Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier: 9ONI0kcypTP7brN7L8sMnydhuOe6IAD1M5KopVJBbzc=
Subject key identifier: 14:A2:A0:15:B3:A9:31:5C:59:90:0D:F0:5B:E8:20:C4:88:89:F0:A9
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 019D37C05440F665B67EB071906772821507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number: 112D
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: aF24fM4OeGVOB40wAqW01VbiwyA5YUEDk0D1ttSy1Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:54:40:f6:65:b6:7e:b0:71:90:67:72:82:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=14a2a015b3a9315c59900df05be820c48889f0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:41:c5:8f:1d:55:e4:38:7b:2b:2f:c1:c2:
68:e3:6f:21:1a:bb:52:4c:cd:bf:74:6e:37:58:b3:
d3:4e:60:d1:b5:74:21:ba:c8:cb:c0:e0:67:ba:dd:
e9:7d:89:ab:b7:b6:c2:60:09:33:65:79:00:15:1e:
e8:5a:5c:62:64:63:f0:b7:b6:7e:e5:6b:59:09:b9:
10:77:a5:36:66:0f:da:e6:4e:11:66:ac:a5:b4:9d:
24:df:4f:42:45:fc:fd:bd:87:e3:4e:ef:8d:d2:bc:
f6:07:11:37:cb:2a:1d:d0:49:c5:a6:bc:c9:0f:2f:
22:38:35:86:47:9a:3e:83:66:75:8d:44:ce:cb:3b:
93:80:b8:b7:56:c8:38:e8:d7:ac:b3:3b:99:71:53:
f4:50:7e:ec:91:bd:e3:3c:17:a9:83:45:79:92:c6:
45:8e:ed:b5:a8:97:27:0f:c8:b2:ef:60:98:45:a1:
22:fa:08:4c:a1:5e:4e:1f:41:02:13:eb:ee:48:14:
40:f6:72:63:99:d3:df:71:46:b7:b8:36:04:77:19:
e8:36:f5:e1:7b:a4:96:96:80:c4:cf:a2:50:56:db:
54:82:62:d0:f8:56:34:63:97:56:bb:54:94:b6:79:
4a:72:29:18:ce:0b:85:73:ea:60:49:f0:fa:70:9a:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A2:A0:15:B3:A9:31:5C:59:90:0D:F0:5B:E8:20:C4:88:89:F0:A9
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5b:ec:cc:88:53:39:dd:c1:76:d8:9f:e9:83:e6:ac:48:a9:
92:35:eb:75:8f:2c:0d:63:95:12:86:b5:6e:5c:9d:60:30:29:
b4:89:9d:44:1c:32:32:cd:5d:10:23:c5:fa:c0:9e:dc:9d:8d:
57:18:6d:24:c8:73:12:28:33:1f:e6:41:1d:fa:6e:20:7f:fd:
2a:9d:63:c6:44:1b:d8:ea:77:be:26:c4:0f:00:9a:f2:56:f2:
d2:bd:2d:fd:db:b3:99:34:5b:48:f4:b6:bb:21:59:89:3c:db:
b5:12:2d:0c:71:ab:97:d6:06:48:d4:22:b4:6d:c3:92:d6:34:
0c:6a:d3:a7:e6:10:7a:38:88:14:c4:51:19:48:78:31:4f:17:
f4:d7:c2:7a:13:4c:e0:4b:a4:99:d8:1f:6e:b8:e9:00:a9:4d:
b7:19:4b:bb:c1:a7:fd:f7:c1:c5:c1:df:da:76:f7:a6:a6:10:
23:17:33:2e:b7:49:2d:b2:77:73:18:74:f6:81:d7:98:bf:58:
8e:c9:c9:e7:33:58:02:ac:cf:1d:d7:66:01:da:b5:0a:21:0b:
12:b0:43:d6:fb:b5:f4:11:49:c1:0a:cb:9a:1b:76:a0:ea:ec:
a7:02:ed:77:16:3a:d6:cf:04:68:54:70:08:74:16:1c:1d:fa:
d7:60:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:40 2026 by rpki-client