Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: 0H3DDlAo1r4dumLxFnGC2Q08NyLdLgMKnm9X2uKnesQ=
Subject key identifier: 3D:65:00:BC:89:04:9F:9B:A3:7C:DD:D0:24:80:22:88:47:F0:15:3E
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019CE748ED5462735DF883E953E8D69913FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 024A
Signing time: Fri 13 Mar 2026 13:00:42 +0000
Manifest this update: Fri 13 Mar 2026 13:00:42 +0000
Manifest next update: Sat 14 Mar 2026 13:00:42 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: ZPJLH6S0O5KEYoTtbGTJ9ds/HCijVC+JVwguDHPbv0M=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:48:ed:54:62:73:5d:f8:83:e9:53:e8:d6:99:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Mar 13 13:00:42 2026 GMT
Not After : Mar 14 13:00:42 2026 GMT
Subject: CN=3d6500bc89049f9ba37cddd02480228847f0153e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:9e:b1:74:ac:de:f6:eb:ed:14:e5:0a:82:
25:9a:ed:c7:70:ff:45:05:78:64:24:66:11:2e:0b:
c3:4b:df:57:19:f0:12:2f:ca:d3:f1:a8:2d:c0:a9:
0b:dd:24:44:d5:29:8f:a4:89:8a:33:82:8c:b6:35:
64:76:08:9e:ed:9f:a2:a9:09:ca:86:02:53:1c:1c:
77:38:00:29:44:65:70:2e:14:e1:e7:9a:cd:d4:08:
61:61:60:45:58:2d:a4:ab:09:ed:6a:e1:98:0a:d5:
eb:fc:f0:14:8d:0a:51:ae:71:4e:f6:7b:07:70:5a:
2c:1c:af:b8:c3:92:4c:2c:b4:bc:5f:e6:04:45:8c:
6f:d9:c4:f4:f5:46:8f:41:66:af:78:46:38:68:ee:
17:ed:b7:c1:27:0a:71:da:2b:21:cd:84:19:70:05:
27:97:e8:03:81:c4:ee:0d:99:db:2b:55:d4:56:fa:
7e:96:45:3c:b5:5a:51:d4:c0:34:25:71:f5:76:b9:
1f:1d:50:ff:a6:f9:de:0a:8b:26:a6:29:53:09:c3:
81:4f:5c:79:74:45:79:82:70:44:a8:9d:81:9b:da:
0b:ea:ae:d4:fe:bc:a9:90:e3:c0:19:cd:70:f1:8d:
0d:18:b2:8a:c2:13:98:52:b2:a9:09:49:6b:83:8c:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:00:BC:89:04:9F:9B:A3:7C:DD:D0:24:80:22:88:47:F0:15:3E
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3a:41:67:c5:14:e6:85:f5:90:2f:ce:d1:3b:50:52:f6:16:
8e:04:bf:37:ee:45:35:cd:9a:eb:12:f0:0c:fe:56:3c:83:9f:
a6:ca:a7:21:83:7f:07:d7:b5:f5:43:ef:d7:af:a2:c9:f8:03:
dc:cd:33:05:17:4f:2c:29:b4:cb:5f:45:05:a0:c6:33:18:a9:
6a:4b:19:d7:6a:d8:3f:4b:58:35:7f:fa:60:73:08:ac:80:09:
30:b1:6b:ee:72:7b:07:71:69:8f:a1:c5:6e:9e:13:83:d9:dd:
0f:c2:ed:0e:49:ea:d3:61:2d:46:20:57:40:ec:3b:78:9b:36:
2e:62:09:f3:28:bf:1a:24:b9:ef:e5:76:d1:61:77:61:eb:a4:
fe:82:a2:ad:27:b0:a4:0a:9f:54:2c:2a:89:74:4c:9a:f4:d5:
44:2b:f9:32:a2:a3:dd:ad:78:c1:e8:23:5e:79:19:91:59:47:
fe:b3:96:5c:de:51:7e:75:5c:05:5e:0e:68:1b:48:39:d5:f5:
a4:dd:2c:12:0c:86:79:3e:14:b3:6d:16:94:66:a4:7c:3e:1b:
50:29:69:ea:8e:0e:be:32:33:81:21:a2:65:1d:70:2e:80:88:
ec:d1:ff:13:48:ff:da:5d:29:ce:17:bf:e8:23:75:30:f0:dc:
e1:63:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:54 2026 by rpki-client