Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier: 38CZamb3/2Ou+mvrx+LmxLaXjpoGnTtaoLIlXoTgVcc=
Subject key identifier: 6F:FA:77:09:E5:5C:2A:9F:1D:87:08:D6:40:40:D2:F5:A7:1C:70:12
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 019D37F6DFCCFBC85B49F5F6FF52C5450464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number: 0668
Signing time: Sun 29 Mar 2026 05:00:19 +0000
Manifest this update: Sun 29 Mar 2026 05:00:19 +0000
Manifest next update: Mon 30 Mar 2026 05:00:19 +0000
Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: deBhmKpsYLPpkLAjoVZ5SaU44qvv03cZkC3SXThk7fE=)
2: kt6ISYmYzdT_sD7cn5nH6bulSe4.roa (hash: 6LvWtYhhWQnpqxU2WlqAAGv11j/zEYewR/NkDp4dAe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:df:cc:fb:c8:5b:49:f5:f6:ff:52:c5:45:04:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Mar 29 05:00:19 2026 GMT
Not After : Mar 30 05:00:19 2026 GMT
Subject: CN=6ffa7709e55c2a9f1d8708d64040d2f5a71c7012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:ea:ac:23:15:38:8f:bd:de:a5:5c:1f:bd:
11:b6:cb:f4:9f:59:df:db:26:cf:b6:44:3d:30:c9:
e6:cf:bd:87:97:d8:26:cd:9b:1c:61:26:bc:65:b9:
6d:1d:fd:ee:d7:18:22:10:86:a0:e1:2b:49:01:16:
2e:fd:29:01:32:2b:d4:35:35:ce:fc:f9:80:1c:ef:
b8:91:4e:09:80:e4:5c:10:8a:e9:ae:08:cc:bf:49:
36:f3:6c:4e:bf:72:f7:5c:3e:e7:fe:4c:35:ae:bf:
1b:fb:d4:70:66:0a:54:fc:ea:65:3e:af:03:15:f4:
c9:55:82:a0:b7:fe:3b:eb:8f:9e:83:7d:2b:ee:a6:
81:14:04:2b:cf:c0:e4:7b:9c:65:b4:5b:ad:95:e0:
01:ce:4f:f8:7e:03:c3:b9:a9:e0:ae:3b:fe:7d:24:
d7:c8:6d:a8:95:1f:b3:73:3d:96:c4:c1:4c:ec:91:
c9:cf:c9:ae:56:94:77:17:88:5a:9b:93:42:b2:73:
b9:c1:74:c5:96:72:de:62:71:2b:74:91:dd:3f:58:
25:66:b5:a6:88:ba:62:ba:eb:0e:54:b3:f4:42:72:
15:e8:7f:f9:a2:e9:fb:26:c2:d4:73:63:bc:73:6e:
e1:10:84:47:fb:0e:93:4f:c2:8d:77:fb:65:72:d1:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:77:09:E5:5C:2A:9F:1D:87:08:D6:40:40:D2:F5:A7:1C:70:12
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:67:07:92:69:87:eb:fb:b4:d4:29:98:aa:87:23:82:a3:60:
a8:d9:55:17:73:38:a1:05:51:ed:33:0c:d8:9c:2b:4b:9d:b5:
e2:a0:b6:be:60:31:6f:2e:7f:63:01:aa:ef:84:b4:94:55:b4:
3e:6a:65:8f:97:2d:4a:aa:b7:96:42:fe:75:ba:81:bf:34:07:
ed:34:b7:2e:f3:33:c6:9d:fe:ee:80:b8:2a:ce:17:71:42:ef:
92:da:78:f9:39:aa:b2:44:42:fb:9f:2e:2f:7b:02:9a:12:6c:
9c:f2:2f:99:b5:54:4e:c3:2e:58:1b:64:0c:7a:c7:cb:f4:98:
ba:e8:0b:9d:67:1d:0f:2c:7a:a1:c6:38:a9:7a:ae:e9:e9:49:
0c:ba:0f:a7:23:0f:5f:8a:61:a2:0b:51:9f:2e:ce:a4:e9:4f:
57:ad:64:4d:64:6c:77:16:37:15:d7:09:21:de:1e:0d:03:90:
44:fe:53:53:e9:04:df:77:52:f3:6f:3b:a0:5b:c3:74:70:50:
f9:d6:3c:71:c2:64:c7:f5:32:a0:b8:15:b5:a2:6b:d6:51:26:
4f:2d:8a:fc:4a:d8:44:44:30:c5:f4:2d:96:b4:19:8a:b3:74:
26:9d:4c:62:4c:18:42:13:d4:32:ee:b2:34:00:d8:f1:ae:e9:
b5:7a:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:21 2026 by rpki-client