Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: BaeyMYSMcDQanzwH/YD8qfxHDK7IIXfkVBkOS7lC8c0=
Subject key identifier: C5:49:B3:A6:B2:38:DA:1B:0E:14:DD:B3:4F:0B:09:9D:E0:2B:F6:0C
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 019D3A1C563C0A79BF569183CCA0195CEDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 15:00:28 +0000
Manifest this update: Sun 29 Mar 2026 15:00:28 +0000
Manifest next update: Mon 30 Mar 2026 15:00:28 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: OZCNrDeRBCICRpNWxoMy9WeGyLYxSHutLA7NCBxbC30=)
2: m0Ovx0Sqw4Mvmnjc_rT54ARItq0.roa (hash: nkxhqGEnqwsqr1mf5UgG9VF9xVU0Wk8zI/Hwu2iNPWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:56:3c:0a:79:bf:56:91:83:cc:a0:19:5c:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Mar 29 15:00:28 2026 GMT
Not After : Mar 30 15:00:28 2026 GMT
Subject: CN=c549b3a6b238da1b0e14ddb34f0b099de02bf60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:8a:1c:29:2f:3e:42:49:6c:9c:5c:b3:d6:
ba:eb:b1:fb:7a:4a:ba:f2:a4:cc:75:41:30:53:9d:
17:69:87:31:37:5b:25:04:f2:c1:f0:cf:16:8b:e3:
00:13:43:73:59:3c:69:59:17:e0:0c:db:af:83:d1:
ea:47:a0:86:c5:c9:2f:a2:15:37:74:5d:9d:13:4d:
0b:3e:34:a5:84:0c:7b:60:1f:0a:60:ad:ba:ee:b0:
e8:b5:ad:54:4a:8e:e0:86:eb:e2:47:2d:a0:58:1c:
0b:52:64:ca:7c:c7:ef:0a:0d:6b:31:11:52:83:fc:
42:7b:be:f3:a9:10:93:3b:c1:98:e4:0f:e9:45:a5:
d9:78:82:41:9e:fd:91:f5:a8:ad:ae:6c:8b:84:72:
7f:6c:3e:c6:88:15:94:e5:7c:64:f9:07:be:d6:4a:
49:9f:09:f3:18:00:8e:b9:db:9e:dc:81:6c:f7:b1:
80:d3:39:d4:9f:d9:d2:98:ce:3e:b3:52:c2:23:c0:
4b:50:76:a0:82:c9:d8:f1:c2:f3:a1:a7:17:1a:1d:
13:87:72:1e:c9:30:f7:24:bc:52:a9:14:3a:fb:03:
90:39:61:94:f6:24:44:8a:6f:f8:44:ed:29:b2:d2:
7a:ff:0c:9a:ee:39:a2:58:8e:6b:10:bd:31:1d:63:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:49:B3:A6:B2:38:DA:1B:0E:14:DD:B3:4F:0B:09:9D:E0:2B:F6:0C
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:04:a9:9b:f4:dd:c0:2c:84:c4:f7:1b:f3:c2:9f:d6:fb:b1:
2c:e2:bd:b3:ae:0c:ca:02:b9:9c:0e:f4:e0:ec:03:18:08:9d:
aa:3f:d8:f5:10:d0:fd:26:bd:c8:ce:9d:69:9c:10:a4:95:7b:
c7:75:7e:1c:71:d2:57:a6:81:62:e4:e4:1c:c4:22:3a:19:aa:
d8:f7:bc:3b:78:68:e1:b7:a3:b6:58:f5:25:e4:99:c4:d3:b8:
d1:cd:34:9b:26:3f:77:e6:a1:61:83:78:61:96:7f:50:ed:a8:
e4:2a:5e:aa:1d:af:7c:3f:92:b5:e0:2a:20:93:ba:f6:e7:ce:
e8:92:3c:07:4e:e0:bc:5e:e1:d7:c8:e6:51:ef:40:6d:71:48:
ba:51:4a:20:38:6b:72:b1:49:a8:f0:57:e6:92:d2:e1:1d:ac:
dd:bc:39:01:36:a4:da:68:07:fa:ca:9f:b7:1d:50:d0:d3:3d:
11:24:3e:2f:c6:2d:33:47:aa:8d:19:fa:be:84:e4:48:cb:32:
f6:b3:c0:7e:5b:73:e9:a9:18:82:23:bd:0e:10:98:c5:03:9d:
a1:76:f2:e2:34:95:4b:cc:b3:09:5b:2d:9d:c6:2f:bb:93:90:
da:8e:40:ca:2d:c8:be:ba:bc:54:96:51:a2:93:04:1c:8e:d2:
0d:99:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:34 2026 by rpki-client