Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
File: JtPbi-01S0eMbRcEoeOubJJtVnI.mft (raw, json)
Hash identifier: XIWrY6rFiExujS6FiP8b7sdisF2npml1FityLKl397M=
Subject key identifier: 34:03:0B:32:95:80:9F:4D:79:20:E3:30:58:6A:83:D4:EB:51:AF:A9
Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Certificate issuer: /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Certificate serial: 019D38D2D975B6308F7477322451879AEA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
Manifest number: 14B2
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: 0Lb-drTpA0q5ebXv85gCnaFggHg.roa (hash: o+Ylyc+Dh5qbOBllykeo3o5DJF0I1eOH3ixeecVsyxA=)
2: JtPbi-01S0eMbRcEoeOubJJtVnI.crl (hash: 7/KzLtqTOKxPc7N4J8mft2JcipfTsgHtNl8yRM2TeHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d9:75:b6:30:8f:74:77:32:24:51:87:9a:ea:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=34030b3295809f4d7920e330586a83d4eb51afa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:56:36:f5:94:bf:bf:8a:31:11:50:b7:85:
cd:d2:24:8a:e2:88:36:1f:46:1b:7c:d0:0d:6e:36:
6e:eb:9b:e1:46:0b:4f:38:77:80:20:bc:50:1d:75:
08:bc:eb:33:36:34:77:0a:84:a4:5f:06:f9:ac:aa:
a3:bc:e0:65:05:1e:32:b8:f3:2e:7d:2d:3c:26:3f:
58:68:5c:f0:cd:a5:b5:dc:7f:80:d3:d3:99:68:c3:
78:cf:b9:f7:1d:0d:11:a4:5e:16:38:9d:89:39:bf:
d5:db:a8:03:7a:e2:52:2a:52:58:df:9c:1d:76:44:
16:7f:f8:f0:2b:fc:7f:02:82:86:74:86:43:89:6a:
61:f3:0a:95:6c:38:79:c2:bf:25:3d:41:32:47:54:
b7:a0:a9:2a:af:ad:ea:a5:96:3f:12:b2:7b:a4:94:
ac:42:86:f9:e5:6c:74:47:fb:69:4d:7f:be:c1:9c:
8b:c7:71:3e:6f:fb:de:c5:87:79:3f:27:71:cf:1a:
59:c5:23:b2:28:e8:9f:d8:4f:3f:da:dd:66:b5:30:
f7:7b:5a:56:e7:34:65:fd:31:20:8f:b1:af:a8:b4:
51:b2:b1:85:11:ed:84:b1:27:0b:ea:21:84:12:09:
79:c0:67:83:70:b9:e9:7e:cd:8e:c2:cb:52:a9:84:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:0B:32:95:80:9F:4D:79:20:E3:30:58:6A:83:D4:EB:51:AF:A9
X509v3 Authority Key Identifier:
keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:14:88:51:39:67:a6:87:e5:de:a6:64:51:25:1a:b3:86:ad:
8b:29:ae:06:98:02:cb:b9:92:05:0a:7b:29:3e:3b:10:c9:14:
73:af:87:f1:61:eb:a6:d6:2f:2f:95:fd:03:49:6d:b4:19:5c:
84:44:c2:1b:35:34:cc:20:74:ef:a0:ab:14:ed:4a:67:2f:8a:
ac:28:79:3f:e2:1e:a2:09:31:3d:89:e3:82:e7:e4:dc:52:8a:
0f:e4:c1:39:aa:37:49:76:88:b6:e5:06:2c:d3:c1:1d:11:47:
f2:04:ea:d8:24:c2:99:7e:7b:e5:df:0d:99:1d:c7:a4:97:23:
cd:f4:a6:bb:f8:d5:ca:01:7a:bd:20:29:17:b6:79:ec:ef:89:
f6:97:67:9e:ce:62:8c:93:77:8a:6f:10:15:19:43:14:39:3c:
c7:4f:b9:2b:94:0e:e9:77:cd:95:e8:01:ee:ea:7a:25:c1:5b:
c4:c5:97:6e:9f:ac:e4:c9:10:a9:f2:6f:fb:45:0e:94:d3:24:
f9:b1:52:0d:ce:02:62:00:cd:33:39:0a:62:dd:d1:b7:37:f1:
bf:69:57:41:4f:a1:07:de:4d:2e:ae:31:82:53:a9:23:b3:42:
51:8e:5c:8d:a3:ff:b9:d4:72:53:00:1d:a1:b8:8b:9b:2d:a8:
96:20:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:50 2026 by rpki-client