Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: VXPhbcNMChV2d4jndFecXdNDM76W6lBAbKGuCbBwgZY=
Subject key identifier: 10:BB:E8:AC:DE:50:1D:EF:F1:3E:14:A5:75:24:F6:FF:53:2C:56:13
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 019D389BB3E73F1F16A9D8E0329CB7BDA1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 15CB
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: EAFSAS4vRBw7bKBUm5RG/x6C6OUFEld80PjcnfvkPp8=)
2: gC8xECPXIz3izz_wPFR4--x3dfA.roa (hash: 8tJModKEf7OvBOeGVxRABAMXSwEYcpcHv0L6opRUwuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b3:e7:3f:1f:16:a9:d8:e0:32:9c:b7:bd:a1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=10bbe8acde501deff13e14a57524f6ff532c5613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:37:91:91:5c:75:70:22:30:f0:27:f8:d4:
8d:58:c5:11:a7:7d:92:db:2b:2a:fd:8c:52:b3:9a:
57:9e:c1:ff:41:64:d7:67:df:03:b6:cf:59:e4:0a:
0e:b3:fb:75:02:c8:f9:49:2f:b0:aa:78:fb:d8:21:
57:79:e8:c1:2e:a8:9f:93:40:a3:9e:71:58:bc:48:
de:11:97:ed:07:63:b5:9c:02:f9:fa:69:dd:52:13:
b7:e4:8e:37:42:19:07:89:c8:85:1d:bc:a1:00:4c:
a6:b2:c6:df:9e:c3:3c:cb:20:f7:cc:42:b7:88:a8:
aa:89:1a:74:00:f1:be:4f:0c:7d:cd:ae:d6:d8:9a:
59:9e:0e:46:72:e7:e7:ac:5a:ac:a4:fd:66:b9:f8:
da:72:a6:c4:29:95:c9:66:98:45:22:00:9f:46:0e:
c5:f0:c4:c8:c1:eb:57:c1:45:55:bf:4e:95:70:7c:
79:90:94:73:6f:ff:5d:78:7e:71:38:2f:2f:f9:6c:
4e:27:ae:13:1f:f7:83:b7:97:c1:16:66:0e:97:04:
d0:8b:d3:0b:98:3c:6e:d2:16:f1:29:86:d6:7d:14:
63:9b:bb:66:b6:98:b3:05:69:6b:c0:89:2a:7f:fc:
18:40:a6:95:f4:71:6e:07:c5:27:01:4d:a7:ad:7f:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:E8:AC:DE:50:1D:EF:F1:3E:14:A5:75:24:F6:FF:53:2C:56:13
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:17:08:18:3a:cd:d8:c7:14:4b:50:70:22:ec:6d:d5:c5:c4:
41:b9:a6:06:73:ab:bd:2a:96:e1:0c:dc:8b:d4:a5:94:05:28:
34:a6:66:9c:b9:f6:15:f9:7b:40:95:b9:00:05:34:9f:7d:32:
25:3b:a1:0c:7c:85:50:37:ad:30:6e:23:8f:eb:bc:ef:9b:a5:
98:06:7a:5a:d0:15:27:6d:86:18:f8:36:12:c1:f8:37:cd:18:
00:52:ca:bc:bf:a1:34:89:30:17:ee:ce:40:5e:bc:07:2f:02:
c0:91:b0:da:f6:dd:41:79:20:90:f9:44:db:04:b2:c1:7c:9d:
95:ff:6d:f7:3d:a0:20:76:18:5e:cb:14:cd:15:ef:50:6d:f6:
02:5e:78:b7:b1:82:49:f2:51:b5:78:3f:b8:cb:5b:e1:e6:99:
03:21:f7:1b:a9:9b:fa:1a:aa:f2:6b:00:f1:67:c7:5c:e3:87:
a6:be:6d:52:18:91:d7:8f:e6:1c:7d:3a:cb:b6:67:5b:40:b5:
98:ae:79:b0:72:7c:44:e0:3f:c7:d3:04:c9:88:8d:af:f9:4b:
ea:c0:fa:f0:71:fe:42:e8:91:1e:c1:bb:69:9f:26:d0:60:5c:
b7:ad:7d:00:9f:11:9e:6a:e4:12:92:ed:4c:a2:15:8a:36:ab:
21:25:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:23 2026 by rpki-client