Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: Q7h8eNKLc7o0Tr1qAIpI1hey3tcvzoNJMvBtjNxLk4E=
Subject key identifier: 27:DD:E4:E3:5D:41:E3:DD:92:72:E1:B9:F3:40:38:83:9C:4D:A0:11
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 019D38D2DDA0F1F46829639BC337B91C78C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: qiANMZs2MkRNiGaQHerjsWpemo/y+6B9ro6IrzdjsD8=)
2: LSc0zZT14Jo7EI4R2womLi4BWXw.roa (hash: /t+Y52iuLvhD9G1Nt7yXlLrqwqdhR3k7UUDI+0b7Jck=)
3: RJf7_BZh630LGIaBvGR48OfaOYM.roa (hash: vStLRSl6R9d4MF0nfflCotGK33XI7Q9JgJmQ0UQ6+co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:dd:a0:f1:f4:68:29:63:9b:c3:37:b9:1c:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=27dde4e35d41e3dd9272e1b9f34038839c4da011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:59:bb:07:a8:33:d1:b2:0a:88:16:b5:ce:
2d:bb:95:f6:73:77:c3:36:40:81:ba:e8:ca:b7:ac:
b2:00:27:d3:3d:d4:54:a0:b9:13:c0:37:5d:02:aa:
cb:3a:45:87:00:2a:c0:a5:0a:ca:51:4e:98:d0:41:
40:4a:fe:d1:88:5a:77:6b:cf:b4:6c:1e:b0:92:20:
e0:d6:5f:c0:df:3c:e0:5b:1d:d9:e1:3a:85:80:25:
1d:7b:a6:97:22:bf:2f:19:c3:d6:c6:88:4e:60:f8:
78:76:11:5a:f8:b2:83:46:1b:37:c4:d9:9d:fc:9c:
f9:62:a7:3c:37:97:2f:2c:a6:22:51:6d:2a:81:22:
d0:51:e9:5b:b4:a3:6c:c3:31:55:63:66:3e:c5:1b:
28:d0:dd:f3:6b:28:31:21:f5:80:a7:99:1a:cd:f8:
b9:2f:9a:7f:c0:03:b8:41:00:f9:33:93:ee:e0:e2:
c9:74:48:62:85:fc:c5:bb:d6:7b:59:48:43:b3:6a:
3c:fe:5b:b4:df:7b:7a:f0:99:a3:df:49:10:95:f1:
17:ea:8c:c3:5c:eb:35:8f:8d:7a:b3:d7:04:ff:32:
49:f9:c0:8d:1e:e9:4d:60:98:3e:41:42:f3:73:01:
5e:f8:63:4a:d1:47:3f:19:1d:c3:41:71:b4:59:9f:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DD:E4:E3:5D:41:E3:DD:92:72:E1:B9:F3:40:38:83:9C:4D:A0:11
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ce:e9:d8:08:a3:96:09:5c:a9:90:9f:31:f8:28:27:97:60:
dd:a1:7f:64:d4:03:aa:26:06:7d:24:37:23:64:d1:a2:86:d9:
6d:73:a5:82:e9:10:ce:9f:cc:d0:90:99:97:96:72:f9:df:4a:
28:44:a7:c1:f1:1f:53:41:36:ba:aa:99:59:6b:11:90:d3:c0:
6f:f4:e3:7d:f3:7e:9b:98:9a:b2:76:26:44:10:e2:72:9f:69:
12:03:79:63:49:57:35:ca:34:31:53:e2:ad:c3:a6:7c:49:0f:
b3:2a:eb:47:34:77:41:13:9b:1d:e1:1b:c7:3e:1d:57:f7:b9:
79:ba:0c:4b:d7:fe:bd:e6:d9:40:12:49:40:5a:01:a3:45:07:
43:da:00:48:78:85:3d:65:57:d7:d9:10:92:01:5e:10:5d:d5:
f7:3a:09:ce:3a:ec:41:86:51:5d:4d:06:82:d4:fe:2f:a7:12:
a1:7f:ee:67:a7:28:95:e2:0f:21:17:ab:c8:f0:99:db:cc:7f:
18:23:f3:91:e3:3f:da:97:ad:91:72:e4:86:8e:c1:a7:6d:4a:
9c:c1:b4:a2:00:58:9d:77:3e:b6:fa:85:10:fb:f7:d0:78:71:
8a:5a:ba:52:6e:9d:4b:98:4f:ca:ad:7b:55:dd:32:75:b8:74:
c7:1f:03:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:57 2026 by rpki-client