Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: oM43bnC9KHipcZm6ZQKJobLSdtSK6BcKfQ8kWQ1Ou48=
Subject key identifier: 87:64:D0:C5:52:30:1D:23:D0:65:7C:25:32:99:B9:9A:23:43:09:E9
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 019D24DE4EEFD5E550934FEA297E8BFA3534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0D02
Signing time: Wed 25 Mar 2026 12:00:41 +0000
Manifest this update: Wed 25 Mar 2026 12:00:41 +0000
Manifest next update: Thu 26 Mar 2026 12:00:41 +0000
Files and hashes: 1: FbQ9gg85Y5Qx602ZBVh6YkaLcXs.roa (hash: T391+Idz7L3dve/E2xgopb1fIMnjsWpWTFaXJBaoxCg=)
2: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: 7LRIbYCkAfH/kl5VeudlKVs75nln7fwlZQPG9bCDmoE=)
3: LeJNm1ZK5iVV3SsDbJERcUuUUyU.roa (hash: YZLLMnJFDKGZDywuXIt3IlZ5Tc81OdOTnXuXJJ8sLok=)
4: ytIxMg-nFxFDrCls8GXhACBFUSI.roa (hash: GHaVvWlfNGDA8GztLcPLg+D8rXVf6ft0hke/kEcK6uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:4e:ef:d5:e5:50:93:4f:ea:29:7e:8b:fa:35:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Mar 25 12:00:41 2026 GMT
Not After : Mar 26 12:00:41 2026 GMT
Subject: CN=8764d0c552301d23d0657c253299b99a234309e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:b8:88:bb:a7:e4:5d:02:68:48:13:e5:c9:
d4:de:cc:ef:79:58:28:94:bd:c2:67:4f:c5:06:3e:
1a:09:10:0c:30:5c:62:e8:c0:67:d0:42:08:75:7d:
eb:80:8f:36:f3:21:11:28:c5:4e:ca:79:d5:85:5c:
bc:98:fa:86:c1:44:28:73:ab:45:90:81:d3:50:bb:
d9:24:50:97:3c:17:08:80:c9:df:79:4e:2a:ab:59:
b2:e0:ca:af:e9:a7:d7:8e:57:59:b5:e5:a7:f3:27:
3b:67:99:5d:b7:a4:39:8f:53:3b:06:42:d4:c6:b2:
30:29:d7:44:9b:c8:0f:61:7e:48:8e:bf:d3:5e:f6:
94:0d:39:1f:ca:e4:1f:e7:a8:d9:bf:d3:f8:e9:12:
4b:c3:20:b4:18:55:5c:72:b0:ac:ae:db:74:87:35:
1a:56:06:b1:3c:09:bd:d1:20:df:e2:0b:d8:66:d0:
af:5b:a2:ff:80:d1:0d:e5:3f:35:39:6d:3b:32:4e:
b5:eb:cf:7f:3c:b6:20:15:40:b7:ee:14:73:4f:eb:
b5:f1:31:ea:6d:ae:91:a5:dc:88:d3:1c:9c:7b:79:
ff:07:c5:c5:69:dc:f1:5f:76:09:0c:10:14:5b:43:
2c:14:3e:45:bf:8c:68:5f:b9:32:86:43:7d:e1:5c:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:D0:C5:52:30:1D:23:D0:65:7C:25:32:99:B9:9A:23:43:09:E9
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:08:92:d3:6b:10:49:82:67:9d:c1:7b:fd:07:39:16:8b:
13:0a:a4:84:24:1d:7a:b9:0c:c8:ac:0e:93:65:22:7d:89:2a:
a6:88:40:93:ee:80:91:a3:1d:4d:dd:5f:1c:e4:1c:03:b6:58:
1e:11:db:1a:c9:42:b0:ce:f0:f6:79:90:d3:04:08:a9:ba:4e:
2b:da:e9:b4:17:f6:44:28:1c:16:29:b3:22:b4:5d:77:6e:26:
10:8f:e2:dc:32:3f:8c:73:a5:d9:84:f1:a5:4b:f4:7a:15:88:
ff:f9:84:d3:02:32:b6:ba:1b:f2:27:8c:27:c4:bc:d7:39:1f:
e8:ab:42:e9:f9:d7:74:2c:db:f8:a6:3e:76:51:e6:73:75:0e:
d6:fa:52:26:ee:d0:8e:f1:e6:a2:6e:b9:c0:ff:ee:3f:ce:0a:
3c:37:c2:e8:f0:cc:a7:60:65:3e:e7:31:b7:4e:c2:50:85:09:
3a:7c:8f:4b:d1:60:aa:44:71:05:2a:12:50:30:6d:1d:ed:51:
b2:d3:4c:c2:5a:56:8b:9d:b2:32:2a:e6:b4:ef:58:4a:a9:ee:
1d:33:88:f2:25:bf:74:fa:24:33:c1:5c:53:9e:ef:33:47:ec:
5a:e2:a1:41:75:f2:28:33:77:38:92:3a:69:06:19:76:36:66:
39:fb:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 19:33:02 2026 by rpki-client