Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: yDDxHdrRrdDWb/C31YraISkyY7hummW6FLtNV5GXNvc=
Subject key identifier: A4:53:5F:AE:F6:9D:B4:6D:8F:B3:05:D9:0F:07:C5:40:59:3C:05:CF
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019D37C04A3ED76F9D86E959BBE7EFAEF87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 0755
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: rMBKn5hnBYArOWgpFDXFXlxlMgetCHsAsV65MHUNNLs=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4a:3e:d7:6f:9d:86:e9:59:bb:e7:ef:ae:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=a4535faef69db46d8fb305d90f07c540593c05cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:67:38:99:56:9a:5a:86:d1:c4:81:7e:5d:
b1:df:11:86:a4:84:bd:53:08:05:ed:6b:70:66:be:
bb:3c:16:b9:d7:21:e4:59:83:07:4c:2b:dc:0b:0f:
55:eb:d8:87:84:8c:d6:5f:f5:d8:32:43:53:ea:67:
be:4d:17:09:44:f9:b1:01:c7:07:7c:2c:84:c6:20:
51:d1:f0:d8:9a:37:fe:0c:47:f6:c5:ce:c0:aa:d8:
fa:ee:a3:e5:f1:18:3e:98:43:1c:0f:a8:05:59:ff:
c8:aa:2c:cd:d0:c3:54:03:86:cb:cd:90:c8:3d:63:
15:d6:24:33:19:06:dd:40:cf:19:17:d6:b2:86:55:
d4:03:11:0f:5b:bf:e5:be:05:5f:16:5d:8f:cf:12:
79:25:cc:ca:6e:63:28:33:04:05:09:ba:ed:d1:26:
14:a4:ae:b6:69:23:28:3e:e4:8a:74:81:41:38:f6:
5b:d3:01:86:4b:44:1e:f5:c5:7d:73:c0:7a:f3:db:
a9:cb:62:57:26:12:5a:1b:92:92:8c:a3:07:93:49:
23:1a:ae:ad:b5:6e:3b:9e:90:11:bb:f6:41:e9:9e:
07:78:3c:0b:1c:3a:f6:cf:3a:69:31:3b:0e:05:dc:
b9:bf:8f:f3:f6:41:6b:89:0c:81:d2:46:90:a6:08:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:5F:AE:F6:9D:B4:6D:8F:B3:05:D9:0F:07:C5:40:59:3C:05:CF
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:64:38:ba:36:8b:d2:f9:23:8c:38:6e:99:a1:97:2c:c4:
1c:47:de:d1:7e:19:bc:b6:f7:4f:61:42:8f:2b:e5:28:65:be:
d6:69:a4:4b:20:2a:4a:ed:e6:fd:05:44:37:11:da:e9:9e:14:
94:e2:97:49:43:24:9e:1b:af:3e:71:94:fd:14:07:f5:a1:11:
5a:db:13:40:0a:6a:33:6c:00:77:f5:9a:c2:12:97:44:1f:1d:
36:f9:6e:90:4b:5c:4b:60:f7:36:f6:45:49:39:4f:25:67:b1:
aa:cd:c3:93:c0:aa:52:b5:36:12:43:39:ad:84:0c:0a:dc:7e:
3c:42:7e:ab:2e:d5:d5:ff:54:dc:3b:c8:8a:32:32:d9:21:25:
fd:1d:66:22:d4:7a:2a:1c:9f:0d:0a:ef:a2:91:43:56:61:0e:
80:c0:15:54:72:1a:dc:cd:2d:dc:99:4f:97:96:92:e5:12:be:
8f:f4:3c:09:fe:2c:ab:0d:5b:3d:00:88:f8:10:12:86:40:77:
52:7a:7f:54:c2:99:d7:61:f1:82:de:31:09:78:6c:8f:40:b6:
e4:ca:d4:0c:b4:16:3e:1d:5d:ac:05:cd:b7:d2:cc:ff:93:44:
84:5a:19:cd:1a:bc:50:aa:4e:36:54:53:0a:0c:b8:15:75:cd:
64:8d:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:35 2026 by rpki-client