Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: XZdI16DwHRPF40guJslYaY2Nw0NzPzEgfJ2qMPYPEdo=
Subject key identifier: 7C:B9:E9:F6:BE:22:75:74:9D:4A:B7:5F:EB:19:09:D9:37:42:F8:86
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 019D3865C441A0764246E875B2040762DDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: t5LczBUYgai+ZBzmaiEiDnSYspFnscMkBwZg6HQiaxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c4:41:a0:76:42:46:e8:75:b2:04:07:62:dd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=7cb9e9f6be2275749d4ab75feb1909d93742f886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:52:8e:02:3a:30:70:f9:b6:04:a4:81:b3:
33:3f:ad:24:c7:cb:60:b8:f0:f0:1d:90:1a:08:c4:
e6:fe:80:30:91:5c:2f:7f:25:f2:d6:3c:a3:65:42:
f2:5f:f0:12:54:06:e1:bd:1f:f0:b7:f7:43:39:c0:
dc:4f:c9:ce:88:53:4f:e4:72:cf:51:4c:cc:62:47:
6d:2c:df:b9:98:dd:f0:1c:98:33:d3:ea:94:51:2a:
f1:bf:da:7b:9d:b6:e0:37:37:1a:f2:53:69:f6:2c:
35:c4:d9:a3:32:39:53:73:7a:f1:4d:7b:b8:f7:c3:
7d:29:4d:45:e2:44:c2:f2:97:a5:43:dc:0f:89:6a:
a3:c1:53:77:cb:ad:e6:c3:2b:7e:17:2d:71:ff:47:
38:35:20:e8:96:73:8f:38:8e:2e:6c:33:81:a4:48:
e7:67:7b:81:8e:5e:da:23:bf:d8:08:44:ec:a0:29:
10:a4:28:09:19:b7:a2:2d:1c:21:62:31:0a:b0:99:
04:cb:a4:8b:00:5d:10:27:a6:28:d9:62:84:c9:53:
ec:02:64:f3:43:7b:eb:f1:17:3d:e5:f0:26:89:16:
9b:5f:45:a6:54:31:53:b4:27:4d:bb:d0:48:a0:24:
36:f1:98:3f:ab:0f:8f:9a:99:10:bc:fb:5e:39:04:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:E9:F6:BE:22:75:74:9D:4A:B7:5F:EB:19:09:D9:37:42:F8:86
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f8:9a:a2:0b:9f:57:39:65:d3:1b:73:9c:38:c2:af:42:cb:
1f:60:36:12:cd:02:d2:49:12:cc:db:46:97:e2:7e:6b:9f:72:
d9:93:10:06:21:3e:ff:85:66:de:c5:c2:c6:83:94:e2:5d:3e:
49:1b:02:11:9d:77:40:0d:77:82:42:8b:4b:0a:59:e9:1f:e1:
a5:4f:29:2c:e4:b2:8d:75:a1:b5:ad:91:48:6a:57:0c:89:78:
75:8d:82:e6:fb:88:67:10:87:ae:ce:5d:79:b3:dd:28:4a:b3:
e1:83:18:64:6f:53:05:12:e3:92:ed:79:6f:b7:53:8a:67:7f:
79:5e:b2:f4:53:7f:e2:ae:49:8f:8d:f3:d4:0a:b8:79:7f:fa:
e9:5f:ef:28:c1:af:5a:85:dd:55:4c:63:35:66:94:3b:5e:be:
25:12:05:71:3c:fb:eb:2c:d9:77:11:a9:64:04:b3:7d:0f:3b:
71:fc:40:fd:51:57:b8:3e:d7:6e:76:a6:91:0a:86:2d:e6:c1:
11:d3:9a:59:ca:9f:27:2f:b0:33:97:91:f7:b6:a7:b1:f0:1a:
4d:d2:4f:d2:f5:7e:a2:a2:98:1b:8f:65:10:be:9b:d5:f4:0d:
71:5e:fc:d5:0e:03:29:13:1f:d4:ab:9d:77:0b:de:a6:5e:06:
ce:9a:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:34 2026 by rpki-client