Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: wScUz3/bryrOFHSKD4y29ebZrre6uo2CAAVQUBxEsi0=
Subject key identifier: 5D:A1:5C:E0:E6:5B:0E:C0:53:DD:45:C3:29:85:FC:12:93:E0:84:90
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019D3A1CE9355E9AA3807958BE21AEF84C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 15:01:06 +0000
Manifest this update: Sun 29 Mar 2026 15:01:06 +0000
Manifest next update: Mon 30 Mar 2026 15:01:06 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: 08Ul8iX7k9o5RjrYvH4/TZBNNgk/7Xd+RREnB/rvV7s=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e9:35:5e:9a:a3:80:79:58:be:21:ae:f8:4c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Mar 29 15:01:06 2026 GMT
Not After : Mar 30 15:01:06 2026 GMT
Subject: CN=5da15ce0e65b0ec053dd45c32985fc1293e08490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:3b:7e:31:18:13:1f:d1:d7:a4:ec:fa:e4:
e7:1c:d8:21:61:ec:5d:d8:e5:0e:80:4d:8b:76:06:
36:40:7c:68:69:d2:7c:65:32:c3:b8:ea:a2:a5:61:
92:d8:c8:7f:41:7d:1a:e3:04:32:88:ef:06:d9:91:
49:11:84:d1:88:f0:66:a3:14:1b:0e:87:4e:1d:2b:
b6:0d:db:59:32:ae:00:d6:0f:84:4e:9b:5b:a0:26:
ba:c2:32:2b:c5:98:98:58:b8:7b:a5:69:e4:57:d8:
d4:ea:1f:ff:4c:4b:99:78:fe:b4:c5:90:e7:5d:18:
e8:dc:1d:5c:4f:89:4a:5e:58:8b:b1:44:f8:1b:0d:
6c:f6:76:6c:30:cf:ab:8e:48:99:49:58:1f:bf:22:
67:9c:87:20:e8:86:d2:d4:c5:9c:ac:ce:25:cf:25:
82:62:af:a2:03:d2:5f:4c:ca:8f:81:ff:4d:56:05:
b6:9c:71:03:0d:75:38:a7:ee:a7:8a:6d:c7:c2:08:
8e:3f:97:d5:e4:82:dd:e1:1a:6a:f8:10:16:2b:06:
14:41:04:a4:4f:6b:b5:ef:a2:34:47:f1:f1:b4:9a:
f2:83:d2:dd:c5:43:9f:fa:94:f7:05:2a:2a:8e:54:
33:9e:da:6f:98:62:4b:b3:9e:00:c6:1f:b1:23:77:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A1:5C:E0:E6:5B:0E:C0:53:DD:45:C3:29:85:FC:12:93:E0:84:90
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:02:e1:21:53:24:13:19:5d:52:dc:41:67:e6:f5:36:ad:e6:
02:19:7e:79:5c:dc:b7:64:f6:b9:17:ef:e6:b5:22:cf:e1:a8:
41:47:f6:53:7e:1c:7c:5f:8d:00:cc:86:6c:42:66:0d:8a:5a:
d1:8d:17:0c:1b:eb:37:20:2d:b8:68:1d:dc:77:13:62:0d:d5:
d6:9b:b9:b2:81:ae:6c:37:45:34:aa:3a:fe:ae:13:a3:fe:97:
67:02:fe:f9:99:16:5f:60:3d:c7:d2:27:5f:d3:05:86:6f:52:
7e:56:ac:55:89:3d:75:73:7f:47:b7:31:cf:ce:14:e7:c6:af:
f9:2f:64:09:37:10:ad:59:76:3f:81:db:ad:bf:0a:00:fe:e8:
be:df:dc:d2:47:82:19:30:e4:c9:13:68:d2:d0:71:70:87:b0:
99:c4:86:bf:99:4e:e0:40:ce:ed:07:21:81:ea:79:0d:df:58:
3b:2b:86:b0:4b:b3:12:98:dd:b3:2a:45:c2:89:e8:cf:6f:38:
6d:6a:e0:8e:c7:01:96:f5:77:34:76:c5:f4:4c:65:7f:64:6c:
e8:38:2d:5f:1f:37:e0:d3:e3:e2:d1:bc:32:89:bd:a2:5b:81:
b5:00:9b:ed:b1:e1:c9:ba:5a:f3:e1:30:06:50:06:5b:b0:91:
3d:14:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:17 2026 by rpki-client