Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: u9yWi2jkXiostqYf9Sh8MU+PyEH0iUmbEMxe3o5MJGs=
Subject key identifier: 92:CE:C2:EC:6F:97:70:05:FC:A9:A6:AD:C7:99:91:3F:FA:6B:5D:E1
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 019D3865E989A77F01F102F09C8E74CB38F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 1112
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: 0Dx2OkEziZHR2RxelO3hdGkkDsl8im/DNzVL/dgVVNw=)
2: hzKfJWZlIV8JBysFWarDH5yRiEk.roa (hash: CAWz472DO1trBiLZNnU0TTJf5YszDXotuDHQXa3fYWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e9:89:a7:7f:01:f1:02:f0:9c:8e:74:cb:38:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=92cec2ec6f977005fca9a6adc799913ffa6b5de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:8f:8a:ad:71:c3:32:16:d5:0d:bd:02:68:
10:87:72:5d:c6:34:ec:f7:0d:6b:cf:30:93:17:d3:
41:2a:fc:c3:61:1b:e9:d6:7e:d2:39:7d:bc:c9:1e:
84:a8:04:53:40:20:48:23:83:a2:4e:89:eb:58:7f:
b9:32:8f:c9:a1:17:f5:77:4d:ba:8e:8d:26:3c:57:
d8:9b:e2:4e:ba:e5:c3:10:06:66:6d:7e:6b:3f:be:
10:39:7b:d1:bc:09:b8:2c:32:d8:e8:bf:2a:33:5c:
15:37:36:be:cc:6a:cb:2d:79:f3:1d:96:93:dc:04:
25:af:c2:20:d4:fe:af:d4:36:7a:a2:78:c7:44:4c:
a2:4b:c6:dd:5e:0b:07:b6:d5:fd:0e:a2:7f:b1:51:
f0:5c:39:bf:f1:02:29:b6:25:b9:d9:8e:9f:d3:45:
87:2a:33:4b:65:a9:30:52:5d:1d:42:90:4e:cd:54:
a1:15:b7:c6:78:1f:9d:13:b4:d9:8b:4f:66:00:13:
67:1b:81:db:dd:ee:f7:bc:d3:94:4d:cf:b5:40:fe:
c2:68:bd:b7:00:ec:fe:45:26:70:ea:8a:4e:e3:98:
84:1b:f0:23:48:d8:57:25:ad:ae:f4:0a:95:46:1a:
96:9d:8a:bc:03:07:75:d8:5b:63:08:ae:f7:74:7f:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CE:C2:EC:6F:97:70:05:FC:A9:A6:AD:C7:99:91:3F:FA:6B:5D:E1
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e1:55:78:9e:a3:b5:08:17:25:0a:46:bc:73:ae:ea:28:12:
e0:93:5f:6c:92:35:ff:67:91:92:72:3d:87:dd:e1:31:f3:3c:
cc:af:51:77:1c:37:67:a9:9c:7d:e0:cd:47:30:88:89:d6:fe:
30:44:d0:cb:91:df:cb:04:3c:14:d5:a4:1e:a0:75:7e:b1:06:
c0:ce:71:2c:0f:f0:f5:b8:ce:33:73:68:a0:c9:67:b7:5c:7f:
97:53:36:13:9d:d7:1c:6f:84:a3:b9:ed:ca:13:67:12:02:b9:
04:86:fb:91:ee:89:a9:b8:19:19:3d:5f:92:3b:09:22:51:13:
06:a5:68:89:eb:fa:cd:7f:f3:05:4f:b0:93:d9:78:93:b8:0e:
c3:5b:2d:67:96:2c:6d:09:a4:4c:a4:6d:43:05:cb:0f:39:dc:
6e:68:01:fe:45:89:9d:f3:dd:48:11:27:de:24:15:fa:4a:42:
3e:81:ca:a3:13:b2:7a:c2:88:c2:ac:40:df:be:51:83:fb:b4:
4b:1e:57:89:17:96:7c:f6:c1:fd:bb:4e:43:c4:7c:09:91:5c:
51:0d:54:0f:29:bf:db:08:8e:9d:0d:84:d8:30:f7:2f:f9:72:
1b:d0:b0:74:d6:49:7a:af:6b:47:9c:09:9f:0d:e7:7f:ed:7c:
2b:c4:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:31 2026 by rpki-client