Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: YuxflrCJ2jxlb++xIoLFjSXSNC133h48yvqLJyzEzyQ=
Subject key identifier: A5:5E:E0:7F:08:6C:DC:72:64:49:B7:29:EB:93:11:36:BE:38:BE:93
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 019D3865B849D8E41C6BD769A46FA2FCDAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 17E7
Signing time: Sun 29 Mar 2026 07:01:23 +0000
Manifest this update: Sun 29 Mar 2026 07:01:23 +0000
Manifest next update: Mon 30 Mar 2026 07:01:23 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: 3q28uVIaZDoHhDt/aXN6eVdg9HVF/oYRKpxkXZNssBc=)
2: cuQOSndsrOHE68u2RGDR9Wvb2PU.roa (hash: oESYbd0eiPwK4UeuaCOTGhvgRMQavcY75LLUi+iO6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b8:49:d8:e4:1c:6b:d7:69:a4:6f:a2:fc:da:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Mar 29 07:01:23 2026 GMT
Not After : Mar 30 07:01:23 2026 GMT
Subject: CN=a55ee07f086cdc726449b729eb931136be38be93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:81:aa:9c:17:e5:f2:99:c4:04:32:9b:b6:
99:f1:0c:27:35:bc:5c:19:be:60:e4:be:b5:02:9d:
7b:ae:b7:28:eb:1d:ae:6b:3d:23:c6:5d:af:b1:7d:
de:c5:69:b8:a5:37:96:ca:47:fd:56:25:9f:48:aa:
e7:cd:48:8a:d3:bf:3b:3f:a9:4a:f8:65:ee:fd:cb:
0c:33:4d:cd:2b:47:18:9a:09:ff:31:ad:19:c9:8e:
63:8d:91:e6:d0:96:12:d0:d1:e8:9b:3c:c1:ef:ee:
e9:93:17:62:4e:1f:cd:67:70:94:a1:5e:5c:1d:6e:
cb:ab:9d:9c:37:9e:86:b5:cc:0d:3e:ee:5a:3b:4c:
52:f7:4b:83:1b:f1:04:fd:c1:4c:73:72:db:af:a2:
c6:12:a6:c2:5c:4a:05:1f:7d:25:d2:25:be:8f:e1:
03:30:d3:2a:d6:51:9a:16:a0:a1:a4:b8:8c:c3:81:
b3:cb:6d:96:7b:20:47:c0:15:09:19:17:51:60:cb:
b9:ac:f1:4e:06:e2:02:58:4c:81:73:83:f6:17:24:
05:7d:ba:5a:18:41:ee:25:b8:16:8d:e3:06:b9:dd:
5a:b9:cb:74:33:a5:b1:e6:a2:e0:c8:9b:95:a3:01:
4b:a7:d8:4e:f4:cb:d4:da:ff:a3:f9:44:6f:cf:f8:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:E0:7F:08:6C:DC:72:64:49:B7:29:EB:93:11:36:BE:38:BE:93
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4d:73:06:3a:35:29:bc:7b:2c:04:cc:40:42:57:5d:d7:a0:
e9:75:d1:98:fc:d4:16:b2:78:57:eb:aa:62:b2:82:6f:f8:28:
27:94:ef:87:4c:70:e7:7c:05:a0:10:00:2a:29:40:57:51:9c:
29:aa:4f:ec:35:de:0c:aa:98:29:fe:38:c0:6d:64:8f:df:58:
ad:54:2f:ad:55:f7:f7:91:de:de:74:92:30:83:0a:22:41:ea:
d5:8d:38:1d:0b:27:8e:c9:69:77:e4:ee:5f:ab:cc:41:c3:db:
00:80:61:6b:14:70:96:41:8c:81:c6:16:d8:ee:06:67:f5:f3:
bf:d7:49:41:fd:d0:17:dc:11:2e:98:93:d3:ba:53:85:74:6a:
a8:53:81:29:76:14:b6:c8:63:59:c4:aa:d1:01:d5:85:63:a0:
26:8b:f9:7f:c5:5b:4c:87:90:f4:64:a6:2b:b3:35:1b:98:7a:
57:02:55:ed:89:fc:34:a3:cd:07:f8:eb:e7:ab:c9:80:92:fe:
b1:c0:2f:53:73:b8:79:87:84:40:d2:79:6a:2c:02:b4:3e:b7:
66:c1:7e:5f:67:5d:3e:ef:93:fd:04:b3:08:89:2c:0b:37:1e:
16:69:c7:29:62:7a:62:24:b5:ef:bc:fb:de:31:77:59:f0:f9:
0d:21:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client