Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File: Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier: 1BW2nxKuCUjshWAm1kD1wQq0L89pUL+2RKrVaMNTg+4=
Subject key identifier: 7C:A2:98:88:7A:E5:B4:16:C8:60:A1:CE:DD:21:B5:2D:2C:8C:51:62
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial: 019D389BB4C3D66CF3A2851E089468BA33C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number: 1521
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: CFs9QijMQZXft1qyL9GnWPO1GTU.roa (hash: oKwOUscI0w8VVSNnLxFijPy/YKPFlOCw7H1bV/hxHVM=)
2: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: 9xK1G6jJfnhLG6sTR78CxSKZzXGFjos63x6LYd1cbCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b4:c3:d6:6c:f3:a2:85:1e:08:94:68:ba:33:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=7ca298887ae5b416c860a1cedd21b52d2c8c5162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:d6:fe:63:a5:f5:fb:b7:3e:f9:f3:7d:7f:
53:52:ea:cc:dd:03:79:c2:0f:52:d9:0b:f2:9e:e1:
ba:a1:18:1d:d1:78:f8:41:0f:13:e9:35:5c:4f:bb:
1e:46:18:d7:20:63:f0:e1:5b:b1:fb:ab:c1:31:70:
ac:bd:67:31:a8:2c:80:33:3a:05:bc:cb:ed:f4:a6:
c4:75:a2:37:e8:6d:8d:a8:16:0e:b9:1a:0f:02:a5:
ca:c5:04:53:e3:d5:e2:95:f1:e1:c2:3d:3d:d2:d3:
0f:ae:0c:4b:53:82:dc:a6:0a:6b:3f:dc:c6:b4:ba:
67:36:83:8d:30:5d:ba:ef:25:43:0e:49:18:8e:cf:
52:6e:2e:08:e5:fc:c2:8c:78:a3:a7:b8:a2:ad:c0:
7b:b2:16:5e:91:2d:5e:01:19:2a:30:cf:30:43:96:
89:b2:80:42:61:c1:0c:9d:96:d8:e8:0a:6e:8a:8f:
65:4c:90:fa:0b:82:40:ef:35:0d:e1:9a:29:57:4a:
67:23:8b:c6:f2:27:4a:a2:95:93:e6:a6:80:b0:7d:
61:cb:40:7e:04:29:a3:c0:e5:02:39:72:30:19:0e:
fa:17:4e:e6:c3:a9:e4:f4:58:1c:c5:0d:77:a6:1e:
3f:5a:84:eb:63:e4:80:f8:bb:0e:ab:bf:95:1a:2f:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A2:98:88:7A:E5:B4:16:C8:60:A1:CE:DD:21:B5:2D:2C:8C:51:62
X509v3 Authority Key Identifier:
keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7b:92:b7:3c:c0:ac:10:f4:0a:9f:e9:ff:7f:31:f0:6a:62:
27:86:7e:91:e8:7e:7b:d4:7c:af:fe:26:e1:66:05:e4:24:9a:
0b:d0:d7:47:9b:2a:11:90:ef:90:56:26:e2:d9:02:9a:27:40:
f5:20:00:8d:b4:eb:7f:ea:31:de:87:c0:25:75:5a:36:6f:db:
fb:e2:81:ae:39:7a:1f:22:cf:15:89:eb:11:72:fe:c1:ce:78:
ca:c5:83:2c:e7:0d:da:85:4c:ab:55:e6:ae:0f:44:69:09:04:
3e:69:f4:d2:75:95:ed:b6:98:6c:8c:3c:94:a4:c6:60:05:f4:
cd:da:56:54:9d:44:04:42:16:f1:89:d8:98:d2:dd:63:bf:0d:
31:10:35:31:53:d6:00:51:58:39:56:cc:55:52:82:05:67:f6:
86:d7:1d:34:44:24:a0:00:66:18:89:9a:d9:22:c4:8d:fd:af:
75:70:17:64:39:aa:bd:a4:ca:76:4c:80:04:ab:35:50:e0:8c:
cd:29:78:67:d1:cd:71:b0:ec:fa:e9:59:a1:70:0e:49:f8:a7:
b9:b8:56:fd:b4:70:3c:64:e4:fc:d3:68:86:40:39:e0:9a:27:
56:c2:7f:3c:14:3a:83:fe:19:dc:cf:b7:e1:4a:77:1c:2d:75:
61:d3:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:54 2026 by rpki-client