Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
File: JvRVgKY2EDzJWr6BCg0GkouaDd8.mft (raw, json)
Hash identifier: 5volSQzrWtm+u06Rs220NRtfHqoJ5XJWA++z8PKlfZo=
Subject key identifier: B9:BC:C8:55:D5:7A:81:E1:A2:DE:F4:5F:FE:1F:51:06:9E:50:1C:87
Authority key identifier: 26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
Certificate issuer: /CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Certificate serial: 019CE47E9B1E7A76074A856F91936E807820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
Manifest number: 29
Signing time: Fri 13 Mar 2026 00:00:28 +0000
Manifest this update: Fri 13 Mar 2026 00:00:28 +0000
Manifest next update: Sat 14 Mar 2026 00:00:28 +0000
Files and hashes: 1: JvRVgKY2EDzJWr6BCg0GkouaDd8.crl (hash: 83NucDbO9r3iZjukQDiU8Ic5HuiJRcSxBEWuaMLFV9s=)
2: w-nnLB0gJHLqHYNGFppYN7WkZFM.roa (hash: QK4oKJXySakBc6G1Ar7UfRyPt44Ci6G96TsVap7g1D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:9b:1e:7a:76:07:4a:85:6f:91:93:6e:80:78:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Validity
Not Before: Mar 13 00:00:28 2026 GMT
Not After : Mar 14 00:00:28 2026 GMT
Subject: CN=b9bcc855d57a81e1a2def45ffe1f51069e501c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:2f:91:ab:0e:d2:b4:be:33:d3:17:b1:64:
b4:aa:99:a6:0f:db:15:fb:74:8e:81:26:63:07:cc:
dc:2b:9a:fc:14:0f:02:85:8f:36:47:21:57:14:de:
47:77:4e:7c:ab:b9:72:a9:73:ec:06:5c:ba:ad:5a:
e6:f3:3b:7a:4d:b4:f0:c8:f8:2f:fe:e7:38:bd:1b:
d6:07:02:66:35:49:56:d6:b6:c0:53:b7:a2:23:f5:
d4:54:28:d5:64:58:76:53:ca:c5:a6:3e:fa:24:0b:
81:32:c7:b5:bb:13:ed:a5:c0:90:8e:45:d2:ec:9f:
1b:0c:a1:fd:84:da:bb:62:81:1a:d9:4d:63:ca:41:
e2:eb:a7:f6:d1:02:85:25:4a:a1:5a:22:a4:46:59:
fe:86:09:03:ad:4c:92:a7:ca:f1:77:ad:9b:0b:c5:
4d:22:72:d7:95:dc:f3:73:be:9a:d0:96:4e:6b:66:
41:6b:d8:ec:34:69:7f:34:1a:94:5c:54:2c:33:6d:
55:76:ad:dc:1c:b9:c4:03:73:b2:17:dd:38:d9:c6:
66:10:d7:11:d4:7b:8d:ae:88:a2:ec:36:ca:70:9d:
44:a2:56:90:eb:42:f9:0e:e1:69:f9:87:45:33:ba:
f5:9d:42:52:c9:94:7d:e0:c8:b2:f5:2e:48:f3:e5:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:C8:55:D5:7A:81:E1:A2:DE:F4:5F:FE:1F:51:06:9E:50:1C:87
X509v3 Authority Key Identifier:
keyid:26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:55:31:9e:b3:4f:24:80:17:b2:79:3a:53:be:7c:89:0f:b5:
ff:46:90:38:fa:57:06:8e:80:d4:85:96:65:ee:90:aa:3f:05:
5f:3f:22:a3:00:a6:ac:ee:da:2e:1e:0a:85:83:de:d1:2a:8e:
b6:52:85:f9:24:0a:01:cf:df:f7:32:9e:60:81:7c:a5:37:29:
eb:2b:31:68:56:2d:2d:fe:c6:97:1e:8f:d3:df:fe:02:20:ad:
15:2d:14:c6:5d:a4:5f:50:44:62:64:c4:ff:ee:d5:78:ff:7c:
97:8d:0f:19:68:c3:32:07:cc:02:11:07:59:35:6b:b7:a6:4e:
fa:72:ee:9d:6b:0e:f4:27:66:3e:0e:bf:3b:5b:1c:b4:42:82:
eb:db:82:71:76:a8:02:5d:4e:6f:9a:7c:f4:e5:37:17:22:91:
1a:d7:2b:22:06:78:18:4a:7f:ed:62:13:fe:80:9a:cb:6c:e5:
02:f4:ed:8e:71:1f:7e:08:cc:32:d5:87:a0:d9:43:f4:fb:02:
4c:4e:59:7c:f7:28:1d:69:93:4a:0c:7a:88:03:2d:01:7c:c8:
e0:79:b3:46:e6:88:68:c8:68:77:6c:a0:00:72:8b:08:3e:8e:
22:7b:89:c4:85:2e:0e:76:e9:71:39:39:49:65:a9:9b:7d:40:
23:0b:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:53:07 2026 by rpki-client