Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier: Qh9bflAH/Waig7KiFWaGYJi0AaAWef5Dmnb+IB7xfPY=
Subject key identifier: 03:65:CC:87:81:0D:2B:E2:18:1E:0E:AC:11:CE:A1:35:FD:73:45:37
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial: 019D39AEFB0C8FB6A23D73FBB4E98021676B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number: 0CE2
Signing time: Sun 29 Mar 2026 13:01:01 +0000
Manifest this update: Sun 29 Mar 2026 13:01:01 +0000
Manifest next update: Mon 30 Mar 2026 13:01:01 +0000
Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: cMtEGulyPTjmrDBVcpiG6Hx9IxOe/vyQP5Tfb1EGouI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:fb:0c:8f:b6:a2:3d:73:fb:b4:e9:80:21:67:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
Validity
Not Before: Mar 29 13:01:01 2026 GMT
Not After : Mar 30 13:01:01 2026 GMT
Subject: CN=0365cc87810d2be2181e0eac11cea135fd734537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:70:12:29:de:36:78:c0:9b:66:cd:9c:74:
4e:fb:04:e4:2e:ef:50:17:ae:58:90:7c:43:f6:bf:
db:44:49:00:62:e6:92:90:4f:71:9a:47:97:0f:ff:
4e:1f:1f:94:54:fc:7c:a9:9a:26:f0:3e:8c:06:e7:
ec:cf:5f:ec:c5:c2:6b:b8:22:22:38:0b:f7:a2:ba:
4d:83:6b:bf:95:d1:3c:af:d3:b5:63:85:65:90:65:
aa:3f:b6:6d:85:28:0b:4b:4f:b4:c8:6f:83:7f:64:
c1:c4:20:88:60:9e:e0:6b:ca:c0:37:73:9b:4c:a7:
8c:de:d9:0b:62:a2:da:b2:ee:5b:99:10:3c:1e:29:
9b:f1:52:85:58:9d:f6:b1:c2:5f:9e:ec:19:30:d1:
4a:58:52:b0:1d:73:1f:d0:93:f2:33:bb:5e:5c:c4:
f5:6a:03:ac:28:1b:6f:77:7b:4a:30:cf:b6:d8:50:
87:b8:ae:20:49:3b:12:26:2a:20:b0:72:5c:13:4c:
6b:96:14:68:45:be:32:35:f6:13:d2:78:67:ad:b2:
f9:d8:78:46:1c:46:07:14:0b:70:fd:05:d5:c1:d4:
76:82:8b:75:47:ec:ee:47:4a:15:5b:32:d6:e6:51:
27:0b:f6:c8:83:ce:85:45:87:bd:06:e9:87:67:e9:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:CC:87:81:0D:2B:E2:18:1E:0E:AC:11:CE:A1:35:FD:73:45:37
X509v3 Authority Key Identifier:
keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2d:23:be:21:6f:ca:c1:a5:e0:03:7c:72:aa:45:90:96:90:
e7:40:15:98:e1:b2:5a:97:90:a8:9a:d7:c1:c0:cb:b3:3a:24:
6c:de:52:44:76:3b:30:7d:22:eb:41:e8:b8:b0:4f:3e:24:d4:
39:49:80:ec:5a:a1:6f:1f:df:23:0e:85:a4:e6:5c:07:d8:3d:
6e:95:34:45:cf:38:47:bf:e5:4b:5f:0c:3b:66:eb:cd:ce:96:
e4:b4:80:c9:38:e8:26:b7:f5:75:96:f6:cb:91:24:47:71:a8:
3b:0b:a3:52:9c:6e:a8:51:5a:a3:29:13:64:69:1c:18:d3:1c:
c2:fc:c5:3f:92:21:f8:2e:01:86:c6:b5:e3:aa:55:ad:8a:62:
db:95:41:8a:98:5e:eb:0b:44:da:13:0d:53:49:49:a9:11:c2:
24:03:96:d2:e1:28:f0:50:df:48:91:0c:e9:4a:d6:cc:da:e8:
d0:97:c9:d7:eb:c7:88:e1:ca:b1:3a:fc:c2:47:90:94:3d:64:
ab:8a:4c:38:bf:a1:e2:48:4c:b0:c4:8e:b2:19:7e:df:de:66:
a2:84:1c:91:83:98:90:f4:30:9b:b0:97:da:ad:39:d6:ba:f3:
7d:17:b7:f8:47:1a:6a:5b:e1:3c:79:43:10:f1:ec:20:a7:1f:
e7:54:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:18 2026 by rpki-client