Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: HRV4hD0+Uvh+uOzTErWUiLxRriokct6p/uvXQCqu4WM=
Subject key identifier: 73:2C:F7:88:11:71:46:D8:D6:A7:45:99:D5:1E:6F:50:63:AD:69:B7
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019CAAC6702170A8CAAFCEAD83F09E32935B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 1155
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: Q53YmbftXPasi+poa2hAamoUglT1azZNje6es/f26HY=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:70:21:70:a8:ca:af:ce:ad:83:f0:9e:32:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=732cf788117146d8d6a74599d51e6f5063ad69b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:25:f0:97:d3:58:c3:a6:a5:4a:6e:8a:3a:
1a:b8:e7:7f:f7:51:a6:10:47:fb:49:7d:02:d1:d1:
6d:53:4e:1b:85:4e:e7:58:94:da:73:85:c9:33:37:
58:c0:46:a3:c8:86:b7:d3:9d:c9:78:f6:2f:99:aa:
5c:12:02:81:84:db:8b:33:d9:26:48:7f:a5:88:53:
f4:84:1d:80:52:62:6b:81:3a:a9:33:da:ec:1d:0f:
5f:f1:8b:84:94:ac:2e:4f:06:8a:7a:ca:a8:5e:15:
5e:73:1b:0d:ea:13:62:fe:9d:83:9d:7d:db:b4:5b:
a9:56:e0:25:43:c1:cd:b9:00:0b:8a:c8:4a:94:1c:
46:a9:86:1b:bf:03:23:32:e2:8f:d6:c4:94:58:6c:
a3:d7:31:55:8c:49:03:d6:77:17:c6:4d:be:0c:df:
da:a0:f0:b9:50:d1:b0:56:57:4b:c6:bb:f6:95:a8:
33:95:b1:8a:6d:06:31:d4:58:fb:cd:2e:b7:68:2a:
83:9d:50:e5:6f:99:df:0d:6c:81:4d:cb:1a:71:02:
21:f9:7f:d9:48:bf:16:99:36:69:6f:af:ea:3c:c6:
29:20:7b:05:fc:0f:b1:08:c2:71:b4:26:b7:8a:22:
2c:d2:73:43:64:b2:4c:e1:c5:20:f6:2d:0f:7c:07:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2C:F7:88:11:71:46:D8:D6:A7:45:99:D5:1E:6F:50:63:AD:69:B7
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:75:31:bf:40:8c:6a:ae:e8:7f:f9:f5:b6:5d:84:91:b2:14:
00:b2:97:11:45:ff:00:b6:67:0d:d1:b1:d8:88:a0:56:57:9c:
4e:91:28:e8:ac:c1:6c:00:69:f7:db:63:4b:4f:b6:42:68:18:
a8:33:87:d6:a1:eb:9e:9c:72:35:46:42:c7:ec:fe:85:07:5c:
78:0f:ab:86:ef:61:0c:91:bb:ea:df:38:bf:23:8b:47:b8:4b:
f2:36:43:6f:e8:9a:40:ec:ab:bc:c6:9a:7b:d3:5e:e7:57:59:
73:fc:ab:07:5a:6b:f3:21:d7:ae:0f:1a:50:ad:16:65:ba:be:
c3:62:80:f8:b8:7f:36:5f:93:ee:7c:99:7c:4e:f4:b2:8f:1c:
73:72:32:67:92:07:72:17:51:8a:cd:9b:8b:40:db:90:f8:7b:
b6:3f:08:5f:2e:06:e6:20:2c:ab:9b:16:3c:fc:80:5f:6e:78:
1b:46:73:0b:e8:5f:1b:53:97:f5:10:21:93:4f:5c:99:26:eb:
f6:fe:ee:74:e0:27:3e:d0:f1:ea:c5:6f:d6:ee:48:4f:30:3c:
53:fe:6d:d5:cb:1c:e0:f4:96:2a:75:a2:64:f7:75:e3:a5:0a:
29:40:67:30:6c:8b:1b:ee:ec:15:40:20:10:1e:d1:84:1c:c8:
03:1c:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:30 2026 by rpki-client