Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
File: JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft (raw, json)
Hash identifier: QY3yNym7RN8RJp5x9ouyVuZj9dWW59hTQGsAQu/Mw7Y=
Subject key identifier: E3:3F:64:4D:EC:48:BC:06:7C:89:74:EE:68:F0:E5:91:22:85:5D:3B
Authority key identifier: 26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
Certificate issuer: /CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Certificate serial: 019D371B403CD123E3364AFFA66F8CCEB91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
Manifest number: 93
Signing time: Sun 29 Mar 2026 01:00:25 +0000
Manifest this update: Sun 29 Mar 2026 01:00:25 +0000
Manifest next update: Mon 30 Mar 2026 01:00:25 +0000
Files and hashes: 1: JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl (hash: 1+AXq+/4/nXUsqn3+SwrJBLY8cU4Odhi6ZnVAlxrMNI=)
2: dYe6I9SYNrNnhKkXOoAoD02mEm0.roa (hash: 09A3/mfGOz3JnMMn3RkVi1jZZF6RAGtFJEOIwgWgPJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:40:3c:d1:23:e3:36:4a:ff:a6:6f:8c:ce:b9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Validity
Not Before: Mar 29 01:00:25 2026 GMT
Not After : Mar 30 01:00:25 2026 GMT
Subject: CN=e33f644dec48bc067c8974ee68f0e59122855d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:6c:2e:20:23:83:ce:3a:40:e1:ca:99:63:
00:12:97:ef:ae:96:b3:a3:74:ed:84:67:2c:3b:f6:
32:07:c5:63:3b:f9:65:8c:53:5b:4b:18:1b:bc:71:
57:49:c3:8e:69:06:21:eb:8d:10:86:ac:4e:ae:d6:
12:6c:8b:ac:a9:7b:1b:b8:94:c4:b5:3d:f5:9e:db:
42:59:cc:70:f1:bc:84:9f:ec:c9:77:d0:81:fd:80:
69:79:0c:97:fc:94:5a:31:60:60:16:3a:a7:36:cb:
02:40:31:32:cd:fe:7b:e3:f2:69:fd:e0:6c:e9:4f:
68:39:86:ac:eb:94:64:9f:0b:45:31:c2:90:c0:20:
20:87:57:7a:b9:95:2c:f9:28:1f:b5:82:4b:89:6b:
98:26:b8:d8:40:c2:55:47:5f:d6:b6:64:7b:3c:d5:
e1:cf:7d:e9:b3:96:83:a7:c9:e1:13:13:1d:ec:53:
43:45:10:a5:d3:c8:00:08:db:5a:c0:da:03:59:28:
b5:4a:41:96:8d:36:c2:7b:2c:8c:e7:5d:65:65:d5:
4e:b7:e5:0a:35:7b:a5:11:18:47:59:57:c4:d2:39:
ff:08:98:35:94:53:ef:6b:c3:3b:ab:38:3c:75:a1:
01:ab:c8:11:87:05:db:2d:e9:6a:ea:57:28:29:0f:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3F:64:4D:EC:48:BC:06:7C:89:74:EE:68:F0:E5:91:22:85:5D:3B
X509v3 Authority Key Identifier:
keyid:26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:58:d2:f7:0a:3f:01:5f:f7:0e:22:55:d1:fc:b8:07:86:7f:
05:f9:69:ba:7c:af:19:01:1b:f9:0e:ef:7a:db:ab:b4:8b:db:
6b:0c:a1:26:70:01:84:c0:28:3a:fb:fe:ab:ab:90:4d:41:2b:
ef:60:09:14:dd:d1:27:62:07:eb:aa:5a:fa:59:46:3e:39:f6:
44:94:00:01:b1:47:16:44:49:b3:24:be:35:78:49:6a:a4:db:
3a:35:01:a6:a7:a9:85:3e:70:d0:a5:19:ae:ad:21:25:75:52:
37:b6:cf:76:9e:ea:e0:e6:c8:9b:3a:d0:2c:74:4d:de:ee:94:
09:e4:cc:77:34:82:38:5a:48:09:13:9f:2c:4f:db:4a:f1:fa:
72:0a:5d:f3:54:72:00:1f:52:df:6d:a5:c1:f4:70:0d:74:26:
f0:14:6f:6c:38:e4:5f:03:e5:6b:ed:99:b2:2d:c9:00:f3:12:
b9:96:04:9e:7f:30:a3:77:64:ee:55:b7:29:f1:a7:1c:ef:23:
03:9a:55:68:eb:38:7d:ff:43:a1:d5:7c:76:4f:e6:79:79:6d:
d7:23:ae:e0:44:3f:cb:b2:68:5b:98:60:46:fb:d0:a7:f2:01:
df:79:6a:68:15:9d:58:1f:e3:14:8b:be:69:4c:36:63:31:16:
af:83:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:25 2026 by rpki-client