Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: S2LRLcSuMBpUoI1QFa3DyWa38HyhrwBUh3hAlzbouOM=
Subject key identifier: 6C:33:4C:E2:02:4D:A3:09:09:6C:C6:4B:19:C4:42:F9:F1:72:94:3D
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019D27E01CC3691D793015AEC2BBD094CE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 17D9
Signing time: Thu 26 Mar 2026 02:01:31 +0000
Manifest this update: Thu 26 Mar 2026 02:01:31 +0000
Manifest next update: Fri 27 Mar 2026 02:01:31 +0000
Files and hashes: 1: 8yYMhh0gMT6CiQOLVp2cTc5vVZ0.roa (hash: 7gaVBUF1/eBBpHyrZMX3iYaRP7VQvzONGdsKY6mhoPg=)
2: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: T5qTWuq/md+TyxuBtcuJBPOtU4qwDSHHnACkLGEZDNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1c:c3:69:1d:79:30:15:ae:c2:bb:d0:94:ce:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Mar 26 02:01:31 2026 GMT
Not After : Mar 27 02:01:31 2026 GMT
Subject: CN=6c334ce2024da309096cc64b19c442f9f172943d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:85:58:d5:80:ad:d3:52:f3:f6:86:87:26:
3a:c2:2a:69:9b:74:bf:a7:53:a6:41:29:e4:e2:dd:
09:b5:93:fe:32:c0:3a:26:99:43:de:88:36:8f:9d:
3e:84:21:19:21:55:aa:8b:4d:71:76:d3:58:98:19:
fc:9d:e7:fe:5c:3c:92:28:9b:c1:2d:70:1d:c6:8d:
de:ac:33:96:dd:25:7b:0c:ce:a0:17:a8:2c:91:7f:
33:ed:91:92:5e:e7:0a:c9:12:66:89:1f:94:ef:39:
d0:84:96:3b:9c:4f:96:62:e1:09:de:a8:bf:40:21:
7b:7e:98:b5:46:fa:fd:38:9b:72:bc:9e:63:35:fb:
6b:03:8c:ee:76:86:ca:0e:d2:44:b3:b2:f7:b5:9b:
2b:df:cc:a4:9b:84:74:65:27:7b:2a:ee:0a:a7:dc:
d8:cc:b4:e1:62:ad:78:e8:c7:97:41:07:dc:fd:0b:
c5:5c:fe:7d:9f:27:44:87:69:29:42:1e:1e:1d:51:
c7:41:9b:fd:48:ce:43:3c:35:2e:3c:17:9c:a0:19:
a6:ce:c9:83:76:a4:38:e5:c1:f3:f9:0f:1f:ea:4b:
a0:58:3c:ad:c4:4b:64:6a:9e:d6:dd:a3:79:f0:64:
54:c4:6e:6a:fc:0a:04:56:38:cd:e3:d2:db:80:ff:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:33:4C:E2:02:4D:A3:09:09:6C:C6:4B:19:C4:42:F9:F1:72:94:3D
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a9:8f:79:c9:b6:32:ab:84:ea:da:7b:90:3d:36:f0:7a:d9:
71:4d:de:33:3e:1e:a0:c3:cb:8e:c0:5c:46:60:6b:41:73:e7:
43:04:2f:f6:a3:ab:21:d0:7d:99:e7:48:18:ba:2b:5c:da:9f:
f8:9e:5b:a8:c8:4f:52:29:8c:bf:5b:71:9d:d7:d2:c1:d2:1e:
e6:2b:68:48:8b:ed:b4:2a:0c:e7:1b:dd:4b:0a:0c:0a:8d:9b:
18:c9:0e:a6:5a:92:e2:d8:76:a8:27:3b:0f:81:d7:5f:59:34:
1b:c1:49:aa:1b:1d:e1:a3:71:b0:3e:2d:3f:35:74:31:cb:3e:
27:af:39:a5:99:67:8c:eb:62:dd:61:87:67:de:a9:b6:0b:f0:
d0:36:0c:89:ba:eb:87:54:b6:56:e2:1c:68:92:90:1d:10:97:
bc:e0:60:e7:6f:34:e9:54:a4:6f:01:fe:e7:90:82:d0:f5:62:
12:fc:ee:28:bd:ec:94:b5:ef:c5:4b:14:43:f6:43:1c:38:39:
bd:1d:c1:9f:b8:21:aa:41:e1:7e:01:f7:6e:56:4f:31:89:ab:
03:05:59:73:17:a5:60:b8:a6:78:4f:d3:bc:f7:76:cf:89:13:
cc:3c:b9:ce:b8:49:e7:d6:ae:0d:d7:33:8c:ea:09:fe:c9:af:
c2:c6:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:21 2026 by rpki-client