Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: TWCv4UqtgJJmoZESgbSA49UjsC/rz/iV7ckgIq1wb6I=
Subject key identifier: 9A:E9:C7:3C:C4:D2:49:55:33:2D:C1:B1:B3:15:B9:D3:F9:C6:0E:A5
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019CC9AC77BADF6F7E80CD1930EF10E9A09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1858
Signing time: Sat 07 Mar 2026 19:00:49 +0000
Manifest this update: Sat 07 Mar 2026 19:00:49 +0000
Manifest next update: Sun 08 Mar 2026 19:00:49 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: CfpngLaBgDaoCrngesmp5/WAg/ZNaQABCF2O6KAnmAg=)
2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:77:ba:df:6f:7e:80:cd:19:30:ef:10:e9:a0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Mar 7 19:00:49 2026 GMT
Not After : Mar 8 19:00:49 2026 GMT
Subject: CN=9ae9c73cc4d24955332dc1b1b315b9d3f9c60ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b1:d8:1b:c2:bf:54:86:2d:33:2d:44:d0:04:
44:f9:bf:b2:ae:87:c6:c0:63:9b:92:43:38:f4:72:
b9:20:48:85:11:8d:81:32:65:34:b4:5a:25:f0:ba:
4b:75:2c:1d:ee:12:6c:80:b3:80:05:ff:4c:b0:b4:
21:2e:e4:68:00:42:ef:71:64:2e:f1:df:f3:ae:90:
17:bf:71:8b:16:d4:73:d7:21:5a:c9:17:35:3e:f1:
c1:5b:c3:ad:f5:96:2a:ff:3c:12:ae:2a:35:a5:03:
77:09:a9:92:ab:59:55:57:65:d3:91:9a:d2:1c:82:
e8:62:79:9a:9a:46:9f:39:e1:4c:59:71:cb:98:f5:
ee:11:4b:46:d1:05:87:f7:a9:a3:fb:27:c0:68:29:
54:f3:da:b9:57:29:c5:5e:79:e1:9d:ab:e0:8e:5c:
22:87:03:85:9f:2d:c2:b2:75:0b:02:88:37:a1:df:
90:2f:16:f4:1d:f4:be:c9:9f:ec:14:6f:1e:d9:1a:
44:e9:14:5c:a0:eb:aa:7d:f7:28:e8:2a:18:27:10:
e0:8a:fb:dd:63:e1:c4:27:02:ed:c4:c1:80:4a:f9:
6b:17:fb:4c:86:32:7d:84:c8:4c:cd:67:86:e3:92:
a3:0b:da:f3:a4:51:6d:5b:af:c4:2a:7e:65:c7:f9:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:C7:3C:C4:D2:49:55:33:2D:C1:B1:B3:15:B9:D3:F9:C6:0E:A5
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:59:07:cb:27:07:a8:7d:f8:cb:14:50:ae:31:ca:b3:a5:96:
3e:52:46:60:62:70:28:74:29:c8:19:e5:b6:bc:e7:17:4f:ef:
1e:ee:f5:65:40:1b:26:b9:92:75:d3:a2:01:2f:e2:fa:08:37:
2e:b5:eb:c8:e1:9c:79:56:fd:50:f9:60:76:f3:f4:3e:23:af:
41:52:b3:f0:5f:2c:46:66:4f:b0:0f:79:13:c4:18:64:ab:55:
e4:21:f7:38:59:bc:3e:9c:ab:05:4c:06:8f:2c:cb:50:53:86:
12:12:1d:aa:80:ee:10:d5:ce:49:e7:2b:e4:f6:e5:5c:5c:1b:
27:14:c9:27:20:33:4f:e8:5f:13:8a:06:a9:4a:85:48:0a:47:
f2:88:f8:d2:90:2c:90:20:af:ad:cc:a5:04:f2:ad:89:dc:a3:
34:e4:a3:cc:93:bb:6b:35:76:72:cb:18:a2:2e:23:1b:67:86:
5c:ef:b2:83:30:c9:8c:e3:97:6d:35:03:7c:7c:0e:3c:bc:a5:
47:6c:d1:94:23:4e:d2:31:1d:f8:0e:b0:cd:3c:67:47:48:de:
e5:b0:74:2d:f2:c5:62:11:de:37:44:d8:56:b9:b6:1a:ed:c9:
89:4b:c6:8f:ef:b8:f5:73:34:f1:5f:d0:a6:c6:84:7b:94:ea:
6e:b4:05:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:18:19 2026 by rpki-client