Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: WfCQfTc+4WGgJNyaveFLMmerdJQ0KwK09IofdvrtDmI=
Subject key identifier: 41:84:51:B3:F0:C0:D4:13:85:38:AB:E7:4E:F1:52:FD:07:10:89:7D
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019D37F771051F55FCCA860509C30BA4A92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0D40
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: 2tJiENJ5x87RpUb//LH4nTxkumGm+avkgTlKHFDzZKc=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:71:05:1f:55:fc:ca:86:05:09:c3:0b:a4:a9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=418451b3f0c0d4138538abe74ef152fd0710897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:cb:d5:3a:1c:7f:06:da:f7:28:d3:07:28:
ef:0d:ce:8a:e0:be:29:aa:9b:67:61:2c:83:41:b7:
48:d8:19:75:22:af:1d:c7:03:a3:89:04:a4:05:6a:
b3:ec:03:ce:cc:8d:0f:9d:9d:d0:dd:ed:94:c0:d4:
82:cc:dd:cf:d9:0f:fc:fc:89:98:49:c7:15:31:a3:
ba:d3:5e:14:f5:16:b1:b5:4c:fb:20:45:0b:f0:75:
5e:ac:da:42:60:ca:ed:da:5c:42:49:a7:97:25:bb:
cb:fd:a8:d4:7f:ef:44:79:d5:1e:22:67:20:65:8f:
2a:d9:fd:60:8b:df:ba:7f:ea:55:31:e0:d2:e3:6b:
57:d0:da:72:20:b4:b8:d4:7d:20:b6:52:84:fa:9d:
0b:05:ee:d6:4d:f1:61:d9:55:94:ef:49:d4:26:85:
85:98:f9:c5:ae:9f:76:08:cc:c7:86:13:41:b9:ae:
ea:2a:78:10:0c:fe:6d:b1:9e:7e:3b:9a:0c:5c:ab:
af:10:62:32:79:9d:c4:86:7a:f3:39:71:1f:99:bb:
fc:1b:ba:ea:19:93:3b:6b:ea:00:9a:d8:cd:2b:fc:
0f:fd:a6:d2:c5:7b:34:94:be:95:fa:e4:2b:d4:eb:
46:bf:0b:fc:12:5d:67:16:c4:bc:ff:10:69:cc:08:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:51:B3:F0:C0:D4:13:85:38:AB:E7:4E:F1:52:FD:07:10:89:7D
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:10:7d:69:1c:3e:55:52:ab:d2:3b:eb:dd:f1:d8:b2:ee:
4d:5a:c3:86:54:ae:2e:0e:94:bc:f5:ad:84:25:4e:74:7b:3e:
b6:14:9c:37:da:16:47:73:bd:50:9a:63:4d:b8:3d:a8:2c:23:
06:0c:af:24:b8:5c:75:76:aa:5a:94:ef:04:46:45:6d:8c:7d:
68:99:61:9e:31:9b:c5:b4:cb:dd:0e:29:00:62:65:85:e5:78:
b1:a2:21:a5:ee:c6:71:2a:15:20:31:19:ef:9f:3f:f1:91:0d:
44:72:75:26:da:b6:ce:bf:14:5a:d1:84:7d:25:de:d8:02:49:
f2:0b:18:1b:98:4f:4c:6f:88:27:13:14:07:ec:64:b1:21:5a:
62:ab:c1:54:83:c3:75:fa:08:1a:61:90:e2:19:f2:f2:01:5c:
77:48:78:a4:8e:df:71:dd:42:a5:37:e1:18:68:ba:b6:05:7d:
09:05:5a:73:6d:3d:94:71:42:e4:29:21:0f:04:14:1d:b0:ce:
62:d9:7b:a2:eb:c7:53:1c:1f:86:d5:8f:20:f3:e4:6c:89:80:
cf:66:f9:05:6f:b2:e4:f7:f5:d2:19:a7:8d:e7:ca:19:41:8a:
75:bb:fa:96:62:62:75:e9:11:34:b7:99:99:99:63:94:d3:70:
39:aa:77:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:12:41 2026 by rpki-client