Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
File: JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json)
Hash identifier: ltqHtwNyiXGh4K5vzHN2ZElNlRYrZmF/rlGim/oUvQQ=
Subject key identifier: 73:2D:71:82:22:9D:D2:5C:53:00:FD:57:CC:BA:AD:40:B7:8F:CC:D1
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial: 019D382E3E2C4B6928C61BEAC4C96C4C34E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
Manifest number: 13C3
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: jk+bLz+ioMd/aBB6CaxCdjMNbULvYdp5Ak8zgsf5lIw=)
2: xLfq7fHWOKfAm3-LjGEX86KU2PU.roa (hash: vmgwgfjyeiWhoQrfreo459MoQX1wxVVEmAYNgnHfUwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3e:2c:4b:69:28:c6:1b:ea:c4:c9:6c:4c:34:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=732d7182229dd25c5300fd57ccbaad40b78fccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:f0:25:a3:28:0b:01:88:75:aa:2e:24:1d:
bd:79:87:80:ce:9a:4f:a1:a9:71:8c:50:75:18:6e:
63:ca:19:0c:4c:7b:45:3c:dc:9b:09:74:db:a6:78:
70:cc:f3:e4:fd:fd:85:c7:92:e4:6a:bc:1b:e2:23:
69:68:9a:f9:6c:da:9e:d1:e7:5e:9b:d3:0f:10:81:
ae:ac:36:31:c4:9f:b1:b6:3d:09:dd:6d:2a:d6:e3:
ca:b9:fd:fd:6c:8e:bc:ab:37:7b:f4:a6:2d:dc:90:
38:e3:0f:b6:2a:84:41:40:7c:bb:42:b4:8f:4b:ce:
1d:b4:87:a2:8a:ae:f7:a3:08:a3:08:c8:36:d7:5d:
2c:39:5e:52:76:f7:d1:63:90:e0:96:87:1a:d6:d3:
db:9b:7c:f0:1b:00:99:c9:54:f3:44:7d:d0:fb:53:
83:a1:a1:3a:6c:43:3c:eb:03:54:e1:e9:2f:fa:c0:
25:f3:2b:ce:f3:33:f0:34:ba:09:75:c9:e1:b6:b0:
a3:07:f2:ff:ab:63:71:0f:82:bc:2b:23:96:2c:07:
3f:62:b8:37:5e:c7:09:ee:61:65:2e:45:c9:44:5e:
80:35:a7:b0:b4:b1:a0:98:8a:e4:fb:5a:87:77:06:
02:9b:fc:4c:a9:bb:69:d1:d4:28:7e:ed:b1:5e:15:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2D:71:82:22:9D:D2:5C:53:00:FD:57:CC:BA:AD:40:B7:8F:CC:D1
X509v3 Authority Key Identifier:
keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0d:36:ce:db:ae:e9:a6:8a:52:aa:13:48:03:11:9c:b3:d0:
ff:3c:4b:fb:b4:ab:d3:74:fc:49:0b:2a:af:13:8d:96:b3:7e:
6d:83:9c:b5:ac:ed:d1:5b:0a:9c:79:eb:e9:c9:85:75:d5:29:
df:49:d7:d6:c7:7c:4d:23:35:65:f7:13:87:08:2a:6a:0b:87:
c3:a1:14:28:d2:50:54:9a:75:f8:a8:bc:51:ec:d3:39:42:7c:
fc:8c:c2:4f:60:96:3f:0b:62:fa:02:50:04:9c:ad:20:23:62:
32:26:34:97:68:78:6d:7c:4b:24:13:af:2d:4a:8d:cb:42:61:
44:88:90:df:fc:42:4c:41:d0:21:44:ef:f4:c9:de:2b:06:c3:
9d:6f:ee:cd:83:4d:bc:c9:51:87:de:07:c5:ca:8a:b6:76:84:
db:57:eb:c3:53:29:ed:07:4d:b7:ef:8d:0a:73:78:49:f0:19:
5b:d7:e5:bd:27:56:93:62:55:b2:fa:3c:a4:a5:1f:10:44:e7:
b9:22:d2:74:25:f2:56:55:74:60:50:75:86:ab:61:00:29:69:
6f:f5:ae:5a:83:90:77:51:30:6d:78:08:25:ce:5d:38:77:59:
cc:db:33:f3:53:9f:2a:a2:a3:09:fe:97:b1:f9:0e:5f:dc:c4:
41:9e:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:16 2026 by rpki-client