Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File: JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier: xPjlwdUdZ34eOVQCDxOqoQgI1GxjBcjnnMe3MXRsLk8=
Subject key identifier: 56:B6:12:B7:1B:F2:8C:89:0C:8D:23:3E:94:E0:50:05:82:31:19:71
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial: 019D3AC1F323230597A475B5D1D9097B4180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number: 0D88
Signing time: Sun 29 Mar 2026 18:01:22 +0000
Manifest this update: Sun 29 Mar 2026 18:01:22 +0000
Manifest next update: Mon 30 Mar 2026 18:01:22 +0000
Files and hashes: 1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: XnQvaBlEFyNJ18P5M5MAtUp21KGV2o+HhzTFp3LkHCI=)
2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:f3:23:23:05:97:a4:75:b5:d1:d9:09:7b:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
Validity
Not Before: Mar 29 18:01:22 2026 GMT
Not After : Mar 30 18:01:22 2026 GMT
Subject: CN=56b612b71bf28c890c8d233e94e0500582311971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:7c:a6:44:5e:51:3e:0b:31:c0:1e:43:98:
82:01:ef:29:60:c4:b4:d1:24:6b:c8:6a:40:ed:5f:
01:fb:e8:ec:ce:3b:97:ce:a2:75:3a:97:fe:54:20:
9e:01:8d:42:0b:70:7e:f6:b9:ae:a4:d6:a6:75:10:
80:c6:e6:15:b7:d4:9f:40:5f:f2:3c:d6:33:44:f2:
15:cf:d6:5d:15:d8:7f:62:22:ab:d4:3e:cf:f5:69:
a9:96:fb:b6:58:96:d9:43:4d:a5:3b:62:50:ac:b7:
48:e9:d7:17:5b:41:0e:86:98:d9:74:e3:ce:0e:1d:
dc:2e:41:8e:2d:03:7b:9a:ff:78:b4:d9:d1:0a:66:
2c:38:29:89:90:3b:b2:a0:f4:fd:22:72:c8:c2:d7:
93:8b:00:bc:bb:a4:80:a7:fd:fe:7e:86:ea:55:09:
8d:e4:74:37:f6:30:39:8e:93:e6:74:51:d8:38:4c:
81:05:d8:e5:b4:cb:18:8e:e1:62:ad:e2:0e:e5:06:
c8:8a:6f:99:86:57:56:24:12:d0:36:35:03:88:1a:
91:f1:19:d8:3e:a3:03:fc:2b:11:37:c3:29:08:90:
c3:aa:92:83:84:c7:9f:5b:9f:9f:6e:01:91:ee:1f:
bb:10:13:83:a8:0c:51:e7:3f:50:74:5c:00:fb:9a:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B6:12:B7:1B:F2:8C:89:0C:8D:23:3E:94:E0:50:05:82:31:19:71
X509v3 Authority Key Identifier:
keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4d:7f:5f:ba:0c:29:fb:4d:98:18:a7:73:0b:27:41:03:0e:
4c:b2:4d:e7:1a:4a:e0:45:0f:02:4d:29:ea:1f:c7:53:78:d3:
d0:5a:97:63:82:9e:84:df:52:df:d5:65:ac:77:a2:3e:0e:61:
af:05:16:5c:79:ec:fa:4b:21:6b:c2:57:d1:b7:78:08:49:dd:
ef:cf:2c:27:ac:67:d8:3d:aa:8b:be:52:0f:dd:a6:9f:09:3e:
56:89:f8:fc:74:f7:dc:9c:07:47:ce:16:15:ea:61:69:c2:63:
f7:e5:8e:ff:40:73:e7:c7:43:fa:6f:32:52:74:79:94:95:35:
85:38:02:c9:29:05:63:42:43:4b:e8:96:b0:42:1d:e2:4f:c7:
33:1f:76:24:db:b3:59:ac:4c:d6:e4:38:de:ed:84:2f:52:f1:
a5:e7:95:ee:41:e8:81:89:2d:5f:4c:0c:cf:fa:e8:23:30:1b:
31:7d:2c:e7:a9:df:48:72:4f:13:80:11:20:f2:95:a7:69:1c:
f4:4c:82:50:09:bd:f8:0b:54:ca:89:95:7a:d1:11:7b:12:be:
a9:d8:f8:72:db:c2:b0:64:85:0a:77:32:cd:66:82:3c:f3:19:
41:6a:8f:55:78:ac:cc:cf:5e:f3:f8:37:1d:bb:75:7d:73:a6:
81:4a:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:45 2026 by rpki-client