Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: dqo63bkCgGkFQ2b6xAGNW/hQqKMR116OrGmKbun7v5g=
Subject key identifier: BB:62:D1:38:F7:5A:66:A2:D3:EB:14:77:A7:1C:91:92:17:F1:02:C5
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019D284D84CA6DBFC989E6FC1847C7B054AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 074D
Signing time: Thu 26 Mar 2026 04:01:02 +0000
Manifest this update: Thu 26 Mar 2026 04:01:02 +0000
Manifest next update: Fri 27 Mar 2026 04:01:02 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: yS9XObdo4jACW/RTcp2HfJBtm8FnJlGwc2Z6Emi8XR8=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:84:ca:6d:bf:c9:89:e6:fc:18:47:c7:b0:54:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Mar 26 04:01:02 2026 GMT
Not After : Mar 27 04:01:02 2026 GMT
Subject: CN=bb62d138f75a66a2d3eb1477a71c919217f102c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:9a:3c:a8:63:09:1f:2c:1c:07:6f:3e:24:
c8:f0:6d:5d:2d:72:f3:26:85:60:4e:08:21:4c:c9:
86:d5:6f:30:90:26:9f:b7:f0:db:66:dd:88:b8:ac:
14:bc:32:5d:d4:98:46:06:3b:49:ba:27:b2:ab:00:
bd:f8:8c:8d:6f:ef:67:b5:ac:dd:e7:c0:ad:18:d4:
23:a5:48:82:c8:b1:44:e6:cb:83:f9:e9:e0:a4:d4:
9c:9c:45:d1:66:8e:6f:f3:3f:28:c1:91:96:aa:dd:
1b:8e:eb:0c:31:b6:b2:3b:8f:49:90:78:8e:66:91:
47:cc:f6:d6:50:4e:da:45:2e:2a:cc:26:a5:de:48:
20:0b:69:23:43:4f:44:57:b6:be:1b:98:be:ca:b4:
1f:f4:c3:be:90:a8:b6:5f:9d:9a:0f:61:0c:75:e1:
18:d8:30:32:31:43:58:85:77:a1:6f:50:8c:c5:71:
4e:cf:fb:04:27:9b:0c:29:5f:4d:f2:21:50:3c:46:
e0:73:60:ba:be:de:cf:5a:9d:b2:bc:57:c5:43:02:
b1:9b:af:6d:0d:06:75:48:62:ab:d7:53:e1:35:62:
a0:15:d7:ae:5c:65:ee:8c:ce:e7:0c:96:2b:ca:af:
02:32:ed:3f:7e:b0:b0:f7:ba:f8:9b:38:89:26:7e:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:D1:38:F7:5A:66:A2:D3:EB:14:77:A7:1C:91:92:17:F1:02:C5
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:78:29:a6:b5:d1:1e:93:b6:2d:b8:f7:83:ed:23:2f:76:24:
77:5c:d1:3b:dc:ab:54:c3:d6:cb:3a:35:3a:97:c8:2c:14:18:
3e:01:6e:5d:df:ab:1b:72:07:3a:27:ce:4c:2f:0c:1b:82:cd:
3c:76:93:77:4d:02:3c:07:62:42:38:89:28:72:af:44:59:70:
ef:0c:b5:82:ac:7b:d9:40:a5:57:4b:5b:ee:44:ad:d1:a1:22:
81:12:96:ca:63:c3:bf:14:52:6e:ed:19:1e:99:09:cb:9f:26:
7f:0a:86:9c:a0:cc:dc:d4:e9:81:bf:a6:30:04:12:38:4a:64:
e2:61:b1:df:b2:34:da:39:28:9a:1d:e7:a6:2a:3d:fe:6c:b6:
5a:f6:3d:ef:82:b3:98:51:3e:50:b0:e3:01:5b:84:5a:39:7a:
43:56:e8:db:47:7f:8f:e2:bd:23:43:8a:6b:ad:3a:24:55:31:
90:fd:08:59:75:06:5c:26:30:af:02:97:fc:9c:51:aa:ba:04:
4d:d8:61:81:3e:31:e2:ec:dd:dd:e1:3c:50:f1:bb:78:09:4b:
ac:ed:56:80:0b:66:27:50:1d:26:f4:37:48:eb:90:ea:f7:14:
e5:36:e2:5e:96:7e:20:0d:86:ee:6f:5c:fd:39:c1:b9:95:d9:
fd:2c:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:36 2026 by rpki-client