f0:34:48:c1:ad:a4:fd:2d:ac:b9:64:53:6c:8a:ee:ee:f1:0e:
25:90:0d:6e:2d:d6:59:46:66:94:e7:40:ba:66:5f:11:f6:e1:
5a:ec:1e:02:a9:af:26:ff:9f:07:8c:31:3c:38:c7:74:2a:42:
75:d2:8e:4f:7a:c7:fd:d1:64:04:71:14:78:fd:3e:7f:4c:1e:
e0:ec:f1:0c:bf:1f:33:87:91:8c:84:1f:7f:cd:19:e6:d8:b9:
06:24:c3:7a:ab:20:6a:2d:38:11:f6:c0:67:3c:ed:09:6c:ee:
70:26:3a:a4:af:49:7b:7a:f9:db:a7:34:28:20:e4:19:6f:2d:
cc:2e:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:56 2026 by rpki-client