Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: wx3Lmx/ODjmoaTgdEF4B1rpKobf1ET/mRiOcV1+kaFk=
Subject key identifier: C6:12:17:4D:B6:78:C7:05:1F:EB:14:08:68:DB:76:9F:CE:91:7B:DE
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 019D28F260FD1E95777B6ECE146C54850040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 17DF
Signing time: Thu 26 Mar 2026 07:01:06 +0000
Manifest this update: Thu 26 Mar 2026 07:01:06 +0000
Manifest next update: Fri 27 Mar 2026 07:01:06 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: xF2XlMJH4vG4ly5cBx7kkE6y3BBfTRB0ryhrFdGoPjo=)
2: cuQOSndsrOHE68u2RGDR9Wvb2PU.roa (hash: oESYbd0eiPwK4UeuaCOTGhvgRMQavcY75LLUi+iO6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:60:fd:1e:95:77:7b:6e:ce:14:6c:54:85:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Mar 26 07:01:06 2026 GMT
Not After : Mar 27 07:01:06 2026 GMT
Subject: CN=c612174db678c7051feb140868db769fce917bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:61:d3:37:39:02:be:b7:86:6f:2e:36:95:
ce:34:97:1f:9a:62:6e:d1:d0:a8:88:e3:18:ec:a5:
f7:a1:9e:14:99:11:d2:5e:46:fd:b1:e7:ac:33:d3:
af:49:de:54:65:35:f5:af:7d:f4:f0:bc:77:f5:74:
27:9d:75:1d:65:fe:29:c7:24:65:ab:d0:ab:84:20:
ba:66:c8:d2:42:88:77:d6:3a:c2:91:70:f3:16:71:
18:e2:22:a7:36:5e:62:f1:66:17:68:aa:3f:3d:12:
09:9e:51:c8:ea:f8:f5:96:87:1f:5c:1a:b0:d7:b7:
8a:7f:43:62:5c:3b:5e:26:d4:45:79:5a:32:04:29:
5a:e1:96:fa:59:18:5e:5d:c4:2f:0d:aa:21:1a:8b:
c0:33:c8:7f:b9:f4:d0:1f:17:15:06:f9:dd:fe:d2:
d5:d5:ad:1c:b2:73:48:e9:d7:cd:15:25:26:a9:b3:
b0:c2:f3:13:27:85:2d:3a:a7:5b:2a:50:9b:4c:a5:
d3:5a:6c:83:66:de:f5:2b:e7:b6:66:1a:4a:b5:bc:
92:15:90:96:f5:2a:9c:6c:f3:b7:1e:f8:3f:bd:fb:
88:61:b7:f8:df:93:86:d8:de:f0:0f:98:97:a3:90:
cd:43:95:c5:a2:a8:a1:13:bc:be:f7:1a:46:c4:b8:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:17:4D:B6:78:C7:05:1F:EB:14:08:68:DB:76:9F:CE:91:7B:DE
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fa:21:04:fc:2b:b8:d3:07:8d:56:ca:1e:19:43:e2:f6:f2:
6f:75:0e:71:4e:f1:9c:ad:cc:9c:9f:9a:21:bd:ed:09:b3:3c:
87:df:2c:15:e8:6b:66:a0:a4:96:ae:9a:b6:62:41:24:e9:3a:
5c:0d:19:eb:7c:e4:e0:16:49:43:7c:cd:64:24:b1:1a:72:8a:
25:9e:10:ee:90:28:1f:cb:b9:3d:1f:13:99:30:34:d0:04:21:
48:95:9d:27:90:c2:fa:ea:ba:90:71:b8:b8:18:fb:90:d6:c9:
12:52:af:88:d6:25:b9:5f:da:9b:bf:32:0d:f6:99:a2:25:a0:
75:a0:ea:53:16:87:aa:cc:60:92:0d:17:93:4f:ca:76:98:a7:
41:cd:51:7b:38:3b:f0:4b:f0:52:e7:d4:e4:08:47:48:c8:f8:
ac:57:81:7e:55:81:13:c7:ad:52:40:bb:42:2b:b0:4d:2a:db:
03:b8:93:b9:fc:b3:b0:a6:de:3c:4e:67:8a:6a:1d:4e:f7:5e:
3f:7f:01:59:26:b5:cd:6d:95:50:da:05:bd:ec:17:70:c5:12:
da:3d:32:f4:9e:cc:68:82:09:16:b8:4d:73:f0:e0:ec:1a:56:
bd:e7:e8:b8:e5:f5:4f:0c:62:22:33:35:e5:b8:e0:0a:98:49:
0a:f2:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:47 2026 by rpki-client