Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier: YYgkd/TQimydQjWrv6eGctyH9rSe0xyU50OokX87rBg=
Subject key identifier: 8E:82:6C:9B:70:86:20:78:E3:ED:DF:9A:5D:FF:28:15:C5:29:52:74
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 019D3941137E576EAEFD6CF6A9BFB5912A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number: 0C2E
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: HUdxCrlXuMQt1KB5Mb6hmRc55iHDg6oPuTpVqpCgn7o=)
2: UfOE-rSQQJxT5pel5hxB7CI5WyA.roa (hash: lITU3NpiQckWKnEMAb5T8z+uP9+F2438Al8BboidjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:13:7e:57:6e:ae:fd:6c:f6:a9:bf:b5:91:2a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=8e826c9b70862078e3eddf9a5dff2815c5295274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:48:3a:97:1a:fa:e2:fb:33:03:60:07:8a:
d8:7a:2d:6d:c3:93:2e:f2:d8:f0:84:2d:d1:53:19:
8e:d4:67:af:24:a4:a7:c0:71:8c:a5:e3:6c:03:54:
05:78:0b:84:85:aa:50:d5:30:f4:5f:7b:98:a5:37:
09:16:fe:39:da:4c:12:85:aa:d5:77:bb:77:f5:3d:
05:8f:42:5a:53:1b:d0:b3:b6:36:fd:f5:b3:49:f0:
c5:94:2d:55:b7:5a:38:cb:14:07:6b:2c:53:17:16:
6d:a2:e3:1f:f2:bc:99:72:f1:29:a3:1a:a0:16:48:
3c:8b:85:9d:15:e2:bf:6a:a9:d5:24:ad:f5:5c:08:
78:61:f1:68:07:6f:cc:ca:fb:51:a2:f8:fc:6f:6f:
2b:62:fc:1a:23:6d:4e:99:df:20:39:ff:20:13:40:
e3:10:49:79:5c:6f:02:b5:c8:1e:aa:e8:4f:9f:14:
90:e3:08:41:11:92:ce:cd:5b:f9:3e:9a:29:e2:97:
9e:3b:c7:c1:d9:09:72:82:22:7d:a4:71:9c:e9:3c:
d6:0f:85:30:01:9a:ec:5a:46:70:ea:ac:79:35:01:
70:aa:b9:15:f8:e4:4b:d5:2c:56:c5:90:10:3b:af:
98:61:64:1c:cd:63:d8:f2:78:a4:47:22:07:73:61:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:6C:9B:70:86:20:78:E3:ED:DF:9A:5D:FF:28:15:C5:29:52:74
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f4:51:ae:55:ea:5b:d9:96:56:05:1f:b1:97:43:00:57:34:
cf:5b:e1:70:58:4d:ce:85:43:eb:b2:e0:a6:5e:6e:da:78:a5:
9b:1d:23:48:83:02:e3:62:7c:37:33:f3:32:f4:ef:36:df:e7:
ef:2e:2d:b7:af:36:53:72:6f:2e:02:0d:4f:95:03:5f:49:88:
43:14:08:12:ed:2d:5d:ae:67:c8:1a:7a:ea:99:c8:a6:c9:61:
9a:3f:32:a3:e8:2f:ed:c4:8d:7a:c2:17:16:11:d2:c8:6a:a9:
8c:ab:1a:64:8f:1d:d9:67:8f:ab:b9:89:22:8f:b8:ac:7a:18:
7f:97:70:f1:d2:dd:1b:60:14:14:9a:11:98:d7:62:d6:f2:5d:
bf:af:37:6f:bf:ef:f9:a6:8f:a4:e1:f0:c2:c7:64:ee:d6:41:
04:19:57:1f:8f:a4:a1:ec:92:d7:7a:89:5c:9d:00:0b:b5:b3:
2c:59:25:d2:80:9c:02:01:78:b5:83:d3:8a:1c:05:de:07:b9:
1a:be:a0:5e:f6:75:81:64:29:1e:c9:95:34:89:72:f5:5c:49:
ce:33:5f:9d:4d:4d:c5:b6:9f:4c:d4:25:de:2f:bd:fc:41:f2:
b5:ce:03:a9:1b:ba:5c:90:64:42:ca:9b:8b:e2:db:14:bd:46:
4d:91:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:21 2026 by rpki-client