Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File: JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier: nZwCZuidC2/8DIDSYWIwEUaj/fdftkq8nNyaLMbIEuw=
Subject key identifier: FF:76:FF:13:F7:A5:46:BE:60:9F:D9:D0:90:C7:BC:11:F1:71:9B:5E
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial: 019D38D3698F930E04D359616195794D278A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number: 070D
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: HQKEQGzJ8V_M4AMZFBCGwcAArQQ.roa (hash: TmKJc0/C+P9Rrj+HXzJL2J/O3BBKY350jNbCd9YcASM=)
2: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: Lvc8Jk9ma347RWrBfD/nyxtglFMXbsaIeMOd7upBSHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:69:8f:93:0e:04:d3:59:61:61:95:79:4d:27:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=ff76ff13f7a546be609fd9d090c7bc11f1719b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:ec:6c:24:31:74:9d:20:c2:32:b5:0a:d4:
3f:85:5e:8e:d3:ad:12:39:3b:c9:02:a2:ad:e0:c3:
fd:0f:96:00:29:43:40:60:3c:d3:49:7d:07:11:74:
80:f5:db:1c:40:19:ef:a6:bc:b7:dc:d5:00:52:e4:
75:fc:91:cf:86:64:3c:68:84:f3:4d:eb:c9:a1:8c:
bc:24:72:03:11:b1:7c:ee:9f:6c:93:2d:5d:bf:48:
2a:11:0a:cb:d4:9f:3b:0d:d5:af:15:a6:df:4b:b1:
c9:b8:61:c1:3e:9e:30:8c:ec:c2:65:54:a2:e1:82:
11:d2:9c:9a:8d:b3:ac:c5:9f:77:9d:14:52:18:79:
c8:9b:2c:13:c5:1d:a2:a6:01:fb:a6:4b:d0:44:aa:
2d:ba:88:87:be:07:86:24:f0:43:5e:75:0d:70:60:
01:94:fb:48:42:d0:05:22:02:31:60:83:f4:4c:00:
1e:68:8b:c8:83:6c:19:67:82:78:ba:d3:a6:29:d5:
4a:23:46:25:d5:52:30:0d:d2:32:cc:d6:f2:c9:72:
b8:04:f2:b1:b5:db:f9:c4:e3:cc:18:9d:dd:ce:76:
fc:12:14:ef:f7:46:10:39:07:b2:68:03:e2:1b:6e:
94:0b:9b:67:da:e2:85:f5:9d:47:a1:9e:35:6e:17:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:FF:13:F7:A5:46:BE:60:9F:D9:D0:90:C7:BC:11:F1:71:9B:5E
X509v3 Authority Key Identifier:
keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:73:dc:3c:22:ed:59:16:41:14:cf:e0:b5:24:7f:49:11:
14:b0:3e:97:ee:5b:82:fa:b9:e2:da:28:46:de:d8:4e:34:da:
de:7b:19:dc:16:fa:db:00:17:2c:81:07:8f:93:56:de:81:89:
cb:a8:d3:01:48:7c:14:7c:15:7c:50:bf:d6:dc:a7:6f:19:0a:
97:76:2e:8b:b5:82:8c:17:4c:bc:ed:b5:9f:66:8b:aa:ff:03:
9f:9b:79:7b:fb:32:46:cf:3e:76:75:40:d4:a5:c7:c3:ae:4c:
c5:ac:51:f6:b2:95:4b:cd:c9:f6:41:39:ad:96:7d:4b:fb:a4:
8f:ed:2d:0b:0d:9f:37:db:04:6b:7b:76:67:70:ed:63:46:07:
39:28:e8:ab:22:62:bb:09:b5:b3:f9:3e:d1:ff:4b:7e:94:6f:
b3:47:29:b5:77:83:43:0b:30:22:a8:97:c2:36:c6:eb:c0:c6:
0f:a0:6e:bc:30:5a:75:ed:57:64:58:ea:b5:2f:0c:cd:0f:16:
f5:ff:f7:a8:f8:f5:86:5c:41:1d:2c:2d:49:d6:1a:54:a9:18:
61:bc:55:24:03:38:8a:4d:33:3b:eb:6d:5d:0c:9f:51:58:bd:
a5:51:bb:e8:d9:3e:d5:35:49:af:5a:b4:d6:c4:28:ca:56:19:
95:1f:1e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:10 2026 by rpki-client