Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: hZCnO0EJzxTJVSPLnB65xN7r62+sog+DQMlx7BdSN5g=
Subject key identifier: AE:C5:8B:27:AD:16:8B:7C:D9:B0:2D:94:32:12:D0:7C:3D:15:DF:90
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 019D390A3B4E58E49AFFFB722D4A069CABAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 16AB
Signing time: Sun 29 Mar 2026 10:01:04 +0000
Manifest this update: Sun 29 Mar 2026 10:01:04 +0000
Manifest next update: Mon 30 Mar 2026 10:01:04 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: 8FtWjc4uasdKretp6/eMuf1xPWmaM7er9O3y+CW6Mxk=)
2: KrmrfuyTmay6BxzsP6g7DR2EuMs.roa (hash: i89qUuvLONj+YCXDaSghoBx5U4M3h/mBM7QmhvsqeeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3b:4e:58:e4:9a:ff:fb:72:2d:4a:06:9c:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Mar 29 10:01:04 2026 GMT
Not After : Mar 30 10:01:04 2026 GMT
Subject: CN=aec58b27ad168b7cd9b02d943212d07c3d15df90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:8d:eb:3c:b3:73:94:e7:0e:b0:19:f3:e7:
cd:c3:db:4b:07:ec:ff:2c:f0:3d:6c:72:b4:6b:1f:
a8:6d:9c:29:47:84:97:0f:91:de:5c:3a:9b:33:a8:
21:c3:ae:45:09:7a:6e:0d:7e:c2:39:c6:3c:f8:f2:
66:38:c8:96:6d:f2:63:09:69:8b:2c:34:13:f5:f0:
9f:c8:a6:25:0a:e2:be:e3:a9:c9:67:1a:fc:11:13:
63:0f:d4:2d:aa:c6:8c:86:0d:ae:fe:2b:6b:da:60:
fb:ed:85:93:90:98:b8:7a:68:e9:aa:b3:a2:cd:ca:
5c:93:1b:31:41:07:ff:b4:ba:25:5e:c5:53:ae:8f:
d9:af:01:6b:14:07:e7:73:4f:18:f8:4c:97:d9:25:
23:a8:1b:0e:e7:f2:6d:22:34:13:5f:a4:8c:67:9d:
ca:3a:b0:2f:3e:9e:0c:3d:da:a7:cc:73:34:ea:bd:
63:53:77:ae:ac:5b:33:58:d9:25:c7:be:49:a5:ae:
f3:3b:89:b7:a3:3d:9a:d7:52:be:dc:b0:26:4b:41:
cf:bc:b2:b6:e6:df:e8:79:5b:d4:5b:c6:e4:ab:8a:
9e:29:5f:5a:bb:52:f4:17:95:a1:d7:2a:f1:61:ea:
d1:fe:e7:73:f2:e6:a8:c4:6f:60:e1:18:a5:06:b0:
91:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C5:8B:27:AD:16:8B:7C:D9:B0:2D:94:32:12:D0:7C:3D:15:DF:90
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9f:ea:1c:e1:70:11:94:7d:88:70:36:72:19:2e:24:a6:31:
e2:b9:8c:20:2e:f7:67:ae:5c:58:a1:57:72:6a:ae:da:3e:67:
65:98:a9:34:31:bd:d3:35:93:6b:18:70:58:2f:25:9d:8e:71:
c2:e6:3d:9c:1e:61:50:7b:49:fa:3a:21:83:44:e3:05:43:3c:
7a:00:11:51:f5:da:8f:b4:a4:66:ff:89:36:12:97:61:39:e3:
62:53:8e:e0:77:f7:7a:9d:08:fa:68:b9:fd:b9:c4:c0:db:e9:
b2:8c:ae:4b:93:a8:c1:d7:f1:69:59:20:a1:70:a9:40:45:39:
36:b9:b8:dd:41:52:79:bb:00:b6:8c:80:a5:89:37:16:17:88:
f9:32:88:bc:a6:aa:d7:9e:ba:c7:4e:83:a6:0c:d6:6e:23:3c:
fe:fd:24:d7:3b:44:3b:5d:c5:d6:42:84:85:85:d7:9d:b3:9d:
0f:13:70:16:2c:8f:69:9c:49:89:23:d0:66:98:24:68:9d:51:
d1:81:7a:aa:ca:00:f3:35:39:d6:6b:28:91:64:29:70:62:16:
d3:e9:3f:c2:5b:66:63:49:56:2a:df:da:83:c3:31:d4:21:77:
6e:50:71:69:11:bc:a4:70:73:de:22:c5:11:78:7e:e7:de:10:
91:6a:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:06 2026 by rpki-client