Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: 51Y0kmhdynl0tEFI3Y3J080TolGj/i9OQq1NegINmoA=
Subject key identifier: 1F:3E:7A:B5:2E:B1:E3:5B:C8:CE:AD:24:4B:00:C5:3F:7E:33:97:6D
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 019D38D3C4DF6E424CC35AC6D7B5E53D4101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: GHTdayMiWDlw-FficQL48lxhZOg.roa (hash: FsnkdiClv5Pq5UfPSWarTRIqcdA96NlEZ5WqhhR+uB4=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: W4IBjYCrCGzOW0Y+QnRpxjPLX6k0e00NuhTdq+XUBcY=)
3: YoG-FSIwZG75jmbunNKK5iNqjxI.roa (hash: 4W4AIOU7bTCXgAo+Q56kCjhAV3Ite04SA4ttlsHvgNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c4:df:6e:42:4c:c3:5a:c6:d7:b5:e5:3d:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=1f3e7ab52eb1e35bc8cead244b00c53f7e33976d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:7c:85:e1:c3:4a:81:51:6a:a7:03:d2:ef:
60:0c:2d:38:31:23:75:85:f2:14:f5:d0:24:d4:73:
f3:9f:7f:96:82:9a:98:aa:64:0f:44:b3:9f:e1:71:
2a:59:2d:f3:b9:f7:76:b7:35:58:27:54:f8:0e:b3:
0b:5f:88:a5:67:8a:a4:89:ba:30:53:56:72:25:c6:
e2:ca:41:d7:43:1b:d1:b6:a5:df:e6:f2:6c:62:fd:
7b:d2:da:c2:b0:3c:d6:1b:2a:a2:af:cf:cf:e1:83:
84:6d:f0:a2:b6:12:c6:f8:54:ec:06:98:cb:e6:45:
14:ba:0a:c4:56:c4:91:d9:c1:b7:34:10:1a:f4:16:
67:0b:f0:74:b5:82:1a:fe:f7:31:c6:89:56:54:18:
cf:a4:d9:9b:5b:25:36:08:d0:4e:3a:45:fe:44:b8:
a5:b3:b2:9f:80:41:95:37:34:0c:cd:ad:25:9a:4d:
80:09:18:54:8f:ff:3b:f5:7d:df:e9:74:c9:42:54:
c1:f1:a2:ba:17:47:da:02:35:bf:50:91:e6:10:a0:
14:1c:eb:ed:41:89:26:42:25:94:44:f9:77:69:22:
e9:0a:af:23:5d:cf:d7:78:0d:4a:d2:ef:b6:17:92:
81:d1:0d:2d:76:2f:8e:37:6b:e9:1c:fd:18:39:06:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3E:7A:B5:2E:B1:E3:5B:C8:CE:AD:24:4B:00:C5:3F:7E:33:97:6D
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4e:e6:ab:58:f3:80:02:fd:a5:0a:36:af:6a:9e:40:e5:da:
51:ca:f6:e0:25:08:4c:d8:d4:3d:b7:17:f3:db:35:8b:af:5e:
ab:46:18:9f:ab:83:2a:1a:1f:30:5f:b2:cc:34:92:3a:23:e2:
29:28:dd:7e:42:b6:f9:c7:c2:d2:b5:cd:13:83:e4:46:03:dc:
2c:24:b4:aa:e1:6d:28:0e:11:de:3e:2d:30:a2:47:ef:39:31:
78:08:fe:82:69:74:23:80:e6:11:e1:c7:22:c1:78:d0:ea:b9:
37:8a:f6:fc:1e:16:dc:35:58:bd:bd:92:90:ed:53:59:9b:6e:
d0:43:66:81:88:d1:7e:b8:25:c7:2e:f9:27:8b:0f:bf:fe:69:
31:e9:04:f3:d5:46:8a:0b:a4:39:12:66:ef:52:bf:bd:b7:12:
1f:09:a2:ac:65:60:92:4b:b6:74:62:9c:11:fe:a7:a1:06:00:
f8:69:1a:2c:3e:43:5e:27:91:79:05:48:3d:7b:d6:19:31:8c:
f0:0f:d6:9c:4b:cb:ea:28:4f:0e:3b:e0:7c:31:9b:63:de:3e:
4f:80:00:ee:3b:b6:97:b3:6a:d4:79:46:bd:b4:32:81:c0:df:
12:98:ae:53:71:95:e2:51:79:9f:4b:e8:48:13:00:da:a1:f9:
a1:b6:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:43 2026 by rpki-client