Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File: JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier: G1daUKms3MHhVJ4PORftsEJ7oNTvYET1OyOEsuGx4qQ=
Subject key identifier: A3:11:79:EC:99:C7:9C:C6:ED:B5:FD:15:C0:F2:C0:98:3F:48:1B:A6
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer: /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial: 019CE10FC27309CD91E68CFC93EFA81C7FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number: 01C7
Signing time: Thu 12 Mar 2026 08:00:32 +0000
Manifest this update: Thu 12 Mar 2026 08:00:32 +0000
Manifest next update: Fri 13 Mar 2026 08:00:32 +0000
Files and hashes: 1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: Eq3mvNnG8gW+l3+eVfha68eDmYKzAHORvvbown5TYMk=)
2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:0f:c2:73:09:cd:91:e6:8c:fc:93:ef:a8:1c:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Validity
Not Before: Mar 12 08:00:32 2026 GMT
Not After : Mar 13 08:00:32 2026 GMT
Subject: CN=a31179ec99c79cc6edb5fd15c0f2c0983f481ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:05:5e:27:65:4c:48:d3:f3:88:f6:11:c3:
d8:e0:53:8f:61:d1:bd:0a:d0:67:8e:e4:2b:43:8b:
1b:e9:05:b1:50:98:4e:80:5a:53:7d:38:25:ec:1f:
34:4f:07:40:cf:86:cb:58:3a:52:12:74:c3:a4:a4:
9c:77:c6:7d:9d:8b:3d:fa:ad:cf:6e:60:4c:7a:ad:
3a:36:a5:28:9c:b6:cd:09:74:2b:a0:3d:04:ec:df:
10:cf:14:0e:89:8f:6f:a7:da:d2:f1:be:7a:5c:53:
db:37:6b:20:2d:8a:be:e2:f4:c2:c8:aa:6e:51:4c:
90:9b:49:df:7e:08:ef:34:63:5c:d3:de:20:94:21:
c3:7a:f5:0b:ac:2f:29:32:03:45:44:d6:e0:37:42:
d3:e0:b6:29:d7:cc:c6:24:56:7d:e2:60:1a:0b:6f:
83:74:49:ae:e4:27:27:30:d5:d0:21:25:c4:51:91:
8b:d5:c9:d4:c5:04:29:b5:b4:c5:35:dc:1c:c7:ec:
b3:fa:63:1f:32:b3:ec:b3:a0:e8:c6:37:3f:ef:16:
bb:7f:e7:56:2e:1d:80:5d:9b:f3:e3:5c:1e:35:e6:
96:1a:5b:5f:9d:19:cf:1e:1e:ac:e5:3e:49:02:bc:
66:6f:4d:fe:41:49:4f:85:33:11:be:49:0c:4d:29:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:79:EC:99:C7:9C:C6:ED:B5:FD:15:C0:F2:C0:98:3F:48:1B:A6
X509v3 Authority Key Identifier:
keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:57:51:8c:58:37:36:84:f1:57:12:f2:42:6b:61:3a:f0:e0:
2e:52:a0:25:28:97:ce:80:07:65:40:c4:d5:9b:9e:06:7d:7f:
2c:8e:86:01:f9:da:2a:d4:9e:5e:c2:43:73:bf:21:71:65:d4:
64:c5:d4:e4:5a:c2:d5:cc:79:b8:d8:03:37:11:cb:02:ad:55:
75:29:9c:c1:13:67:6c:3b:07:b5:c8:ff:02:47:3b:b1:25:f0:
b6:00:e1:ac:1e:a4:8c:e4:05:2d:68:28:5b:0e:76:cf:45:47:
ea:aa:b0:41:58:a7:e5:76:9b:af:d6:3c:9b:93:7b:ae:21:0a:
a6:84:74:45:b1:74:6b:0b:7e:b4:eb:fc:84:f5:98:71:50:45:
77:88:64:e5:c7:f0:13:0f:0c:4d:7e:a6:77:b6:7d:30:83:d8:
0b:2a:2f:82:c4:65:c1:34:e6:b7:d4:a8:d8:95:ed:ff:da:35:
fa:26:a6:9a:e0:f0:11:0c:7a:0f:d9:15:23:f2:3f:07:53:4b:
3c:09:53:4f:af:06:0e:ca:56:df:47:f7:ed:08:26:97:25:15:
68:74:ec:3d:8d:26:d1:66:8c:ff:f2:bd:31:0b:0f:30:a4:84:
2d:70:5a:24:8b:50:be:5c:a9:e6:d9:d4:bc:72:dd:c6:c2:4b:
09:85:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:50:11 2026 by rpki-client