Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: OSXojIqq5VlKHZzlvcOrOFsGO6sIljt9PTgG1yhOrMg=
Subject key identifier: 82:28:60:77:97:45:1D:E0:75:43:4F:F9:36:66:E8:57:BE:C3:9D:6E
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 019D389C15FAC8370CE001DF7BD8A6E9CFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 126B
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: GQszJSzW+yYFEkUneOoEzxaeIo3FpgoKQ0l/wp4ZcN0=)
2: Y0kWTJNEeoRy8MGbIFO5TAU7Xjg.roa (hash: FhwuGsqg5qv9vqOR+yg/RFF7XmZsYJAD0kJ1Rn+2ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:15:fa:c8:37:0c:e0:01:df:7b:d8:a6:e9:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=8228607797451de075434ff93666e857bec39d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:2e:42:d7:9a:dc:f1:c3:75:ef:ee:01:03:
44:f7:06:54:b6:8d:52:3b:de:1c:82:24:7c:6e:8a:
8b:1f:6a:1d:2a:dd:a2:6c:dd:f9:8e:a4:54:65:c6:
a6:93:cd:28:8b:f1:01:8c:b1:5e:be:e9:51:29:7e:
f6:dc:60:89:30:25:48:56:3a:bc:0f:70:57:66:11:
f3:d0:e2:5a:b2:ed:25:05:53:49:32:88:bb:e2:14:
86:f9:9f:06:80:00:0e:51:5b:55:d4:0b:75:6c:ff:
2b:e6:ca:03:63:90:94:79:a6:ca:e7:b3:5a:78:2d:
e7:75:57:dd:fb:64:de:26:b5:1c:37:c6:41:42:f2:
21:1b:7a:3b:33:6d:4e:fc:d2:f6:ed:82:cc:9d:2c:
83:63:89:91:09:1b:12:7d:97:57:d8:89:7c:90:20:
0f:b2:a0:9f:08:2a:73:1a:5a:4e:d3:bb:55:81:49:
9d:26:58:7d:82:4a:8f:b1:32:d4:22:f1:d2:2c:b3:
98:fd:0c:a2:d5:c9:81:b4:fc:6c:a5:47:f6:8a:6e:
e9:a6:ee:5c:49:74:3c:c4:f2:16:e5:93:13:e2:2a:
67:b8:2b:73:bb:1d:f4:17:e2:26:31:f4:0f:4a:a7:
35:40:6b:ea:7b:c7:e8:78:80:ab:25:e2:65:e0:7d:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:28:60:77:97:45:1D:E0:75:43:4F:F9:36:66:E8:57:BE:C3:9D:6E
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0a:e0:4e:40:c7:35:ce:2d:09:8b:84:67:81:39:04:38:63:
30:d1:27:ed:c9:1c:b5:6c:97:88:90:ee:dc:9f:f8:74:e4:98:
35:e7:9f:46:89:76:c9:00:ca:61:bc:5c:22:c0:d9:11:e5:9a:
1e:44:06:df:ff:e5:57:9f:8a:83:c1:76:db:62:51:3b:71:f6:
43:7a:9e:c4:5e:ab:20:d1:ff:7e:22:78:33:53:41:6a:00:49:
df:82:41:73:6d:d9:48:af:f8:08:01:38:ff:74:1f:04:64:56:
e6:34:87:36:a3:a5:3e:57:b1:61:33:4a:cc:07:21:a1:1b:3b:
ab:38:50:bd:cf:4c:0d:4b:57:bd:58:24:01:87:3a:09:bf:9a:
cc:b8:26:2e:cd:d5:b0:bb:5d:1c:df:d0:de:94:88:84:f0:41:
ca:bc:3c:5b:00:26:ee:89:37:61:d3:7b:67:c8:17:35:de:be:
37:d5:be:8d:ad:9b:e6:97:6d:0a:c3:e4:4c:90:a8:00:1c:79:
30:b9:b2:ed:10:b9:87:e8:cb:e4:aa:e7:39:7f:2a:b6:3a:37:
7f:21:f8:18:1e:d2:1b:74:9b:fc:bf:2a:4c:b7:95:87:76:6b:
75:10:0c:2e:40:d9:3f:d4:6d:82:bb:03:c3:43:d0:42:cb:99:
c8:33:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:58 2026 by rpki-client