Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: 3fpwDjJV322tO1iEzhLhog5s2h0HPu2FV1Y5RkuNs4Y=
Subject key identifier: 31:0D:36:CC:3A:26:62:90:1E:2D:3C:47:9E:19:3E:AF:83:35:57:3E
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019D38D2A9AEE31080A94C635679984D3775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: 6E181Dzld5EMt9dkjlvrvud/EeT+z5Ba2oVzsMq7VpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a9:ae:e3:10:80:a9:4c:63:56:79:98:4d:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=310d36cc3a2662901e2d3c479e193eaf8335573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:16:d8:11:46:a3:32:02:b7:b7:f7:46:1f:
4b:1e:ff:27:2a:ff:b9:c2:0a:dd:e9:74:d5:7d:60:
ce:65:15:bd:78:72:7f:a7:ea:d8:8a:9c:ac:7a:f0:
98:97:9f:56:f8:6b:70:53:32:b6:96:ff:e5:8b:5c:
f3:05:4d:f4:d0:4f:11:2c:35:44:96:d7:d1:cd:79:
9f:6a:21:7d:8e:a4:73:7b:11:32:10:ea:25:7b:1c:
7c:f7:39:28:ea:05:19:e4:94:af:61:2a:74:55:10:
30:c6:ad:ac:22:62:e6:b1:e6:cd:00:57:8d:dd:10:
3e:c1:99:2f:15:d4:b8:de:ed:54:46:6d:1d:1c:7c:
e1:be:5a:32:44:12:ff:79:48:72:ea:c9:84:69:6f:
62:26:9b:42:8d:ca:79:bd:b7:07:2b:f6:2d:91:02:
95:49:0b:0b:ac:c8:81:a2:79:2b:4e:42:ac:34:68:
9e:01:63:0b:11:8b:e8:7e:06:94:d6:6a:3f:34:70:
b5:79:c4:d0:05:65:49:08:16:15:7d:95:13:53:dd:
c7:ed:31:4b:8d:65:8a:a8:c5:74:92:9c:cd:c1:cf:
04:30:6f:76:dd:de:ac:43:e8:f4:0f:19:47:ce:95:
19:28:81:47:a2:fa:ad:47:dc:67:a5:56:a4:26:29:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:36:CC:3A:26:62:90:1E:2D:3C:47:9E:19:3E:AF:83:35:57:3E
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:5f:95:6d:69:ea:fc:9e:d6:cf:25:e0:45:df:1c:a8:8d:
80:4c:12:d7:e0:02:9b:5e:94:b7:f5:76:29:bb:95:bc:a2:e4:
3d:a9:00:39:9c:60:c6:ec:93:19:df:b9:6b:95:05:9d:4e:c9:
bf:9a:bf:16:b9:b9:41:f6:88:19:ad:45:eb:ee:9e:73:8d:78:
d7:47:c6:0b:d8:a2:b8:82:17:b7:ea:9e:8f:08:70:40:4b:05:
76:74:b9:fa:ef:87:a8:04:91:45:42:44:b9:3f:12:ce:44:6b:
f1:35:bb:ea:70:99:a1:cb:af:43:a5:ad:fa:04:94:00:fa:c6:
5f:04:8a:db:ff:45:d1:a5:e5:84:3b:f8:cb:24:af:19:d4:09:
9f:26:d9:91:6d:14:17:22:a9:49:e9:36:31:85:30:d1:38:3a:
59:bb:9d:f5:74:89:7c:8e:47:88:a3:d8:4f:bc:8b:55:1a:6a:
3c:c0:fc:ed:da:db:90:88:69:d8:da:ad:d2:df:1a:ed:96:04:
77:d8:7d:6e:46:0b:5b:df:83:a5:91:b6:44:a1:41:cb:e0:cb:
4b:08:54:6d:c8:65:9d:cb:72:90:9f:5c:56:9a:c3:be:90:4c:
27:b4:91:57:6d:b8:32:63:92:4e:bc:08:3b:47:82:e3:a6:5e:
1c:d4:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:20 2026 by rpki-client