
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
File: Jqwzv336i9kGGrnml_STFk5JxFg.mft (raw, json)
Hash identifier: ndWzngXny4B0HhnV/hTsN2Xq4Dbo3rW+I34qYv317fg=
Subject key identifier: 73:6E:E5:BF:B9:38:10:58:E7:A0:07:AD:56:A4:4F:F5:2B:69:83:B6
Authority key identifier: 26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58
Certificate issuer: /CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458
Certificate serial: 019D38D39EDEADE439BB6DA0B749E7AC145C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: Jqwzv336i9kGGrnml_STFk5JxFg.crl (hash: 76dmOn9gsUSfLtAcBAERK4l8pZy3StlPq416md8UMe0=)
2: d7TMwS92glTdW3N8KmDukqMRLqU.roa (hash: 31LbEXEUnAvolwco3YmcCdR5874EevAvdxtYmb4X9nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9e:de:ad:e4:39:bb:6d:a0:b7:49:e7:ac:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ac33bf7dfa8bd9061ab9e697f493164e49c458
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=736ee5bfb9381058e7a007ad56a44ff52b6983b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:3b:25:be:dc:09:50:da:23:b0:df:22:f8:
16:7b:23:a4:17:d3:73:e0:10:ae:11:94:9a:36:1b:
88:a4:95:c8:d0:a3:ad:26:f8:99:e8:0d:45:6b:03:
7c:5d:40:8b:9d:2b:12:18:66:78:b1:7f:b7:2b:44:
5d:0d:d0:c9:ab:f9:4d:df:c9:94:c5:16:b5:32:cb:
77:c3:52:bd:20:5e:2f:c6:46:30:6c:18:21:28:49:
df:6b:09:0e:9b:47:2f:55:1e:c3:14:c8:e9:bd:5e:
77:29:39:63:5b:3b:ef:6a:9e:ab:ec:b0:7f:c4:b0:
09:dd:5c:00:eb:9a:c7:40:cb:6b:28:fd:d7:57:30:
1c:f7:70:e6:69:02:28:d2:61:e6:61:a4:c0:d7:d0:
10:89:e8:b0:76:2b:95:71:6b:fd:83:9b:58:0b:1d:
13:fc:2c:05:6a:9c:39:b2:a0:e9:6e:d8:c6:56:aa:
75:e5:44:45:e9:10:75:be:38:9d:25:71:7a:96:e0:
d8:da:35:79:b0:f7:52:2e:39:e9:f1:ef:57:f2:ec:
b3:9c:fe:d4:c5:b8:30:99:69:24:a9:1c:f4:b9:c7:
6f:f3:59:43:2e:f4:84:13:82:83:1e:3f:ac:d5:62:
63:71:d1:79:32:52:f9:fc:1c:70:7f:29:d1:f7:53:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6E:E5:BF:B9:38:10:58:E7:A0:07:AD:56:A4:4F:F5:2B:69:83:B6
X509v3 Authority Key Identifier:
keyid:26:AC:33:BF:7D:FA:8B:D9:06:1A:B9:E6:97:F4:93:16:4E:49:C4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jqwzv336i9kGGrnml_STFk5JxFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1a6489-959d-44c7-81cd-420eb6f0b286/1/Jqwzv336i9kGGrnml_STFk5JxFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b8:6e:e2:80:16:41:59:52:b8:bb:2c:c6:13:98:f0:14:94:
92:28:f7:bf:db:26:80:b2:dd:b0:86:04:15:5b:c7:75:11:25:
65:e8:7e:27:4e:77:7f:fb:f5:f4:c4:cf:c8:7d:31:5b:4b:67:
56:ab:28:45:63:f0:9f:a2:63:c4:8f:67:3d:bf:f5:44:8e:09:
3f:40:cd:8c:c2:08:0a:e0:5a:a4:b1:5d:7a:b3:04:47:dd:1d:
a5:3b:8d:64:30:b7:ed:a0:c2:86:13:c7:59:3f:0c:0f:f3:18:
ea:62:06:6c:c0:39:cf:52:3e:33:72:9f:a0:85:3a:e6:cb:d1:
33:e2:e7:65:a7:4f:dc:2f:cb:db:df:56:bf:8f:d6:23:e8:67:
d2:7f:6d:ec:6f:14:0d:4c:d1:13:ae:1e:e6:09:51:5e:8d:82:
82:e1:f3:58:9c:6b:95:3f:c6:8d:71:0b:76:bc:9c:75:15:91:
90:b3:05:ae:b0:d1:85:51:d0:b4:35:3d:bc:3b:f9:bd:60:d7:
86:3f:dd:c0:ea:21:ca:67:a2:79:7f:e6:f6:b6:05:15:95:ec:
d7:83:0f:6b:bd:09:83:3d:86:ac:23:c5:73:0c:22:3e:a9:1c:
82:5a:ac:fe:56:89:11:26:d9:57:d4:08:e8:3c:75:d0:8c:ba:
66:55:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:28:20 2026 by rpki-client