Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: 5piNEwFgAwm5Ob68sEDc9XPNAoM6tEXnt4jEtoVH+5I=
Subject key identifier: 46:E8:DE:C6:34:56:54:7B:78:53:F2:D1:D0:2F:2D:BF:BD:70:E6:36
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019D382E932076D348F325F6396DBD8AE12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 144A
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: aZWEv+b3dhsKTMzioe6ZsnYo4aGMqCe4Jk2Crw8z++k=)
2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:93:20:76:d3:48:f3:25:f6:39:6d:bd:8a:e1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=46e8dec63456547b7853f2d1d02f2dbfbd70e636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:40:20:0d:4a:be:50:07:1b:99:6d:6c:33:
29:89:95:6c:91:16:1d:51:bc:f3:c2:15:ba:bf:43:
1e:63:6f:98:bf:b2:5e:eb:93:75:2c:3a:08:b3:4f:
14:16:9b:90:5d:1c:90:e9:05:f3:76:ff:ac:9d:a8:
a9:42:e2:63:22:9b:ad:33:ed:30:f3:9f:2d:1a:fc:
55:62:9c:c6:c4:4b:31:8e:f5:e9:da:89:2c:ff:e6:
de:e6:22:9d:ac:26:a8:4b:4d:f1:8f:dc:83:2b:8a:
88:76:b9:49:a8:67:18:4a:ab:c5:8a:ef:e3:55:25:
b7:c5:9e:19:f1:4f:c1:ed:43:b0:d5:1c:c4:7c:1a:
ba:7d:29:80:af:0c:cb:66:99:58:21:cf:7b:a0:c1:
bc:eb:71:a9:2e:9d:b7:2e:83:d7:23:3e:b1:ef:28:
c8:18:ef:60:ec:90:82:df:b8:a0:7e:58:57:f1:cd:
7e:a2:2f:dc:ad:ed:d1:fe:99:df:d1:d2:7d:9a:6a:
7f:ae:26:b0:ad:a6:44:4e:35:be:75:88:eb:3f:a3:
e5:f4:33:eb:46:1d:16:79:ef:6e:4f:8d:61:23:31:
d2:b7:5e:9f:01:77:a7:48:a4:80:22:b8:42:04:39:
fa:47:95:10:40:13:a9:3a:c9:9f:87:4a:c9:32:e4:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:DE:C6:34:56:54:7B:78:53:F2:D1:D0:2F:2D:BF:BD:70:E6:36
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3b:5d:36:42:47:d4:ac:48:55:88:a8:b5:9c:2c:04:cd:18:
46:2d:ab:18:b2:c8:53:16:79:9f:e5:38:80:2c:6b:79:ea:09:
12:09:c3:1f:48:7c:c3:7d:f3:a8:f4:12:86:ea:7a:46:86:e3:
c7:fe:bc:aa:f1:c8:53:34:60:ca:b6:5e:1d:ee:cd:b5:c7:88:
83:b1:59:fd:d6:af:bf:a3:33:ff:7c:ba:f4:0b:33:d6:52:96:
12:29:f4:b3:8d:53:ef:83:26:a1:37:fd:ed:e6:70:f7:da:13:
00:01:b8:0e:b3:fd:db:0b:2a:3d:a3:93:5f:1d:c1:a2:b7:9c:
3c:ce:df:fb:72:cf:cb:1c:a0:28:9f:60:98:c6:fc:ee:2d:de:
a6:58:30:50:c9:86:e0:e7:59:a1:61:f4:04:09:eb:b5:7a:20:
46:90:41:6f:17:70:11:f2:99:6d:27:25:47:1f:a4:f8:eb:9d:
9b:75:2b:35:c1:38:bf:9c:9f:e8:f1:69:ba:5c:00:fa:06:cf:
43:15:e9:0b:45:6a:2f:ad:4f:5b:03:9a:48:de:a5:d1:00:ae:
0e:f3:64:b5:e8:bc:25:84:ff:59:5a:be:fb:8e:6b:4b:7e:b7:
05:0e:c7:77:72:2b:1a:73:2f:10:be:6c:f2:ae:78:69:62:d2:
c8:4f:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:42 2026 by rpki-client