Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
File: JjRrQucioj8zB71y9XN2LAJPI4U.mft (raw, json)
Hash identifier: BGUPrOqxHZ/mF21JMF9GDdHqqE/LPR8ftKM2hmGtyUE=
Subject key identifier: 24:C9:7B:42:46:F2:DE:9E:56:42:A5:F9:A2:EF:E7:3B:91:44:20:11
Authority key identifier: 26:34:6B:42:E7:22:A2:3F:33:07:BD:72:F5:73:76:2C:02:4F:23:85
Certificate issuer: /CN=26346b42e722a23f3307bd72f573762c024f2385
Certificate serial: 01A08AC37C556A14230C9D95A5DDB2B4B077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
Manifest number: 0152
Signing time: Thu 10 Sep 2026 10:01:02 +0000
Manifest this update: Thu 10 Sep 2026 10:01:02 +0000
Manifest next update: Fri 11 Sep 2026 10:01:02 +0000
Files and hashes: 1: JjRrQucioj8zB71y9XN2LAJPI4U.crl (hash: 4+J+8F9esQ9GBeTp4EixUGiI1z2NdQbHIXWm8L5b45s=)
2: q8RepG1EYgx-WqxItUPX_OH0OX0.roa (hash: b4kZ60ZayB+5ne7ycneOFCjARrzoZ1efrTrEpXK66A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:7c:55:6a:14:23:0c:9d:95:a5:dd:b2:b4:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26346b42e722a23f3307bd72f573762c024f2385
Validity
Not Before: Sep 10 10:01:02 2026 GMT
Not After : Sep 11 10:01:02 2026 GMT
Subject: CN=24c97b4246f2de9e5642a5f9a2efe73b91442011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:7a:ed:a5:92:a0:c3:43:0f:76:0d:fa:86:
be:94:de:17:42:93:2a:5a:37:f7:d4:d9:77:00:dc:
3d:d3:52:59:c0:0b:96:2b:97:c6:81:81:48:fe:e2:
02:40:85:d3:0b:31:a4:97:61:ae:af:b8:ce:2b:da:
30:c8:77:d3:c1:21:1d:da:4a:12:ed:f6:9b:f1:44:
96:6c:05:52:9f:a7:de:ea:cf:b5:65:93:7b:d6:eb:
d1:e2:eb:2c:c1:71:9e:8a:d5:01:36:14:8b:f4:84:
1b:b3:7d:3d:7f:ed:bb:aa:b8:d5:e5:a5:9b:10:10:
54:02:a5:5b:e8:24:9a:ad:f2:d2:22:13:a8:36:0e:
a3:70:1e:97:86:12:a6:05:fb:4d:e1:d0:5d:1f:19:
3a:6f:64:93:c0:70:9e:3e:69:9c:40:84:0c:bc:a8:
d1:f4:0a:ba:ee:31:8b:fb:8d:56:08:89:de:38:29:
9b:67:c4:fa:34:16:1a:69:0c:42:23:3b:be:ee:f4:
83:06:fa:84:f7:17:1e:7c:ea:84:0e:bf:b1:66:c5:
43:75:67:5b:0a:cf:c3:f1:42:62:45:86:db:96:c0:
91:a2:97:18:d5:fb:39:0b:73:53:2b:4f:9b:4e:bf:
d1:78:79:86:d1:f1:8a:93:66:56:36:b8:05:b3:8e:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:7B:42:46:F2:DE:9E:56:42:A5:F9:A2:EF:E7:3B:91:44:20:11
X509v3 Authority Key Identifier:
keyid:26:34:6B:42:E7:22:A2:3F:33:07:BD:72:F5:73:76:2C:02:4F:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjRrQucioj8zB71y9XN2LAJPI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/282796-2b3e-4ce1-8fbf-3e986c6fe87d/1/JjRrQucioj8zB71y9XN2LAJPI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:19:d7:92:47:01:99:1b:ca:ad:cb:f3:01:aa:89:3d:d7:c1:
11:59:a0:af:0e:7a:1a:b4:c7:52:57:8f:18:ab:09:33:66:53:
13:36:68:2e:19:de:91:1e:bb:a4:d8:ed:d1:72:e0:46:48:d2:
1f:83:d1:cb:48:d2:8f:1c:d2:d8:d0:2f:31:10:5d:86:50:2f:
d6:d7:e1:c0:98:4f:f7:14:15:8e:7d:6f:f3:8f:b6:e1:2b:c8:
05:a5:c7:29:69:c2:3b:0d:03:d2:2f:23:4c:3f:b7:52:1c:02:
ad:99:a5:2c:b4:9e:fc:48:2e:eb:a9:9f:56:c6:72:61:05:15:
ff:c4:16:32:2f:1a:44:79:93:50:3b:4a:31:c8:a8:fb:09:6c:
9a:5c:32:f4:d8:e1:93:68:dc:8b:0e:b1:c9:cc:15:5f:af:96:
c8:14:94:08:c3:48:a4:47:a4:21:a8:98:e3:96:41:7b:a3:c3:
96:b1:64:3c:5f:5a:8d:ad:38:87:c9:60:fd:e6:4f:f4:76:ef:
d9:fb:14:59:08:b3:b7:f8:e8:e7:f4:a8:ec:2a:77:01:27:e5:
4f:12:55:b7:b6:91:f8:a0:c4:12:61:f4:88:57:ce:05:4e:c8:
c6:1a:ab:25:11:00:91:b9:e7:57:19:6b:71:b0:9d:93:d8:d9:
89:15:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:02 2026 by rpki-client