Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: nKzbTMJ+UPpmSf71iKN/rk3WECeTT/Sy+1qUKnLFCHY=
Subject key identifier: B1:8F:B6:1A:A6:97:AD:2F:D2:7B:92:EF:0C:53:2E:38:67:46:FD:9A
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019CE4B62CCE48C5C20E57E1B3C55AB142C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 01:01:10 +0000
Manifest this update: Fri 13 Mar 2026 01:01:10 +0000
Manifest next update: Sat 14 Mar 2026 01:01:10 +0000
Files and hashes: 1: DMom3rPUm8HweXvQ4-Q9jSK3W5A.roa (hash: LnHplGcwbJiDTN78KXR+EeXnQF5rJq6ndATkaGyGt6Y=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: YvQpsjZqse7/NOPatnucwJyDmUszHZmtpkA8l1XRo/U=)
3: zo3coJXTyvhldkMVh9gvp4uyZ_c.roa (hash: XrJ9G8/whLu/oZmZ7d5+aY/tS2aPDpwbEqSKZTYhu+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:2c:ce:48:c5:c2:0e:57:e1:b3:c5:5a:b1:42:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Mar 13 01:01:10 2026 GMT
Not After : Mar 14 01:01:10 2026 GMT
Subject: CN=b18fb61aa697ad2fd27b92ef0c532e386746fd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:11:be:bd:37:24:27:24:8d:14:a6:ed:df:
42:46:7e:12:2e:12:84:ef:a4:c0:64:16:80:8a:49:
af:36:52:d2:d4:6f:5a:aa:f4:5b:54:0e:81:44:d2:
59:e7:c8:0e:31:7b:0b:07:3e:49:18:9a:0d:9c:23:
6e:61:f3:88:89:6d:69:49:9b:93:57:22:1e:f5:50:
52:30:22:f6:f7:95:07:45:a3:da:0e:2c:e2:4d:a6:
d6:f3:6a:04:e6:bd:d9:fe:0a:dd:ed:0b:c1:a0:eb:
4e:42:0c:f3:bb:98:89:a6:5a:a9:1b:2f:b0:2a:e6:
83:3b:ac:ea:e6:2d:2e:09:16:c3:f9:09:28:92:28:
89:ed:b4:5f:25:10:ec:b0:d2:8a:07:57:f5:1e:e0:
34:31:78:73:76:35:0e:31:a3:0d:1b:98:72:38:c3:
85:49:3b:24:b1:6a:75:ef:1f:04:2f:aa:06:f1:93:
39:6f:93:5a:49:c5:05:0b:d3:cd:d4:f3:d0:e9:45:
48:0b:bb:09:68:2b:60:6e:5c:f3:a4:df:f0:76:c3:
b9:d4:dc:ee:90:83:06:54:1c:2a:30:70:bf:eb:e2:
54:a9:78:a0:39:ae:12:64:7b:a1:7d:9e:0e:18:69:
a5:17:cb:e9:d6:1f:49:7c:6f:9d:09:a1:e1:8e:f2:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:B6:1A:A6:97:AD:2F:D2:7B:92:EF:0C:53:2E:38:67:46:FD:9A
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:07:10:0d:9b:7b:58:b0:c6:ee:c5:d5:19:08:e0:7e:3a:f4:
73:ef:e4:9e:51:36:4e:c8:db:98:31:99:91:8d:88:e2:88:89:
ca:1b:19:ea:a1:62:24:17:cf:e0:75:55:d4:60:79:5e:cd:69:
c7:6b:3e:15:5b:58:c4:00:a4:1d:f1:84:f1:34:31:f4:38:a5:
66:23:05:03:ec:b1:16:6d:ae:89:bc:9c:6d:88:e9:6e:b7:3f:
c0:44:75:01:35:91:2c:77:04:1b:de:5d:9f:b8:7f:14:7f:01:
ee:32:d1:59:31:88:11:23:2d:0b:e5:0e:84:f9:9d:59:ef:c8:
88:00:7b:67:55:e5:96:b8:e7:98:a6:02:7d:c6:e8:03:d6:c7:
ef:ce:ef:61:41:55:1a:51:a4:9f:26:45:2d:2e:3e:c9:13:ad:
67:72:c1:59:85:97:e1:73:e3:2a:61:da:36:bd:b0:4e:4c:8d:
cb:cd:54:27:5e:5b:d3:5f:83:7a:3f:b3:97:2e:fd:a0:75:6f:
7d:b3:be:a2:d1:a2:8b:39:85:c1:41:c2:3e:78:c3:ff:dc:0e:
7f:d3:07:f0:a7:79:fa:7b:83:58:b4:5e:73:22:51:3b:ed:86:
0a:03:17:ad:71:d3:78:e8:ce:43:d7:b3:0c:2b:6f:5b:63:29:
7e:c3:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:53 2026 by rpki-client