Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: kJ1t3lGZXCHU//wG6zVFe5zMqdeh+dtTBmvVTIAj7hQ=
Subject key identifier: E3:1C:71:E6:FF:D0:30:52:09:E4:B9:16:29:9A:D9:04:65:65:EC:02
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 019CAD229AFD4C6AA3452889782788398A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 185C
Signing time: Mon 02 Mar 2026 06:00:52 +0000
Manifest this update: Mon 02 Mar 2026 06:00:52 +0000
Manifest next update: Tue 03 Mar 2026 06:00:52 +0000
Files and hashes: 1: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: ZoFRdPU0dILnGsVppZGRopVRBTnGgvRk7FzVbzKTtsQ=)
2: O8TEWtCyCFFFeBDFSQav1ileZCc.roa (hash: ZRW28K9Lr27GeePq4xOpOm3t2INDbE7syD4cgpdmkwY=)
3: nD_ARS36tkYEaFa24POgKi0TB4U.roa (hash: H1vCO9eNS9BAqP3EHrciv1VmoLehzHokRpUI2dSkh+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9a:fd:4c:6a:a3:45:28:89:78:27:88:39:8a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Mar 2 06:00:52 2026 GMT
Not After : Mar 3 06:00:52 2026 GMT
Subject: CN=e31c71e6ffd0305209e4b916299ad9046565ec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:4b:10:e9:e7:3e:ac:59:46:35:b0:8f:52:
26:20:6f:5c:e2:d9:9c:1c:4e:65:56:46:b4:bf:fc:
17:42:eb:1f:02:dc:9e:17:3e:a2:92:80:cd:98:93:
14:04:8b:da:c2:06:c3:f1:cc:ff:44:2c:b7:de:f9:
7c:1a:10:3b:cc:90:c3:d9:68:b7:fa:d7:25:f7:e2:
b6:15:c8:16:65:54:c0:f9:62:c0:d1:5c:1e:6c:c0:
e9:9d:44:51:39:80:18:7f:2a:a3:78:02:b2:10:a3:
1d:65:6f:80:d3:d3:be:11:62:7b:04:ff:38:51:d2:
42:55:0e:42:0d:b9:19:01:42:2a:66:9b:57:3c:4e:
85:67:83:5f:49:7d:0c:b2:3f:98:ea:5f:52:9c:e9:
62:29:2d:e1:6c:b3:bb:dd:41:68:55:ff:da:42:43:
e5:64:30:79:7c:0f:67:71:88:5a:4e:6f:72:eb:ad:
ae:6f:19:85:d7:34:dd:f3:5f:1d:f6:33:4b:35:3e:
25:00:d3:a4:4a:a3:b5:d7:4e:cb:5a:b0:98:96:ec:
12:b4:b5:c2:30:b0:e7:d9:29:55:d6:2b:5c:86:74:
6e:2e:9f:6c:ca:13:a1:10:c9:33:cd:53:39:7d:76:
1e:2b:5d:b9:92:c9:76:fd:ab:64:e7:c9:1f:aa:22:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1C:71:E6:FF:D0:30:52:09:E4:B9:16:29:9A:D9:04:65:65:EC:02
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b3:e4:72:db:7d:6a:94:53:fd:81:70:0e:79:77:09:db:92:
41:9a:10:a5:cc:22:ff:33:9a:c1:2a:90:c5:c8:9f:18:d2:86:
18:27:8b:2a:02:05:32:91:77:af:34:09:00:a0:e8:9a:04:24:
a1:ac:95:ef:1b:47:9a:ce:bc:e4:40:e1:36:6a:1b:97:c3:43:
23:53:2e:b0:fd:8d:e3:89:3f:a0:7f:dd:cc:93:63:b5:fb:5c:
f3:64:2b:a8:4d:0e:e8:79:bf:37:f8:74:fc:2e:08:73:95:b0:
91:3b:b7:e4:db:a2:1e:a9:08:41:38:67:76:75:21:19:af:b2:
25:58:f3:70:19:0a:62:88:39:7c:10:31:fa:95:c4:90:59:ff:
ca:20:8c:fb:f1:14:45:27:5f:38:82:5e:3e:02:a9:05:dc:59:
79:b9:d2:b4:14:5f:85:9e:67:0a:6b:15:b6:cf:39:35:19:9a:
37:c4:f7:2a:f7:fc:64:60:70:54:2c:78:f7:55:86:13:9f:01:
2b:b3:71:8b:6d:6c:bc:b9:c8:d4:16:6f:51:12:ca:20:0c:8f:
9d:a0:69:e0:47:26:a3:5a:e1:0f:17:5a:72:41:01:ec:6e:06:
4d:4b:e2:bc:c3:cb:f4:df:1e:08:7c:b2:9a:bf:f4:70:f5:b0:
ac:c4:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:37 2026 by rpki-client