Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: REdCmS1B7xNwT1FjlsfvvIx4Cf2/FltG8lABhJsq2YA=
Subject key identifier: EA:B2:8E:FC:1B:59:61:3D:8D:28:B1:72:B5:20:18:69:8C:71:13:68
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019D04AEE44E41CBD8009E0C4169F022A326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 17F7
Signing time: Thu 19 Mar 2026 06:01:03 +0000
Manifest this update: Thu 19 Mar 2026 06:01:03 +0000
Manifest next update: Fri 20 Mar 2026 06:01:03 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: uFOyKnYppufCeLqkNA6OkFW7WXdjHIGe4RLIzl5Coao=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:ae:e4:4e:41:cb:d8:00:9e:0c:41:69:f0:22:a3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Mar 19 06:01:03 2026 GMT
Not After : Mar 20 06:01:03 2026 GMT
Subject: CN=eab28efc1b59613d8d28b172b52018698c711368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:df:bc:6b:68:7e:07:55:57:fd:ba:06:cf:
29:62:ce:a0:0e:57:64:0c:2d:3f:39:6d:e7:6d:47:
48:e1:0e:01:c9:b9:9b:90:39:2a:83:7c:bc:59:37:
7a:60:03:06:b7:3b:56:d2:9b:6a:c8:42:85:db:dc:
88:c6:c5:23:19:29:55:6b:b5:14:2e:97:3d:2d:e1:
57:d2:e2:0a:b6:5f:2a:55:91:eb:ef:69:4a:60:ea:
95:30:cf:57:6a:bb:96:4e:48:d2:67:98:5e:de:6d:
1c:5d:53:4e:c0:20:b7:b2:68:5b:7e:8f:a9:1c:d1:
04:1d:74:5e:64:29:0c:b9:2a:86:19:f4:e8:f0:72:
6a:e5:34:52:b3:fe:2f:df:a7:bb:e3:f4:18:0d:b6:
0b:ce:a3:6b:9c:1f:f3:14:1b:ac:9c:db:2c:5d:86:
ae:37:23:1c:b7:82:03:73:e7:06:2b:73:a1:28:a2:
a5:bc:45:6a:4b:39:f1:f8:aa:ec:7f:e0:01:7d:7e:
c7:9f:f7:29:df:c8:ce:84:32:d8:71:7e:4a:02:95:
5f:77:1c:75:32:60:d6:b5:f8:fd:df:e5:fd:4e:c0:
91:a6:6d:5a:fd:ac:8a:6c:9d:86:77:2b:84:59:8d:
cb:d4:73:50:6a:65:95:4b:7c:5f:c8:02:a5:6b:a2:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:8E:FC:1B:59:61:3D:8D:28:B1:72:B5:20:18:69:8C:71:13:68
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cb:21:ba:f1:6a:e7:12:cd:e3:f1:03:32:e4:08:d6:6e:41:
3c:4e:70:14:1d:c5:28:06:4a:78:4e:d8:66:64:77:cf:af:45:
65:a3:b4:94:6f:1e:52:97:5f:21:94:3e:0a:8c:b1:d9:d8:d1:
2b:86:1d:6b:50:02:7a:74:80:84:e3:94:c2:91:ed:c0:d8:0b:
53:68:47:b1:26:e9:45:1d:3c:42:2d:21:b7:20:55:1d:94:8d:
4b:a3:96:d8:83:07:e9:ae:e2:37:72:5e:35:93:a9:8f:14:48:
40:b8:43:19:a7:ce:b7:90:a3:01:d1:31:2a:2e:c9:50:61:0f:
14:bb:d5:b5:61:a6:aa:19:57:f2:1e:1b:a1:19:bc:86:b5:52:
80:df:00:4a:34:e0:a6:bb:95:2f:30:7f:f8:db:81:98:62:9c:
77:86:32:c8:4b:b5:ba:c9:9d:69:0e:75:3e:f8:ea:f9:35:39:
10:0c:9d:4e:ed:9a:6c:00:fa:ee:7f:52:6e:04:1c:22:cd:e7:
a4:be:f6:65:d5:50:c5:93:cb:54:d3:45:9c:62:11:4a:80:7f:
0a:4b:ec:8b:b9:75:46:99:09:47:07:87:5b:d1:0a:15:1e:82:
de:d9:2c:80:a2:8b:d6:ff:eb:c8:c8:36:b5:8a:ba:46:59:62:
d6:70:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:21 2026 by rpki-client