Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: T51JHuAtsTbHDhyE3wDfpCrJbdbQVcbQOK5k0lY5xQo=
Subject key identifier: B3:C3:09:7B:64:0A:28:DC:8A:3C:3B:75:F6:08:C1:3C:FF:16:0E:02
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 019D378955721F2E679BF870E44B7A72887E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 0616
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: jG29jJsPx+CRmHMYb+AZ3IdHDsfkHXrnP2tLKrb4jRU=)
2: m1C5L7CbhAcIOumOYRBFsLzm0eE.roa (hash: SYAtLc5fN9d8S/lPjJCzeOzecwlCkRAmvHG5vPw/tRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:55:72:1f:2e:67:9b:f8:70:e4:4b:7a:72:88:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=b3c3097b640a28dc8a3c3b75f608c13cff160e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:cf:1a:e4:ad:6b:10:ac:3b:bd:05:c2:73:
15:fb:33:75:99:87:7e:c3:b7:6c:ed:7f:5d:4a:f2:
ba:3c:2c:0f:83:de:8c:40:9d:3d:6b:3c:d2:53:80:
5a:a0:e5:12:37:21:e1:04:13:77:0e:52:5c:bd:be:
0f:ac:3d:ac:bd:64:09:76:a7:10:aa:0e:52:2b:1f:
2e:00:95:8f:68:16:82:62:dc:b8:f2:4d:e7:56:52:
c5:71:37:b0:6d:47:1a:c4:3a:21:d5:51:5b:f2:cf:
31:65:b7:2a:1b:44:30:77:e2:fe:57:93:6c:a7:0b:
18:aa:23:a5:bf:e7:13:53:d6:8e:7d:c3:2a:e3:08:
f0:cb:12:b1:3b:81:30:ca:92:61:53:58:64:8a:db:
c6:7a:1a:70:77:a0:15:a3:f3:52:7c:af:62:64:d7:
20:74:05:ae:46:03:ce:a3:c7:5c:e3:9d:46:b9:c7:
cd:73:ec:9e:15:11:44:b1:98:79:d5:a8:20:a3:00:
fa:ad:1f:5a:84:5d:17:06:25:22:8a:d5:e6:35:0c:
26:fc:f4:cc:4f:fb:6c:45:94:23:97:7a:35:6d:81:
5c:8e:77:f0:06:a0:62:04:52:a4:ac:ee:39:95:3a:
d7:cd:84:e2:0c:c6:06:f8:87:98:d1:d7:03:56:e0:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:09:7B:64:0A:28:DC:8A:3C:3B:75:F6:08:C1:3C:FF:16:0E:02
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e4:4d:3d:88:b4:bb:78:8f:bc:41:aa:cd:bf:ad:67:4b:a6:
4d:34:46:6c:de:45:70:d6:bd:19:aa:9a:35:b3:da:2a:96:43:
77:36:4e:f7:8f:d2:4a:88:02:8c:31:e4:ec:46:d5:71:90:de:
fb:1f:65:57:9b:3d:9b:a8:2f:41:8e:64:33:d1:70:d4:1e:8b:
ac:8b:6d:ca:fc:6a:ec:a2:db:2d:e7:2b:d9:fc:0e:1d:85:a5:
fe:04:8d:83:43:9a:77:5e:b3:ae:3e:f5:47:e0:7d:d9:a6:bc:
52:f6:33:63:dc:f2:d8:32:3c:41:54:f4:5d:ca:f9:aa:3a:e2:
1d:33:68:90:a8:67:9c:a2:ac:f1:49:0b:4f:49:ce:2c:c6:e8:
d2:f6:64:94:28:a7:fa:50:44:f7:61:c3:f6:d4:fa:a1:1d:b6:
ca:49:a1:ec:0b:a3:45:17:2d:f5:df:d2:26:80:ee:5c:cb:6b:
28:14:61:a4:2a:9b:e7:15:e7:a0:00:4a:2d:6d:2a:96:5d:99:
87:62:1f:03:76:99:87:74:b9:1c:a2:70:69:53:e7:d8:5c:c0:
2b:4d:3a:e3:e9:e4:1e:4c:99:63:c5:c3:6e:44:d1:2c:60:03:
c6:8b:6d:95:69:7a:76:26:c0:e7:54:7a:e3:da:ba:d2:1c:7a:
b4:38:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:18 2026 by rpki-client