Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: abV2itdPSnh3pmZUo3HAYmveOaCMbePosw1J9VFFPbM=
Subject key identifier: 78:B7:6F:06:83:89:D6:40:49:C9:12:A4:6F:ED:F6:00:0F:28:B1:E8
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 019D39410800E1F6C4788732FF2E65047CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 13EC
Signing time: Sun 29 Mar 2026 11:00:56 +0000
Manifest this update: Sun 29 Mar 2026 11:00:56 +0000
Manifest next update: Mon 30 Mar 2026 11:00:56 +0000
Files and hashes: 1: 5WocRxOSmDdCp3t8dO5S36MRZuU.roa (hash: 2FyKXR8tCa5ZwTM66G1T6QFKNZ0CxQwW+d8mP57rB0M=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: eROhxOJj222s9yYJuoHNgoUDlfC/RvGjbChy59Q+0jc=)
3: ndAxHc3VnkS73TWIqm8iAAZy9_k.roa (hash: d8ACwc3xMwTKBD/Rj4Jwn8VZBThWrsDZp4lALyC1e/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:08:00:e1:f6:c4:78:87:32:ff:2e:65:04:7c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Mar 29 11:00:56 2026 GMT
Not After : Mar 30 11:00:56 2026 GMT
Subject: CN=78b76f068389d64049c912a46fedf6000f28b1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:fb:ac:f4:c0:d3:04:fd:85:29:08:f3:2a:
e0:ca:eb:2f:d8:54:8c:f5:87:66:1f:fe:82:bb:29:
d3:44:b8:67:71:87:ce:5f:b6:1c:1b:cf:4d:d2:b1:
db:bc:7c:83:8f:b5:70:f2:b6:6a:42:58:74:52:16:
05:bc:32:69:3d:7f:52:de:86:3d:3f:1d:44:41:8b:
f4:39:30:5f:7e:59:18:f1:eb:8d:59:32:c3:f8:9b:
01:2f:51:a3:50:67:3c:d4:5e:14:8f:ae:3c:fb:b3:
7d:0d:a9:a0:78:07:86:e8:90:47:75:db:bf:ea:23:
f5:53:8a:9c:f7:fe:b1:a0:d5:74:03:46:88:87:4a:
a4:16:86:8f:2b:81:8b:77:b3:40:15:7e:9c:69:6d:
0c:da:83:7d:3d:b5:a7:12:ff:d0:28:6d:ee:62:8c:
9a:a6:22:cd:f0:52:67:57:5c:94:38:21:2e:8f:48:
7a:28:6c:d5:ee:a9:50:ad:0e:50:a2:10:e3:23:04:
3f:f5:38:38:5d:64:7e:41:bb:25:5a:89:cb:39:78:
42:dc:c6:85:bf:39:82:6e:fd:f3:d8:d3:57:fe:fc:
15:0d:bd:78:17:08:e5:01:d8:4a:18:f1:d5:e3:a3:
af:bf:1a:69:0e:ae:f4:3e:cb:da:c0:28:d3:f6:47:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:6F:06:83:89:D6:40:49:C9:12:A4:6F:ED:F6:00:0F:28:B1:E8
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:18:bc:bf:6f:3b:fe:23:6f:12:9c:70:cb:7d:05:f3:a2:b7:
64:85:4e:bd:74:21:24:f6:22:af:a3:b5:aa:24:85:4a:2c:f1:
69:b0:08:1e:1c:57:b4:0f:87:51:5f:6e:c8:f4:00:06:c4:3b:
e2:4a:1e:86:47:2c:46:fd:f4:93:3a:b5:ba:1b:74:14:d1:1c:
c2:7d:12:51:7c:2e:7f:da:3f:52:5d:4a:49:7c:2d:93:11:e5:
35:39:1d:24:86:ca:42:4f:18:19:1f:1a:99:32:b1:cf:b3:0b:
ed:8d:16:dd:38:01:91:bb:ed:b5:6b:4c:65:82:4d:f4:17:5d:
b9:af:d2:44:82:6a:a5:a9:43:05:bd:11:03:bb:5c:5b:41:41:
57:5f:18:68:85:5e:43:17:20:96:f6:9f:5c:a0:65:3a:8b:59:
e3:eb:02:eb:d1:6d:9e:8e:fb:29:1e:97:74:43:0e:72:d2:ad:
2e:50:24:70:a4:bf:10:1f:85:5a:86:1c:8d:1a:c8:17:32:17:
b7:2c:58:9f:2b:fc:57:ab:9a:55:62:06:63:32:ca:ac:ac:f4:
e7:11:fe:3c:4a:75:03:28:fe:ff:ee:32:1e:5f:a9:12:d0:d4:
b3:5e:9f:43:32:46:d1:88:79:80:83:03:70:0c:18:2c:42:16:
2a:18:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:46 2026 by rpki-client