Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier: mnYyAhtRRKe/T6fK1sNUx3KQIwLuvzyuOA553lSWdqI=
Subject key identifier: 12:04:74:8F:A4:16:D5:74:8E:F1:B9:EA:FE:6D:0D:D6:91:60:AB:36
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial: 019D37F72BFA9235350CB6810B66CFE56EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number: 03ED
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: Kp9rCc0xoRHnlabm45PxaX6vrLm00c7IO1VeXCFcxV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2b:fa:92:35:35:0c:b6:81:0b:66:cf:e5:6e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=1204748fa416d5748ef1b9eafe6d0dd69160ab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:77:f7:f2:b0:99:77:3d:33:70:b0:ea:33:
91:51:ce:1c:44:3e:f1:41:88:a7:a2:e3:75:08:de:
65:1f:a9:e8:e4:b3:9e:a6:61:04:4c:75:05:ad:1b:
62:6c:22:c4:61:f4:02:65:a0:42:2f:78:39:a9:3a:
7a:27:fc:0c:8d:8f:95:bc:c3:06:45:d8:c6:b0:33:
f1:0b:35:25:bd:66:e0:33:ff:13:e5:9c:c8:39:6d:
57:19:a5:7e:4d:8b:e0:fe:66:bd:d8:ca:60:9a:ab:
c1:a2:69:45:92:b3:24:16:76:9c:9c:d8:01:0f:6e:
00:61:a5:56:b0:6f:c3:79:40:57:47:a5:15:45:9d:
bc:90:7d:66:a8:ae:89:e4:6c:2d:d3:fd:a5:e6:36:
f9:97:36:3e:24:b5:66:25:2b:0f:a4:74:f2:cc:ec:
c5:21:45:4e:b1:d5:50:44:d1:ef:ce:fb:e8:5b:c4:
5d:34:be:42:d2:16:fd:91:76:ee:60:b7:22:23:55:
c3:15:b3:33:3f:09:8e:df:1e:e0:2f:81:e3:f6:50:
cc:88:0e:25:db:c0:65:30:2e:ed:ec:2f:75:c7:fd:
45:66:60:14:a3:a8:b5:eb:a0:8f:8d:ab:4b:6d:40:
15:90:51:be:be:5d:ba:55:d5:b3:06:d3:a1:fe:8e:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:74:8F:A4:16:D5:74:8E:F1:B9:EA:FE:6D:0D:D6:91:60:AB:36
X509v3 Authority Key Identifier:
keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:26:49:8d:dd:d6:8e:90:a3:35:27:c1:72:85:79:50:ca:5f:
1e:8b:c3:27:1b:e7:90:09:5d:0b:0e:97:3f:2a:d1:44:40:75:
78:05:06:2b:a4:47:e6:f3:46:ae:db:b8:53:28:6c:f6:ba:5d:
dd:9d:15:e8:3b:63:70:f5:5b:a0:7f:14:b8:53:f8:72:f9:5d:
3c:25:ea:f9:65:dd:66:85:c4:47:36:57:89:0f:3e:ee:ca:21:
2e:be:d6:83:c6:f6:95:af:80:56:e6:4f:f0:14:07:02:7b:61:
9a:58:26:a2:75:bf:19:62:96:36:0a:c0:6b:ec:56:9f:5e:ea:
87:35:2d:bf:f9:bb:2f:37:02:4f:e0:3c:df:75:8b:32:86:5c:
84:9a:43:65:0f:5f:a9:ac:66:0d:49:23:16:10:96:e7:67:5f:
01:67:b2:70:5d:df:a2:55:64:97:4f:d0:1b:7f:5b:67:f2:d6:
3d:4b:98:70:d8:58:0a:fc:c2:09:c6:ff:65:3d:96:ce:75:f4:
2f:52:da:1b:f0:30:8b:64:c6:99:95:dd:c8:7c:88:d5:49:00:
e6:95:12:c5:e4:c3:5c:2c:02:ae:05:db:fb:f5:b5:ad:e2:32:
da:5c:8a:de:af:07:cd:f5:fc:99:71:5f:c1:14:48:3a:eb:64:
a0:36:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:05 2026 by rpki-client