Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier: +dGUboLbBwS3+hKzZhNM1sqxt9p/Cuvc+mEnAJvmp2w=
Subject key identifier: 34:23:26:15:84:88:77:ED:A9:62:A5:D9:0A:43:5D:D9:F9:B3:FC:18
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial: 019D39AF23C91A9F46BA564C7C3A5886BF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number: 03E1
Signing time: Sun 29 Mar 2026 13:01:12 +0000
Manifest this update: Sun 29 Mar 2026 13:01:12 +0000
Manifest next update: Mon 30 Mar 2026 13:01:12 +0000
Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: kR2J2twJrk0qNyi4Q05oCX44YXCLW9iAofyE5b2M1cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:23:c9:1a:9f:46:ba:56:4c:7c:3a:58:86:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
Validity
Not Before: Mar 29 13:01:12 2026 GMT
Not After : Mar 30 13:01:12 2026 GMT
Subject: CN=34232615848877eda962a5d90a435dd9f9b3fc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:a5:15:da:8d:40:81:86:9b:04:ee:5c:96:
b0:75:a5:3c:ad:73:2d:f6:61:7a:86:43:fe:ee:b6:
91:44:cf:54:54:38:71:77:23:08:2e:c9:d3:b9:d8:
a5:4b:b4:9c:bc:74:fa:8e:87:ce:9c:ea:fb:22:13:
1d:d2:d6:0c:2c:18:0e:8d:f6:f5:fb:4c:6b:f4:78:
36:3a:91:0c:3c:60:17:36:1d:e4:93:d3:2b:73:cf:
8d:34:ba:30:ef:94:64:74:ec:19:6c:cd:17:57:82:
28:3c:ed:04:69:01:f8:61:6e:41:59:dd:25:d4:f8:
21:d6:75:b2:c0:b0:23:d8:24:57:04:ef:ac:53:8d:
5a:e0:8c:4c:ec:4a:92:db:8a:15:18:89:d2:ff:39:
ac:0f:0d:43:ad:36:cd:8f:bb:72:fe:7c:6b:89:85:
b7:63:b8:42:7b:d1:49:00:a1:ca:33:ee:6f:03:fb:
0f:1e:26:a1:e0:cb:04:58:81:8b:53:59:27:5f:90:
cf:b3:8a:d1:10:92:76:0c:5d:a0:4b:d2:43:4d:7d:
e7:cd:08:59:8c:3e:6b:aa:e6:1b:55:68:b2:01:7e:
e0:9a:d7:d1:e2:7b:95:5a:c8:d1:d7:1f:a8:b9:2b:
73:b5:3e:32:1d:0d:f7:b7:fe:bc:1f:1a:6a:b4:0c:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:26:15:84:88:77:ED:A9:62:A5:D9:0A:43:5D:D9:F9:B3:FC:18
X509v3 Authority Key Identifier:
keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:7a:b5:f0:43:0d:5f:fd:cb:81:bc:99:f2:ac:f0:fa:17:
65:7c:e1:31:62:31:52:98:ea:40:a8:9f:70:fa:83:b1:41:24:
75:02:cc:78:32:2a:2b:91:2e:4d:5b:02:97:51:97:8c:1e:b9:
c0:19:b7:f4:89:19:3d:99:bf:82:a4:ca:02:7a:65:88:72:49:
e5:77:9a:e1:68:ae:a6:ef:6c:bf:c4:a6:9a:f7:98:61:69:16:
79:9f:87:8c:eb:43:64:28:94:be:fe:53:18:6a:6f:9f:4a:2d:
f4:f0:a9:17:12:0b:8a:ea:f6:d6:87:c2:da:14:4b:b8:77:3d:
79:27:ce:c8:29:e2:c7:34:50:f4:d8:e8:01:32:15:fd:3d:f1:
85:40:ab:35:56:a1:61:78:85:4f:73:83:41:ce:8c:79:df:0d:
77:b0:c9:fb:1b:32:ca:59:f1:5a:f7:9a:24:71:b6:c8:cf:48:
99:16:8b:d5:e7:12:e6:b8:5a:ce:99:d7:9c:15:03:90:27:ac:
d0:c5:89:3b:d6:66:dd:5a:bc:c1:e7:36:76:32:98:31:bf:b9:
d9:0c:19:52:72:9a:61:ef:dc:12:6f:a1:ea:b3:d3:45:46:ea:
5a:51:21:3c:e0:4f:cb:85:c0:d6:d6:31:2d:69:58:73:84:23:
2e:db:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:05 2026 by rpki-client