Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier: HvLZ9i6qS1IfcidJpoIvy+eqeDZ0V1i+aQcEWcDOJDw=
Subject key identifier: D2:AB:1C:BD:3F:BF:81:0E:FE:E9:1D:33:8E:45:89:29:56:D0:33:E8
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 019D37C07F447F1E839AC2F41F985E2EA69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number: 13D9
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: 9/eOzg6U4uzNaEvwj3czp4mWUw7spfN/u3dpjuHulzE=)
2: xwyt0wXVsqA4eESlSVJR3Jxbi3E.roa (hash: RH1WTDRs/8Vp6UylYLIYMotB4x6HLaJVltA1rEKfSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7f:44:7f:1e:83:9a:c2:f4:1f:98:5e:2e:a6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=d2ab1cbd3fbf810efee91d338e45892956d033e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:6d:7e:d8:1d:a6:f9:7a:3a:8a:7b:42:ae:
12:ce:b9:b4:db:52:02:a5:bb:db:48:f1:65:af:ed:
30:ce:fd:64:b4:df:ce:ab:fc:6b:90:da:f7:49:70:
31:56:31:d3:ef:1e:c1:4f:05:e9:7e:d6:dd:65:83:
42:83:f3:14:51:ff:ad:ee:ab:17:10:02:c4:70:b1:
27:73:68:ee:25:53:22:72:2a:eb:af:52:c4:17:23:
de:4c:68:46:b1:d8:77:f1:12:29:d3:45:1c:d8:1a:
44:bc:05:cf:0e:b2:06:98:40:54:49:bc:6b:e7:c6:
37:14:c2:6c:d2:ad:e9:d4:12:a9:d0:bc:63:50:88:
d0:de:11:b0:e9:3a:59:32:43:2c:40:17:e8:dc:fe:
91:c2:51:bf:88:18:0d:e4:42:1a:e3:26:75:bc:d2:
98:79:f6:ae:92:5f:e4:24:0a:1b:4d:d5:1e:f6:4a:
b4:8e:06:c9:49:69:c7:42:97:d1:58:1c:89:5f:d8:
d1:27:a9:46:04:81:26:3d:be:ea:4d:f4:03:f0:99:
4b:15:c4:b7:29:a3:8a:40:95:17:86:66:32:ce:38:
da:73:c8:57:03:a7:3f:c8:ff:1d:87:08:eb:97:63:
58:30:c1:02:35:88:1d:fd:25:22:4f:c9:6d:e7:b4:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:1C:BD:3F:BF:81:0E:FE:E9:1D:33:8E:45:89:29:56:D0:33:E8
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:ac:67:34:45:7d:97:9a:37:49:23:58:87:5c:97:d7:54:
2d:12:b7:d0:95:4a:75:24:b9:e6:c5:cf:78:bc:75:5f:03:08:
37:41:c1:e6:db:4a:52:c8:7a:a2:e7:7f:e8:5b:9e:73:e1:14:
c2:a2:0d:44:6f:ad:6f:55:c8:e9:3c:f6:f5:21:03:af:c3:86:
82:9e:eb:43:f6:b5:19:86:47:55:06:c8:f2:15:70:9e:87:ae:
78:d1:37:ab:29:87:14:46:0a:f6:75:74:f9:74:c9:d0:31:eb:
bf:f9:f1:e7:bd:65:c3:71:00:f6:12:7d:59:63:e4:eb:a3:61:
48:fb:d0:8b:c1:c7:78:b6:e1:ab:d1:e4:56:36:db:a6:14:1a:
86:09:5c:e5:3d:3d:d3:22:af:f3:57:4c:4b:63:cf:3d:79:25:
40:38:e2:0c:1a:5a:f7:a7:67:de:d9:88:e8:1e:ff:97:ca:8e:
c9:31:5f:8c:3b:b0:e9:2c:4d:43:33:b6:54:53:90:fd:86:40:
0c:bf:94:1a:46:56:23:e6:33:e4:da:a9:fc:97:51:a6:4d:0b:
96:9c:64:58:c9:c7:c8:67:01:53:30:f9:e0:e1:f2:53:57:1a:
33:3e:ab:a2:1d:93:f6:3c:8f:2a:8e:94:44:43:a4:6f:ce:5e:
5b:e0:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:14 2026 by rpki-client