Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier: 4lT0PiJvNDIJ86joXBShlqqo3PMPw/XggURMppglIuI=
Subject key identifier: 66:71:C1:C7:60:07:60:54:77:01:A8:65:D2:3D:A7:FC:15:27:BC:CA
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 019D3A1CA3653CBADFC7283943C519AD39E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number: 15D6
Signing time: Sun 29 Mar 2026 15:00:48 +0000
Manifest this update: Sun 29 Mar 2026 15:00:48 +0000
Manifest next update: Mon 30 Mar 2026 15:00:48 +0000
Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: WlOKMtQC61aQ4cGqVTRREpcUBvxuRC26bGGsCsKUk3E=)
2: rc_J4XOHhixLylCcfyExPkYQnWs.roa (hash: kaE6EoD8hyc9JZvUwXOFpWk4FxFp7L/CsoCCjqyPHoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a3:65:3c:ba:df:c7:28:39:43:c5:19:ad:39:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Mar 29 15:00:48 2026 GMT
Not After : Mar 30 15:00:48 2026 GMT
Subject: CN=6671c1c7600760547701a865d23da7fc1527bcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:0e:eb:2d:d2:f9:54:0e:dc:0d:74:55:a5:
12:0a:5b:6d:34:47:12:25:ce:1c:eb:09:81:5f:37:
86:cf:1b:fa:b0:be:84:04:e3:d8:31:db:0a:b6:cd:
06:29:db:f8:c7:02:da:2b:1e:53:49:dd:85:7b:82:
87:07:c8:7a:bf:d6:04:3b:d8:04:e4:b3:27:82:dd:
bf:15:ab:e1:5a:39:71:ca:1f:6a:a9:fc:6b:70:ca:
72:c4:65:5c:e9:23:2b:1d:e5:59:61:a0:8b:33:ae:
cd:7e:c1:1b:c2:c8:23:12:d6:19:7c:80:c5:1a:df:
54:b6:0d:99:7e:64:ed:2a:f6:67:69:1f:d4:10:56:
82:f3:b3:44:47:72:a0:8e:67:48:75:6b:07:ad:92:
69:c5:b9:d9:db:2f:ea:5a:6e:a9:34:dd:ec:36:fc:
51:2e:87:f1:7e:e3:09:14:eb:fb:7f:c8:90:af:2d:
a3:97:91:9a:bd:12:6a:c3:96:aa:cd:56:5f:74:6e:
4f:fa:62:19:39:22:73:e4:7f:e6:a6:83:8a:f0:d8:
78:47:e1:3f:0e:12:0e:8c:31:44:16:52:cd:45:5c:
d3:3b:53:9c:e6:42:61:ed:e8:da:ef:10:80:a2:7f:
60:ff:8e:01:7a:38:39:c1:e2:5d:b7:85:88:0a:a3:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:71:C1:C7:60:07:60:54:77:01:A8:65:D2:3D:A7:FC:15:27:BC:CA
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5f:eb:7c:4d:4f:e7:61:85:17:53:eb:b0:26:2c:66:5f:fc:
ac:aa:56:27:79:e4:4c:03:1e:6c:65:86:b2:b4:65:ac:a6:a9:
8b:b8:50:b8:4e:73:62:4f:e4:b9:16:11:4d:18:02:15:82:ee:
d9:06:44:4c:d8:ce:0c:1b:8b:ab:b6:f2:d2:0b:4e:a0:c2:c9:
2b:d6:7d:33:38:ae:36:b8:3c:74:28:ed:bd:bd:ad:35:8e:9d:
59:60:99:87:b9:bd:d6:7a:9a:d1:37:77:fa:50:3c:20:f8:15:
03:f4:70:f4:f3:e5:9c:58:04:60:f7:6f:0a:86:13:45:05:4a:
15:59:dd:79:f3:9d:c5:f7:2d:ca:bf:80:ca:ff:18:5d:d2:33:
b9:74:62:1e:3d:5b:6e:88:69:a2:c9:9e:f3:9c:30:0e:ca:1e:
e7:18:22:9a:2e:c8:0f:3b:3b:38:a0:a4:bf:ab:aa:88:69:54:
ac:ed:47:1e:aa:51:bf:d5:72:1f:22:26:5c:b8:5d:99:84:7d:
56:f9:78:2c:71:0c:e4:53:b8:22:db:56:39:33:74:68:75:42:
74:13:fa:57:c4:12:3b:bd:08:43:1b:23:6b:cf:da:7a:b2:4a:
b1:55:70:56:e9:9a:54:59:21:9d:4e:6f:03:96:00:22:72:63:
92:33:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:17 2026 by rpki-client