Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: v4J7jQMBJhiAyTlxCro+kz5in6hnfZY9oopOCMkd69I=
Subject key identifier: CB:E1:A8:70:E9:A4:6C:97:61:34:27:43:DE:5D:F9:61:74:25:74:74
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 019CAD902675B46501D014E7E4B38C9C3A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 1583
Signing time: Mon 02 Mar 2026 08:00:31 +0000
Manifest this update: Mon 02 Mar 2026 08:00:31 +0000
Manifest next update: Tue 03 Mar 2026 08:00:31 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: OtvQ5huyeEHGXJXrq1zw3ShOeTEot4sDHJmWNNLKKZs=)
2: gC8xECPXIz3izz_wPFR4--x3dfA.roa (hash: 8tJModKEf7OvBOeGVxRABAMXSwEYcpcHv0L6opRUwuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:26:75:b4:65:01:d0:14:e7:e4:b3:8c:9c:3a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Mar 2 08:00:31 2026 GMT
Not After : Mar 3 08:00:31 2026 GMT
Subject: CN=cbe1a870e9a46c9761342743de5df96174257474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:2e:71:19:cf:52:ab:cb:62:86:28:5c:31:
77:9d:40:65:b7:10:dd:b9:94:5a:35:0d:8f:6a:f5:
5e:13:52:77:d1:8e:cf:58:c9:01:cd:8e:f0:0e:0e:
5d:fd:c8:69:1c:11:a7:22:a1:5b:76:b5:ad:d9:a7:
52:7b:9e:62:2a:e5:20:94:6d:45:35:a8:ec:9f:ba:
a9:5a:8d:b9:d8:72:87:66:d2:3c:6b:3f:a0:9f:f5:
5b:b3:38:57:c6:e1:21:d7:9b:dd:af:96:06:61:2e:
ec:26:3c:88:74:3a:6a:7a:30:90:bf:92:76:b7:36:
bb:d0:90:26:c0:b9:31:1c:a3:3b:e7:46:c8:58:89:
18:d5:cc:f6:3a:92:99:90:a1:d5:8f:fb:b3:fc:16:
62:53:2f:22:73:8d:be:55:1b:a7:39:d6:17:27:24:
5c:d5:9e:1d:f4:a4:99:24:c4:5d:a0:40:16:a0:4c:
0f:f2:81:b0:b3:fb:0a:1f:a1:e9:f6:e9:43:ea:bb:
63:f3:3f:f1:b1:3c:bd:7a:6f:c1:e4:28:16:80:36:
09:81:e6:8f:03:3d:42:8f:10:44:61:68:76:c0:97:
83:1d:b3:01:3e:18:79:d6:b0:03:66:d3:15:5c:17:
ed:2f:71:fb:2b:d3:ee:b0:cf:dd:73:5f:f7:1e:98:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:A8:70:E9:A4:6C:97:61:34:27:43:DE:5D:F9:61:74:25:74:74
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:94:1a:59:b2:05:cd:c2:02:0a:bb:fc:8a:e8:95:16:1e:8a:
19:f6:1d:21:b2:72:ad:76:e7:2d:7c:1d:7d:0b:ce:8e:d8:99:
44:fe:44:ec:94:79:a5:5c:58:87:d1:94:d6:5a:3e:c0:dd:52:
10:ef:51:3f:cf:d0:b9:d1:25:c6:72:1f:36:38:92:53:75:26:
49:e5:92:25:76:42:9d:7c:7c:17:91:d0:54:dc:c0:c0:1b:a7:
5c:f0:20:cc:e5:5e:06:af:5e:73:79:14:b0:39:61:b8:5b:5b:
96:39:ad:67:0a:6e:31:34:eb:4b:7a:d1:2d:92:8a:c2:d3:6a:
dd:79:54:6d:94:82:ea:e9:ea:34:a1:96:c4:50:a5:29:ce:93:
17:bc:fb:76:8d:f9:6a:d8:b5:81:df:c0:e1:8b:66:98:ae:98:
d3:4c:de:04:24:51:98:59:6b:bd:0b:b8:10:60:3d:e8:5b:52:
f1:5b:07:dd:2c:ca:be:6c:85:98:b4:01:3c:84:c1:1b:d1:61:
b0:de:76:ea:74:a9:19:0d:12:85:cd:03:2e:27:45:c6:24:1d:
34:0e:20:f5:ff:bd:4a:c8:bf:d9:66:26:3c:60:9b:b8:83:29:
82:df:91:a0:df:4e:45:45:d7:8a:b7:76:df:b1:9e:a2:13:d9:
0e:6a:1f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:12 2026 by rpki-client