Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
File: JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft (raw, json)
Hash identifier: d08DsE7ZEbd/6AJQWjLEht6NUG7rMn9Tpn4Mqo1KXos=
Subject key identifier: 52:65:B9:1F:D6:F2:18:FF:E8:A8:84:13:3B:F8:4C:F2:16:43:9B:24
Authority key identifier: 24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69
Certificate issuer: /CN=24e940db190b692cd1b0d583edb6d8c361124569
Certificate serial: 019D382E9235EFEAAB15CD9BDA33B9A73CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
Manifest number: 031E
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl (hash: M+dpyvAoylXxfwFrCQ/l4LzvJtJudNqCl8hoWrSDrVM=)
2: hQYlFQzT91DNazRboAcnc_468LQ.roa (hash: xwDlJYdyb3iMPJXDHp4iQgWl+BTTgyNe5ipYkebXqwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:92:35:ef:ea:ab:15:cd:9b:da:33:b9:a7:3c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e940db190b692cd1b0d583edb6d8c361124569
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=5265b91fd6f218ffe8a884133bf84cf216439b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:82:4a:cb:8c:eb:df:36:91:ed:3d:4e:d4:
f3:ec:7b:bb:b2:8c:c2:73:5b:67:00:50:ec:fd:80:
52:89:fd:04:21:d9:80:94:66:65:ee:7a:7d:52:fe:
2b:5b:ea:0e:4b:16:55:5f:84:6b:0d:05:ed:b2:1d:
6e:a0:f6:49:36:cd:41:b2:bf:34:a7:0e:0b:aa:6e:
e3:06:ea:6f:17:94:42:06:67:ac:6b:74:fa:66:72:
2a:b7:95:b3:5d:b5:42:ec:60:5f:4e:d0:80:c3:21:
0d:80:af:78:40:dd:da:f9:49:96:9a:3a:c6:a5:3a:
33:87:3f:4f:f5:37:31:24:a0:3a:8e:50:fa:57:63:
fc:8d:c3:e4:57:57:80:61:d2:43:fa:2e:b8:99:2f:
ae:c4:fc:3e:11:7c:96:6e:23:ae:75:d5:b7:5c:59:
3c:25:38:da:1b:3c:f8:d5:a4:b3:48:e4:2e:e5:01:
d0:cf:69:8d:13:95:4d:88:c3:7e:0f:a5:c4:97:4c:
9b:df:b2:78:c4:54:9a:a5:9f:da:63:05:d7:5a:29:
d5:3c:55:c9:3f:6b:76:5f:8e:43:3c:51:cc:5a:ec:
f6:32:3a:d2:ad:d3:ea:80:8a:05:b8:bb:1f:15:1c:
87:d6:7b:83:d6:b3:97:06:dc:9a:3c:32:3e:1d:83:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:65:B9:1F:D6:F2:18:FF:E8:A8:84:13:3B:F8:4C:F2:16:43:9B:24
X509v3 Authority Key Identifier:
keyid:24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:08:f4:21:ca:0d:2c:ed:07:fa:04:6e:a5:52:e0:a1:5c:6a:
81:7c:e2:d6:fc:73:26:1d:99:f1:de:92:cb:b1:8c:d8:60:01:
a0:49:2a:ad:46:b9:87:e5:76:46:3d:ac:c6:ee:1d:ec:e6:73:
49:43:69:e2:ec:30:d7:66:27:1b:57:1f:28:ab:d6:86:db:69:
c7:b3:77:b0:bc:54:f2:19:9c:08:51:a2:4b:d4:4a:59:13:c3:
1f:dc:46:e7:62:3e:43:fc:8f:40:ab:2e:b8:95:04:e2:52:97:
30:8c:fe:6e:dd:d5:01:de:66:b6:c0:eb:7e:cf:4d:42:3c:43:
1f:55:b7:6a:86:79:66:52:f3:6a:01:6e:0f:95:61:1b:87:ef:
77:9d:50:a6:14:6f:e5:cf:46:c3:dc:c5:bc:33:16:18:a2:0a:
7a:dd:ae:f4:65:78:97:f8:c0:cc:d5:16:3a:f9:e7:36:32:44:
a9:d4:7e:18:41:9a:2d:c4:bb:ea:a8:d7:96:cc:20:0d:49:25:
88:ed:73:45:8f:c0:97:89:9b:c1:37:08:ec:79:ec:76:9b:a7:
b9:72:f4:78:56:5b:a6:48:31:0a:25:ba:9e:28:0e:c0:1d:2f:
fc:74:c4:42:50:d3:db:80:8c:67:39:09:28:ac:75:1c:0f:5e:
df:f8:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:20 2026 by rpki-client