Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft (raw, json)
Hash identifier: YpaNn7lSLs6D91H1Cpm1GC1SyvrmEymIvvb4Tghi/k4=
Subject key identifier: B9:A0:F7:C8:61:37:6B:8E:6D:6C:91:6A:50:05:19:72:01:00:CA:B4
Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Certificate serial: 019D3941252DEBB2BC58AEF61448E15AA45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
Manifest number: 01D9
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl (hash: jwXeXNYFMmLJrrWDnGmyo5Gqh97nri4TqiJqhEFKAzk=)
2: u7g1EJ_IJa-0BdE_KUBnyoB2JSQ.roa (hash: xlygVLhoP9IZVqEPUv8JWvUxpAHcifeKoCfEWNZSZWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:25:2d:eb:b2:bc:58:ae:f6:14:48:e1:5a:a4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=b9a0f7c861376b8e6d6c916a500519720100cab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:94:d3:5d:bf:9a:66:dc:5e:23:47:32:1e:
d4:18:ac:8d:32:46:94:b9:cd:ff:d5:3d:ac:c3:86:
ab:8b:35:7b:53:69:93:21:10:7d:ff:c5:c6:36:6e:
56:82:59:b2:18:43:40:06:92:fb:ee:3f:76:39:07:
2f:db:86:cd:2d:87:52:32:00:6e:78:11:7e:33:fa:
60:43:ec:03:de:65:a6:c7:14:18:a2:4c:a1:ce:59:
8b:ed:97:c8:e1:aa:2b:cc:73:27:fa:c6:73:46:83:
38:61:95:c4:d3:99:3c:36:8c:b8:7d:2a:65:1c:9b:
4c:dd:11:03:46:39:dd:e2:dd:04:b1:2c:3f:8e:b9:
26:41:42:de:7c:e9:f9:df:b1:51:12:dc:2f:fe:e5:
a6:81:0a:52:43:74:2b:e0:d8:00:81:55:f0:cd:9f:
ae:99:88:4e:38:e4:ea:c9:71:b0:88:11:4e:37:25:
a9:60:cc:94:f5:7a:41:9e:c7:d6:c0:c4:da:56:08:
fa:de:d9:93:77:41:83:3a:ed:27:c5:a8:16:a1:71:
cb:70:95:ff:9e:aa:9b:fd:19:6d:d1:eb:84:bf:2e:
f6:18:9b:91:7b:4e:cc:0c:a8:b8:bc:f1:41:ea:b2:
9b:f2:a8:b5:16:1d:c7:44:af:a7:f9:cc:89:7d:4f:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:F7:C8:61:37:6B:8E:6D:6C:91:6A:50:05:19:72:01:00:CA:B4
X509v3 Authority Key Identifier:
keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:39:d1:99:77:4e:95:5c:30:1b:b5:35:17:c9:52:14:58:
4e:4c:66:7f:18:7f:b3:c8:f3:bb:c6:b8:c6:e9:c8:cf:76:a9:
0e:5a:9c:c8:c9:3e:7b:b9:40:9a:19:3f:e8:10:b1:87:da:63:
da:5b:da:57:65:c9:e3:19:cc:c5:1b:8e:74:7e:ee:e8:76:3e:
f7:77:fa:8f:67:2f:ac:3d:49:33:25:d5:71:28:41:9d:c9:35:
7b:32:f4:3a:98:e7:53:d9:b4:57:4b:f7:a5:66:93:5d:52:48:
12:a8:05:bd:fc:b1:ef:06:13:8c:0b:6b:f8:fb:26:cf:5c:76:
c4:8e:33:90:24:c8:25:ce:8c:95:9e:82:bf:d2:50:e4:d8:34:
61:85:1a:22:ac:10:d4:ae:4e:d2:a6:6b:ec:90:e2:1f:ca:60:
64:3d:80:2b:85:b2:ce:b2:22:48:3c:05:5d:ff:96:ab:ad:2f:
14:7e:fa:70:ff:be:c8:b8:59:3b:e3:53:d1:fd:be:8f:c5:f5:
bb:28:74:8e:90:66:d4:20:ac:88:df:97:ed:3c:b4:e1:8f:82:
89:08:d6:99:20:24:82:17:2b:06:09:4a:e5:3e:d2:fb:77:05:
ba:80:f0:e8:73:99:be:a6:5e:da:d0:f6:f9:9d:af:3a:b6:2f:
fe:70:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:29 2026 by rpki-client