Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: Iq+jFMaHpOzGno78bAgQIRRffSIdfr9loPpA/my/cN4=
Subject key identifier: A9:DC:F5:6D:7F:74:E0:41:E8:12:7F:96:B9:72:11:32:71:7D:A1:C7
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019D37893A4B720BA8C53B76B640AEBECC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 071E
Signing time: Sun 29 Mar 2026 03:00:33 +0000
Manifest this update: Sun 29 Mar 2026 03:00:33 +0000
Manifest next update: Mon 30 Mar 2026 03:00:33 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: NgU+msSBX7cKXOHrmKXN1iXhlkhm73Dx/014R5k3shc=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3a:4b:72:0b:a8:c5:3b:76:b6:40:ae:be:cc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Mar 29 03:00:33 2026 GMT
Not After : Mar 30 03:00:33 2026 GMT
Subject: CN=a9dcf56d7f74e041e8127f96b9721132717da1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:41:60:71:c2:f8:01:83:98:0c:1f:27:38:
d0:a0:99:2b:09:a0:c8:17:08:ec:c3:fb:b5:c4:dc:
eb:79:de:32:2e:4f:f9:7c:14:aa:45:f5:92:75:45:
ac:3e:88:30:de:f8:41:6c:e2:77:6f:23:9d:5f:04:
90:29:ae:5b:c9:4e:11:ab:21:e1:0b:91:fd:53:45:
00:d0:31:1e:3b:ec:b5:be:f9:41:b0:c6:09:d9:af:
28:a6:42:5a:8c:51:d4:8c:60:98:6e:f2:da:15:23:
73:82:88:93:c0:5c:ca:24:7f:61:1d:5a:ab:3e:3c:
bf:61:e1:24:c0:54:8e:0f:c6:eb:c4:64:72:9e:46:
80:81:45:ce:d3:0a:d5:2f:f9:2e:a6:ae:02:9a:d5:
14:d9:81:ae:3c:e4:c3:04:2b:ca:e1:da:cc:de:44:
ab:57:d0:a7:4c:4a:60:bd:cc:96:89:2c:88:d9:49:
4a:e9:ec:ee:3f:b2:9d:9e:f3:3b:c6:fa:4e:bd:c8:
f0:c0:de:68:17:ab:3f:b7:e7:18:cf:8a:57:51:4f:
5e:bc:2a:e3:f2:2b:bc:6a:90:80:f3:c1:7e:dc:63:
d9:23:1c:83:c6:62:77:91:a5:02:66:e4:01:1d:e2:
c6:a0:e2:b4:70:7c:f7:c2:25:af:fd:0d:9b:40:25:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DC:F5:6D:7F:74:E0:41:E8:12:7F:96:B9:72:11:32:71:7D:A1:C7
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7b:bf:29:07:c1:39:25:ba:5f:54:24:fe:e6:6f:e0:40:a6:
07:7f:ee:50:cd:62:1b:65:fa:d6:d0:a5:ad:95:b7:f4:57:59:
1f:a8:6a:81:95:f9:49:c1:9d:5f:ba:0a:00:0d:26:a0:d2:e8:
9a:a7:c1:ea:9f:1e:ee:63:a9:99:ea:50:97:26:0d:4e:6e:30:
95:4e:20:b1:86:c7:8c:46:81:b8:c9:7c:2d:15:36:4c:ca:01:
57:0f:5f:bd:1e:25:59:2f:47:d0:7d:d2:28:e7:fe:48:2f:18:
76:7f:30:44:09:5c:5c:b4:42:db:62:20:34:f3:95:96:7d:fb:
5c:07:f4:c0:e0:18:9c:37:fd:70:a8:64:b5:a3:54:8b:bb:63:
6a:f0:42:29:d1:df:70:df:61:a7:35:57:f8:f5:d1:1a:3b:56:
1e:1a:ad:8f:89:05:99:37:36:a9:74:54:97:0c:a7:98:9d:f1:
73:39:95:ff:2e:0d:6e:ca:63:1c:e1:ba:43:13:e7:2c:34:14:
91:ba:17:af:9d:fb:94:e5:4f:0a:c5:40:27:d9:fd:94:29:82:
59:71:1b:cf:d7:54:34:43:ac:de:c1:cb:5e:25:f7:4b:c0:a8:
1b:00:82:3e:d1:22:e6:da:f4:fd:8b:98:a7:54:b1:da:bd:73:
cb:da:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:13 2026 by rpki-client