Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File: JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier: tMKHhbtbgSTg842NfuHmZ6XhAPxqVeOTsVyCK/jv9oU=
Subject key identifier: DA:32:BD:AF:73:F2:A4:01:DE:91:80:E9:03:B8:05:88:22:58:8F:F2
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 019D277232E2FD8E432DC793FE58C8ED8FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 00:01:28 +0000
Manifest this update: Thu 26 Mar 2026 00:01:28 +0000
Manifest next update: Fri 27 Mar 2026 00:01:28 +0000
Files and hashes: 1: 5zbBjKYDbKWTcUfQy2LjlEpGD3U.roa (hash: fUQj6/FKT/tHdExtCdO4GHSNm5JnTAgrwRSXAti5fnU=)
2: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: lYNM4wK2NRFmTK0b3YrAlM4IKKzmIJD0o+ESKccdNoo=)
3: ty_yNfxELwDwdu1g8yk5XzB3xJk.roa (hash: Fx2p1X7kKIHJBVO5IpebjJHxMfg/mSJSoKNyxpeMDjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:32:e2:fd:8e:43:2d:c7:93:fe:58:c8:ed:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Mar 26 00:01:28 2026 GMT
Not After : Mar 27 00:01:28 2026 GMT
Subject: CN=da32bdaf73f2a401de9180e903b8058822588ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:36:89:be:34:74:5d:b8:b8:50:84:4c:5a:
5f:de:3b:fd:a3:bb:00:73:1b:c3:5e:69:9f:2f:69:
b6:8c:45:b0:80:3c:1d:5c:85:b9:ed:b0:80:38:b3:
1a:81:7f:3b:e5:0c:06:8c:16:37:34:b8:41:99:0f:
a2:4a:3d:0c:ab:01:24:c5:cf:c8:22:b8:96:5f:fa:
6e:e9:1c:e7:0b:d0:67:14:03:ef:08:69:df:f6:8f:
b7:99:8b:e2:7e:06:0b:a1:16:06:8d:c6:4e:c6:8e:
c8:1c:e8:74:36:59:97:d2:67:e3:a6:51:8b:56:c4:
b2:28:e1:61:dc:d6:d4:c6:63:f7:61:82:69:f3:a1:
37:4e:f0:93:b3:5c:5f:91:0f:c7:39:f7:5c:6e:6b:
1d:0e:29:c5:71:cc:6d:bd:35:34:fe:ab:ff:93:ba:
4e:8b:84:14:a6:36:87:73:ed:74:56:7d:2e:9f:d8:
4c:97:80:92:0b:ce:98:3d:e5:85:8b:15:2e:9b:45:
98:4b:1b:72:02:1c:4f:38:b8:4d:d6:b9:e2:b0:41:
d3:03:df:84:26:29:c5:09:b4:24:28:a5:6a:18:c4:
e4:2f:e1:eb:fc:07:1b:dd:e9:be:d4:f8:15:a6:9d:
1a:9d:f6:13:a0:ef:ab:f7:51:ab:ef:c8:de:e4:11:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:BD:AF:73:F2:A4:01:DE:91:80:E9:03:B8:05:88:22:58:8F:F2
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9e:90:8d:f6:66:f9:0e:4d:ce:a7:5e:73:b6:2e:a6:6a:e0:
d0:5c:c5:aa:f3:f2:45:48:49:91:57:82:57:58:3e:1e:99:29:
93:c2:e8:17:1d:ba:96:82:3b:e6:52:ed:69:2c:78:4f:e9:7e:
b4:c0:0e:97:4f:84:f3:04:be:da:85:e9:3a:09:61:94:41:4a:
5b:fd:60:74:72:ca:6e:2b:04:f7:f4:34:e4:48:10:a9:e3:c0:
b3:59:6b:5f:ee:89:6a:36:95:e2:b6:61:32:c6:07:31:3d:85:
80:53:6f:90:70:a3:00:e2:15:9b:8a:40:6d:83:b9:8f:6e:da:
79:d5:ce:20:37:df:2d:7f:0c:10:58:a9:47:cc:8c:f3:20:47:
67:e0:90:9a:ea:08:d2:b9:1b:86:e9:7b:47:8e:0e:68:af:ff:
6a:e2:aa:8b:e0:62:91:f1:58:e0:e5:34:8c:94:e4:85:cf:f1:
25:d0:2c:43:02:0e:ce:57:c1:2d:f3:45:ec:07:b4:d4:35:c0:
80:a9:3f:9c:bc:af:e9:8f:51:07:d2:f9:72:2c:ce:82:81:37:
e7:66:9d:38:4f:a3:95:80:d6:40:6c:30:66:c4:0f:8d:35:32:
f1:58:b9:e1:9d:db:f6:2e:95:ca:d3:de:f3:80:92:d5:64:a3:
da:45:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:02 2026 by rpki-client