Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: LTGP/hn4rjItYXn8DJSJaDvNKQ/4pSYO4ICOHo62OZE=
Subject key identifier: AE:1B:39:4F:83:8E:6B:11:1D:07:AC:69:E2:35:6E:E7:2C:65:EE:5B
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019D382E92ABBC673A5FF1C15EB12307E7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 1474
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: hd7jgTjGRP8heNQ7QG19XixTMTv6+bxB1DO+pMM3RTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:92:ab:bc:67:3a:5f:f1:c1:5e:b1:23:07:e7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=ae1b394f838e6b111d07ac69e2356ee72c65ee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:93:45:1c:43:98:fc:b4:45:6a:ce:55:02:
75:d3:a6:cc:0f:46:d4:f7:ac:19:9f:61:37:78:33:
43:f8:a4:d7:8d:f4:9c:e7:ac:ad:10:a9:8a:b4:f0:
14:68:d6:a4:4e:85:31:f4:44:dd:4a:46:a7:7d:24:
29:33:b7:8d:10:81:b9:45:9a:49:5d:06:bf:76:22:
e3:7a:73:d3:13:fb:9b:52:37:d9:47:44:fa:a9:b1:
0a:ea:bc:7c:ab:ae:47:51:f1:72:f3:b0:66:d4:5c:
5a:73:25:7a:c5:ec:1b:85:f1:7d:81:54:93:9e:9b:
cf:45:92:94:5f:c5:1b:0f:60:72:0a:27:e9:6f:cb:
8f:40:e8:c4:bd:93:10:14:12:a4:4d:ef:ec:f1:e3:
11:9f:20:79:0a:f6:0b:d2:3e:c2:30:6e:3c:5f:68:
bc:b5:ec:37:a0:cc:ab:48:02:74:68:a2:6d:3e:75:
d1:1e:99:0f:ba:da:d3:1c:ab:21:34:cc:12:53:fe:
87:ac:ca:2e:bb:b9:df:ab:a0:ed:0c:db:08:18:55:
ab:e0:3d:49:07:34:9c:ff:02:57:eb:86:d0:e9:6f:
d0:0f:31:07:07:bb:58:4d:43:13:d1:d4:aa:be:7e:
32:c1:dc:d4:73:56:da:1d:f0:75:5d:b9:ac:93:5a:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:39:4F:83:8E:6B:11:1D:07:AC:69:E2:35:6E:E7:2C:65:EE:5B
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fd:33:2b:51:7e:f5:6c:18:f8:8b:2b:2b:1c:66:ae:6a:6b:
ac:01:94:36:ab:ff:a6:13:a0:64:d7:d5:c3:71:c1:db:ea:24:
ed:ed:4f:ed:79:4b:b7:6a:ee:15:d1:b1:c3:03:25:1f:89:29:
5c:c2:30:70:1a:c7:69:63:3e:79:04:a9:e4:96:36:68:dd:f2:
b0:b0:40:ee:06:12:5b:0c:51:ba:26:2c:8d:03:c8:17:70:01:
7f:0c:e8:02:75:cd:c8:20:f9:c3:66:5d:2f:25:6c:d2:fb:c5:
3c:3d:dd:63:cd:3e:28:c1:7f:5c:e1:58:40:ea:d8:3d:d9:88:
5a:61:e7:16:b7:cb:92:e0:2f:ec:bb:ac:a0:28:1c:33:23:9c:
9f:81:30:a5:93:d8:2f:e6:62:e9:d8:2d:11:42:10:71:09:b9:
7f:3a:6e:f3:b8:8f:fa:7c:c7:a4:2c:99:45:72:47:a5:27:f3:
00:cc:19:1d:65:6f:ee:f2:89:3e:27:54:7b:f8:a1:48:4a:d2:
ea:4e:e0:20:a6:81:c9:68:a3:74:c3:a7:eb:c5:3d:1e:33:ca:
d9:46:45:0d:57:3e:2e:cb:67:fd:da:2b:88:83:94:69:6b:9c:
3a:19:c4:67:89:42:f1:de:96:c7:30:e6:cd:6f:5d:a3:49:6d:
d8:e4:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:14 2026 by rpki-client