Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: VmpFfNicWUjJmtGkyrmKes24YFIJYuzY5NKm96PtVRo=
Subject key identifier: 2D:0C:2E:1A:74:E2:A6:8A:82:33:AA:A4:08:1F:EE:44:84:26:D4:52
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 019CAA58F6AD1A74352138C397CAAE778E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 13A2
Signing time: Sun 01 Mar 2026 17:01:22 +0000
Manifest this update: Sun 01 Mar 2026 17:01:22 +0000
Manifest next update: Mon 02 Mar 2026 17:01:22 +0000
Files and hashes: 1: 5WocRxOSmDdCp3t8dO5S36MRZuU.roa (hash: 2FyKXR8tCa5ZwTM66G1T6QFKNZ0CxQwW+d8mP57rB0M=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: DHGCXOZB+LKatgUwrDAz+7S0SvTa5Q6VWaMHJeO3H3A=)
3: ndAxHc3VnkS73TWIqm8iAAZy9_k.roa (hash: d8ACwc3xMwTKBD/Rj4Jwn8VZBThWrsDZp4lALyC1e/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f6:ad:1a:74:35:21:38:c3:97:ca:ae:77:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Mar 1 17:01:22 2026 GMT
Not After : Mar 2 17:01:22 2026 GMT
Subject: CN=2d0c2e1a74e2a68a8233aaa4081fee448426d452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:06:c8:2f:19:4b:fa:43:c5:98:17:9a:d7:e3:
40:3c:58:c8:c0:9c:2b:9a:46:cc:64:15:9a:5e:c1:
74:b6:73:c3:cf:dc:de:56:b8:8d:e3:68:fc:e2:1b:
59:67:0a:34:3b:ba:76:89:c2:0b:bd:19:5e:99:6a:
b0:8a:a5:90:5a:0a:75:cc:8a:9a:13:2e:a9:1a:79:
81:44:37:44:a2:87:5c:b1:8a:c5:40:e9:66:59:ed:
0e:0d:8a:8a:7d:15:0d:1a:96:ac:ca:d7:2b:24:a5:
24:ed:54:f9:51:fe:58:a5:a5:c8:e9:d2:a0:8d:d6:
18:57:3b:eb:46:ea:aa:24:b4:1e:c5:34:73:52:cb:
0b:14:81:11:81:63:1f:cd:c7:b0:ca:00:da:b3:98:
db:2c:84:78:b9:1c:6a:dd:28:eb:cc:c0:5b:0e:4f:
36:2b:f8:c1:a1:72:ce:af:8e:c5:40:35:40:06:0c:
d4:9f:54:f2:c0:24:bc:ae:65:48:f5:f9:78:e4:21:
a5:6d:dc:d6:08:10:a0:8f:1e:37:eb:6d:e3:a9:96:
f6:93:17:78:e9:ef:9d:d9:5e:ae:fc:22:25:68:95:
7c:78:47:4d:68:1b:e8:1b:51:88:72:72:18:13:32:
6b:f4:76:64:6b:09:c6:2b:38:ff:2f:96:a5:ed:dd:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:2E:1A:74:E2:A6:8A:82:33:AA:A4:08:1F:EE:44:84:26:D4:52
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:12:77:1e:68:7d:6f:83:00:84:57:84:be:1d:80:ba:47:dd:
5c:5b:1c:d4:2f:f9:dc:7f:d5:9c:ec:6d:15:6b:ff:f4:61:76:
bb:26:28:b1:78:04:c4:ea:a5:2c:68:c6:31:e3:91:be:f7:85:
d9:f7:94:aa:9b:cc:4f:3a:97:a6:46:c2:f6:96:a4:41:f1:56:
0e:8c:0f:98:b0:2f:e2:91:11:01:e7:50:11:b0:22:53:11:90:
9e:d4:f7:45:39:47:41:54:2f:a8:13:b0:fd:6a:f0:44:7b:6a:
b4:1c:4f:aa:bf:bb:29:3f:6a:96:7e:06:95:11:6b:1b:a5:f0:
6c:97:d5:95:99:8e:3c:42:50:84:25:5f:9e:00:c8:9f:e7:e0:
08:47:ed:fd:9b:84:6e:2b:18:0b:ab:d3:e7:c8:19:09:7c:50:
7f:35:be:93:3b:7b:ef:dc:48:e9:01:d6:9a:67:fe:ae:85:fe:
f1:1c:1d:25:c7:e2:5e:b3:4a:a5:52:da:55:5d:a8:86:bb:61:
4e:b6:f6:5a:13:41:5c:ab:bf:63:03:84:c8:88:3e:b6:23:7b:
f6:26:81:79:aa:18:1a:10:5e:3a:74:1c:35:c0:b0:31:72:92:
4b:86:e7:f3:14:fe:57:c8:e6:af:47:bf:87:db:40:76:45:4f:
86:dc:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:14 2026 by rpki-client