Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier: CXSfBCa6hRMOQXSnSXH0Nzmu9UkyCL/ba3DEQ2ebkIY=
Subject key identifier: E8:7F:DF:DE:50:6C:FB:F5:6E:B7:3B:B2:C7:0A:F2:25:2A:68:48:A9
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 019D38D36F0F3189DAA5DA098570F94F6A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number: 0B85
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: 4SZEYsN/ulvCLaDrCfFWqtLxC693jkJC69jRm5Bf9uQ=)
2: hKMbuHr2aXc8zzCBYrN1Pl3PnrE.roa (hash: GT98HeqOpegXQJEdGgjawpeJJ5F69fX5SkGY05H68og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6f:0f:31:89:da:a5:da:09:85:70:f9:4f:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=e87fdfde506cfbf56eb73bb2c70af2252a6848a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:42:ec:c4:87:2f:3b:66:3d:47:89:23:c5:
40:82:87:81:dc:ec:e9:c7:16:f9:45:d3:6c:55:76:
5b:dd:e1:cd:ff:18:01:d0:f5:91:f2:91:60:02:ee:
cd:95:7f:a4:fa:1d:26:69:df:25:51:f1:ba:22:37:
14:41:ec:ee:bc:0a:5a:b3:14:a5:3e:9f:06:67:b6:
67:5e:4d:05:71:86:ed:19:7f:21:00:2f:78:6b:84:
7e:88:b8:3e:6a:44:69:d4:09:e0:c9:85:46:68:55:
70:09:1a:a1:e4:67:51:e2:53:24:15:48:e0:e1:75:
8f:29:67:3d:24:a5:3d:c8:cf:13:e2:08:f1:25:75:
ec:64:1e:b5:20:bf:54:f0:64:10:c3:59:6e:b9:cc:
9d:a9:c1:a5:8f:dc:22:84:11:5e:01:04:15:fd:44:
ef:95:4b:57:3e:ff:88:2e:0e:37:05:46:f2:6b:13:
0b:7d:06:c9:4b:be:47:25:9b:cb:4c:a5:42:d7:e7:
f1:ab:00:7f:e6:40:53:1d:cb:bc:76:e7:e9:1b:5b:
02:05:40:92:01:b2:0e:66:4f:57:d6:1a:16:21:23:
25:ef:93:20:e8:80:ad:0b:92:73:7a:eb:c5:ae:dd:
5c:6c:0d:ac:41:c3:d7:3f:17:23:62:f3:98:5c:40:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:DF:DE:50:6C:FB:F5:6E:B7:3B:B2:C7:0A:F2:25:2A:68:48:A9
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ca:a2:ea:e8:81:76:11:ae:4f:97:73:40:86:c6:b7:a5:40:
0e:df:6a:bd:f6:eb:74:91:ce:5c:ac:5c:bc:83:48:68:d4:35:
1e:56:2c:37:a5:b8:06:35:d8:6d:99:9c:33:f4:45:ba:4b:3a:
da:53:a2:e4:e2:70:cd:83:88:eb:27:09:86:cc:9c:4c:66:6f:
e8:5b:b6:f0:67:bc:68:de:5a:33:62:75:74:07:71:01:60:e1:
09:2b:78:3b:61:84:a8:c5:00:6d:0d:93:6c:3b:aa:69:db:e2:
ee:9f:1a:a1:6a:65:1e:5e:75:96:7a:87:89:93:97:ab:ef:43:
28:2d:d6:fa:e8:62:a2:b9:15:82:27:7f:84:80:a4:e4:eb:7d:
6e:80:24:74:8d:fd:15:07:8d:53:eb:59:a9:a1:9c:69:c0:09:
ea:3e:d4:5c:7d:13:ea:5c:81:10:97:41:2e:c4:dc:2d:f9:31:
83:61:e7:83:be:e7:7b:dd:84:93:97:2e:c9:57:9a:28:1e:9b:
d0:fb:3a:4a:1c:c2:53:43:0d:92:2c:05:86:04:9a:fa:fa:0e:
5f:d2:1a:33:47:14:50:32:cb:2a:87:9c:4e:15:6e:56:dc:ad:
09:de:11:bf:a1:ba:7d:07:bb:c6:3d:45:02:18:c7:fc:8d:d4:
65:d7:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:22 2026 by rpki-client