Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: CaD8VVEiRWJaM1ItxYUAXbAE2wMz0Fg+06AgjT8+/Ro=
Subject key identifier: 0C:29:0D:69:28:47:2F:4F:C6:7F:29:0D:66:6C:9A:70:E5:9A:64:0E
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 019D3866692D6A5F542C104A649DFB577776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=)
2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: c8vdsHdQxw54I1hbLdpJt7Z91aWJrk34vL/J5wbqw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:69:2d:6a:5f:54:2c:10:4a:64:9d:fb:57:77:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=0c290d6928472f4fc67f290d666c9a70e59a640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5d:fd:b7:0b:9b:c4:bf:2b:6c:85:37:ac:00:
62:cf:82:10:10:0a:ae:fc:0d:cf:4f:01:83:27:54:
fa:51:34:33:3a:fb:ff:97:58:4e:7e:f0:a3:24:32:
c2:7b:5e:1f:e6:14:58:76:7f:37:fa:5e:69:2e:2c:
35:63:a2:7b:be:72:9a:f2:ca:cb:e8:ec:89:03:71:
ce:b8:82:41:de:d7:04:51:54:77:c4:67:e1:ba:7a:
32:72:68:c8:45:c9:43:5a:89:ac:27:04:3e:81:9d:
f5:af:b7:b4:23:cc:fe:11:35:32:a0:da:7b:6a:19:
20:fc:d7:60:1c:a6:27:7f:f6:ee:4a:c4:81:2f:bb:
ea:ea:d0:8e:dc:1a:68:7d:f4:57:e3:b9:dc:f9:d4:
cc:57:40:4b:98:3b:e2:5d:f7:49:15:8a:ac:ad:56:
f0:bf:3d:a2:f0:3a:35:b5:5f:d0:86:df:18:41:41:
dd:ff:a4:25:5f:08:0e:01:5f:f5:22:92:d5:2b:a7:
3c:49:6f:a8:f1:b3:13:ed:47:36:41:5e:5e:bf:be:
0f:55:d4:cd:23:34:8d:67:86:2a:7f:99:18:94:83:
3d:8f:36:4a:10:54:7f:26:9e:14:55:8d:59:f3:19:
7e:50:96:05:18:80:9a:38:c1:0d:11:bc:96:d5:24:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:29:0D:69:28:47:2F:4F:C6:7F:29:0D:66:6C:9A:70:E5:9A:64:0E
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:54:14:f6:ee:f7:aa:12:6c:59:f9:8a:b5:4c:14:dc:45:44:
c0:82:01:60:3f:41:bc:49:cf:52:a4:67:01:05:83:19:8b:ff:
61:ad:cc:21:ea:c4:c3:ff:f8:76:d6:6f:32:f5:dc:57:be:4d:
cb:1a:54:0e:a8:db:1c:87:b0:42:2e:a9:c3:2e:c8:b9:1c:79:
90:43:4d:e5:8f:1b:d4:0e:6f:b9:d9:85:57:fe:0b:09:5a:e4:
b0:6f:bb:fa:92:69:67:92:70:52:39:20:f1:81:ce:f0:93:53:
c7:c0:85:43:4a:5a:04:98:c1:a6:a1:01:50:49:5e:ed:fb:75:
ae:a3:e9:3e:d9:41:0f:43:5e:b2:d1:c0:72:30:7d:65:86:0b:
bd:17:73:70:28:1f:8e:56:ed:23:35:22:2d:4a:c2:00:bf:e0:
8a:43:08:1b:c3:20:a4:71:ee:2b:65:32:3c:d6:00:32:47:cb:
fa:84:2a:d4:71:71:16:01:8e:9c:3f:22:18:4b:7c:0e:f0:9e:
c0:fb:c1:2f:10:02:63:b1:9a:81:40:47:e0:87:02:dd:42:d0:
50:7b:01:87:3b:1b:29:ae:59:f8:03:24:4d:17:8c:4a:bd:1b:
cf:77:4b:1d:8b:28:bf:f0:74:da:bc:f9:10:3c:c2:0d:ea:7a:
dd:93:25:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:49 2026 by rpki-client