Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: 4pvevjvppSbMnN5kI1kMz9ScT2bk8sksyprkDMSDoj8=
Subject key identifier: CB:EC:BF:9B:27:93:23:97:C2:0A:ED:E5:19:98:82:78:32:D1:9A:43
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 019D389BC4A069D59EC948CBE8637A55C7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 10BA
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: PnI7ozmelU1Vq5rlHOk++oBVkrlokVJfdwYygFJxthM=)
2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c4:a0:69:d5:9e:c9:48:cb:e8:63:7a:55:c7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=cbecbf9b27932397c20aede51998827832d19a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:fb:a5:33:bf:0c:4a:ee:d4:ef:bc:fb:48:
b2:fb:94:ec:34:2c:2b:46:e8:70:dd:4f:d0:2e:70:
cb:7c:c1:15:8f:20:80:35:b6:82:e2:f8:92:b0:01:
8e:4c:18:3c:4d:20:1f:c7:86:27:2f:15:d9:fc:a5:
e2:4e:ff:b2:76:4e:22:02:4c:fd:e3:10:7d:c9:dd:
b9:c4:98:f6:43:ae:5f:f6:a4:c4:59:8c:14:cc:89:
b6:03:a7:c7:f3:d1:a5:33:22:96:33:0e:01:a5:c5:
a1:cd:4a:98:c7:06:fb:32:07:50:97:45:72:01:a0:
0a:f0:81:80:db:b1:b8:df:9f:57:fa:81:b4:d0:f8:
37:bb:d5:e2:99:08:70:a3:f6:56:80:75:0e:1c:91:
d7:ad:a1:e0:09:b5:b4:49:02:bb:c3:ad:a1:59:19:
cd:09:28:9b:98:b9:89:59:d4:e0:65:ee:0d:68:61:
5a:1f:8f:0c:8e:c5:76:83:02:02:1b:88:2c:7c:c7:
c4:e2:18:65:a3:ff:47:f9:42:4a:88:e4:36:a8:5c:
31:a2:a2:a5:52:06:67:dd:ea:f3:0e:7a:12:9c:e3:
34:ff:46:35:eb:ae:1b:50:64:76:79:e9:bb:29:60:
2a:c5:f7:f5:dc:08:bc:8f:1a:54:4e:1c:9a:33:d3:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:BF:9B:27:93:23:97:C2:0A:ED:E5:19:98:82:78:32:D1:9A:43
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:18:56:89:99:b4:5b:81:2c:ae:4b:60:1e:73:7d:10:11:3a:
10:a7:4e:5e:ee:34:86:88:8d:21:02:c2:3a:9c:df:e5:81:b9:
98:e2:28:16:1e:69:33:98:33:17:eb:37:2d:31:0d:c7:e7:da:
4d:b5:c7:63:6e:7d:9b:01:a7:a5:f2:78:a5:95:cb:6e:c4:e2:
ca:c2:53:1b:d6:b1:c9:f2:86:78:e4:d5:e9:06:35:0b:aa:56:
ec:cd:10:ed:81:15:b2:1f:62:b5:c8:fa:6b:eb:77:47:8f:52:
29:a2:20:0f:81:b7:fd:59:8f:5e:42:a2:da:16:8f:ab:39:f7:
59:75:6e:69:4d:be:8c:e2:05:d8:b7:10:20:e3:ec:1b:7d:f4:
32:6a:aa:00:70:86:38:34:f0:3b:f9:d2:9c:fb:2c:da:10:68:
ac:ff:21:09:c0:d2:7a:73:2f:32:04:f2:a0:61:45:e6:91:38:
66:71:6e:83:14:21:84:73:94:3b:1a:3a:d0:d9:22:d3:ee:e3:
ec:09:b0:25:81:bd:96:88:1c:3e:7d:5c:7d:cf:6a:93:39:0f:
e1:00:2e:78:e7:89:44:ed:d1:c2:b4:b3:b2:ab:5d:1e:fd:a7:
5c:01:7e:58:1c:f7:90:5d:db:53:23:eb:08:21:6a:7f:64:22:
92:b5:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:11 2026 by rpki-client