Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: A6fY3MGDNUC3d0iehssHUPNNbQvZvQSFPbaAFSE/1rE=
Subject key identifier: 5B:9C:DE:FF:BE:73:A0:6A:49:3F:60:1F:77:E5:20:6B:2E:06:6C:9D
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 019CE780376634C50A39F381C99009680CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 17AD
Signing time: Fri 13 Mar 2026 14:01:05 +0000
Manifest this update: Fri 13 Mar 2026 14:01:05 +0000
Manifest next update: Sat 14 Mar 2026 14:01:05 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: mc2jr+qwNLtsWda1uMTgP7Vwpp8xyouhZiPZZWnb35M=)
2: XzeIaRbu0fSJVgranQAMBnDnOYk.roa (hash: dqxt73O8AnvVTC/pUjNqknVJAUikBp+bFUF6OzADUcg=)
3: aZei7dPraMpoyMe9a8A85iz9U9k.roa (hash: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo=)
4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:80:37:66:34:c5:0a:39:f3:81:c9:90:09:68:0c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Mar 13 14:01:05 2026 GMT
Not After : Mar 14 14:01:05 2026 GMT
Subject: CN=5b9cdeffbe73a06a493f601f77e5206b2e066c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:d0:90:e0:79:8b:86:dc:d4:15:0f:35:db:
47:1d:2a:ea:46:48:83:98:28:8f:f7:c9:80:0d:98:
61:b2:f4:61:50:c9:38:74:67:7b:fe:1b:9f:ea:21:
05:ae:2a:82:6b:8a:96:86:30:df:d6:b9:56:62:4c:
15:a8:ef:f1:8f:10:3d:3c:5e:c3:07:b9:57:ad:6a:
24:7a:1f:8f:6b:a0:b4:36:d2:48:d1:2a:00:33:13:
07:da:cb:2d:4c:7e:ce:7f:88:2c:5b:1b:81:30:f9:
97:f4:df:cd:90:31:08:24:28:08:c8:64:d2:f4:6d:
85:09:df:7d:c3:aa:fe:63:52:81:4d:cd:9e:dd:b2:
6a:f3:5b:13:fc:0a:45:6a:0e:03:67:df:e7:c3:6e:
9a:21:ec:af:7c:5f:83:2a:59:fc:bf:24:73:d8:f5:
33:ee:4c:1a:bf:8a:66:5c:12:14:db:fd:91:8e:fe:
80:1c:0a:b6:6d:ba:56:63:3e:2a:5d:c1:58:1f:0e:
6c:d2:8d:81:63:b2:e4:d6:61:0d:4b:01:c7:2c:db:
5c:40:cf:53:90:d5:ff:d0:ec:0f:ea:4f:4e:05:a4:
b6:c4:65:b5:16:9e:7d:b9:5c:4a:3e:37:53:7c:8c:
e2:75:03:b3:b2:30:cb:71:ce:e7:7c:50:9b:44:3f:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9C:DE:FF:BE:73:A0:6A:49:3F:60:1F:77:E5:20:6B:2E:06:6C:9D
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:ad:db:25:05:c4:4b:de:02:65:a2:23:84:65:4c:5f:30:
da:75:9e:9f:1c:a9:cc:26:9c:1d:45:8e:68:21:53:d7:c7:48:
38:fb:6f:8d:f1:05:64:f3:22:31:ff:4a:38:eb:73:66:6f:d0:
aa:bd:aa:dd:ae:05:44:83:bf:f5:c3:70:0e:9b:a7:cc:56:45:
39:a8:b3:f8:32:69:0c:e3:66:7c:40:87:5e:c9:c5:39:25:0b:
a9:42:92:b7:d9:15:a8:e8:43:e0:54:9f:9f:84:fd:b9:77:87:
0a:48:da:4b:11:6c:6c:ed:79:70:3a:67:94:f1:1a:3c:0a:2e:
13:52:ac:61:fe:ea:49:5b:38:90:64:ae:04:b5:89:9d:fa:07:
31:8a:56:65:dd:e7:84:b0:d7:d2:91:ca:b1:db:1d:28:bd:c1:
21:3d:5e:dc:9d:75:ab:6b:b4:2b:90:72:ce:79:c2:33:8b:69:
b6:de:8b:cc:d2:b7:c5:af:87:e4:51:e6:5c:49:49:b0:a0:5c:
8a:1a:89:de:90:ff:46:36:07:1e:37:74:8b:3d:3e:0a:8c:ce:
68:ec:34:fa:a8:3c:e2:4b:59:51:e9:b5:fa:39:7c:a0:3f:45:
e7:44:8f:84:10:4d:b8:60:2c:55:a2:0c:26:55:d5:2f:74:fc:
22:92:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:31:58 2026 by rpki-client