Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: wNT8eM+QXCith9OKTElPJdUdJbb07Skrx4wo8mYmv/8=
Subject key identifier: B1:FD:79:D8:FD:2E:D4:2A:3E:8D:A1:96:C1:7D:E6:44:02:8D:D0:E3
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 019D382E8360B93F48188D56DBA45CBB3D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 18A4
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: +9DIzxv1IrmDQuQvYN7UpCRaJJq8KnBdYpOWYM0uc7U=)
2: O8TEWtCyCFFFeBDFSQav1ileZCc.roa (hash: ZRW28K9Lr27GeePq4xOpOm3t2INDbE7syD4cgpdmkwY=)
3: nD_ARS36tkYEaFa24POgKi0TB4U.roa (hash: H1vCO9eNS9BAqP3EHrciv1VmoLehzHokRpUI2dSkh+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:83:60:b9:3f:48:18:8d:56:db:a4:5c:bb:3d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=b1fd79d8fd2ed42a3e8da196c17de644028dd0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:dd:94:e9:ab:1b:ae:9a:0b:17:40:dd:36:
80:83:a7:f6:30:21:f0:b8:23:c6:d7:a2:72:10:2c:
db:6e:2b:15:fe:fb:01:90:f0:25:2a:74:aa:fa:2c:
80:c9:66:34:72:89:78:10:0b:e6:56:5f:b6:05:94:
c4:dc:ed:8a:ab:15:e4:8e:17:d2:6e:64:3c:f7:94:
27:7f:3f:f8:7a:25:0c:56:12:84:61:48:31:4f:da:
5e:50:0f:44:80:9e:b7:7b:95:10:d6:58:d1:55:c4:
6f:97:a0:14:61:32:9a:fb:e4:aa:23:29:3b:31:f7:
47:1d:6f:22:36:cd:99:c9:26:44:75:a8:43:ea:97:
a5:0a:41:5e:85:90:5b:76:c8:01:fa:3f:be:67:fd:
e8:52:55:74:ef:20:31:d8:bd:36:d0:76:dc:86:31:
7d:f0:03:39:ca:82:0a:53:82:a9:18:e5:a8:73:7f:
e7:3f:4e:65:49:f3:47:12:c3:8c:00:4e:88:9e:c3:
92:a3:3d:a8:18:d8:45:8f:db:e9:93:c9:da:28:b0:
44:34:4f:f8:34:47:27:df:e2:4d:02:b2:67:ca:ee:
03:d9:1e:fe:1d:35:3b:f7:76:68:f4:a9:a9:54:a5:
08:93:01:7f:9d:68:af:61:93:3a:45:7a:58:bf:cb:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:79:D8:FD:2E:D4:2A:3E:8D:A1:96:C1:7D:E6:44:02:8D:D0:E3
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:87:31:c5:a0:32:16:43:5c:6a:7f:e5:54:9d:c4:de:ac:
74:03:67:3d:6a:6f:1e:ee:48:19:41:ec:eb:90:24:ca:37:b1:
30:aa:e8:52:da:70:38:42:f2:65:ff:d6:a4:59:4d:4c:b9:08:
ca:78:a7:82:0c:2d:05:34:07:af:19:8d:2c:24:79:61:3e:0a:
75:c9:8c:b2:fb:3f:d0:81:66:7b:1a:7b:71:59:06:f0:d5:1e:
72:9a:87:db:d6:22:fb:de:fd:b0:51:64:07:19:88:3a:2e:15:
39:a5:1a:34:09:35:e7:53:6d:bc:71:9d:31:0a:0e:34:75:81:
48:c9:d3:08:ed:9e:81:7a:48:6a:78:1e:39:0d:cb:dc:87:97:
40:8c:8a:75:72:c7:6a:92:f0:de:c9:32:41:06:13:31:7c:9e:
bb:ce:e6:17:27:38:c5:f5:1c:10:5e:b3:d5:c7:e2:e3:95:3f:
c2:7a:34:c4:47:58:25:3a:02:80:cb:19:56:54:fd:0f:29:54:
38:b8:7c:56:8c:79:2b:06:d4:14:b9:ba:9e:28:f1:db:9d:45:
d5:b4:14:f6:40:da:3a:92:ab:e8:49:82:28:6b:46:05:55:12:
55:be:8e:dd:83:24:33:9e:bb:d2:d6:f0:ff:58:44:c1:9b:bf:
29:7c:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:02 2026 by rpki-client