Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
File: JkXNQMgEm-mprn8DM2q9P-CCr7k.mft (raw, json)
Hash identifier: KyorZ+VMrJER3p1acUsTK7Nz6dmP2YUkkLhF69g+cd4=
Subject key identifier: 7F:36:ED:6C:92:1E:B1:A3:1E:EE:A6:45:F5:78:F1:2D:93:22:01:52
Authority key identifier: 26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
Certificate issuer: /CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Certificate serial: 019CA97D43A1877847DB1B99E204E7D5ED24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 13:01:24 +0000
Manifest this update: Sun 01 Mar 2026 13:01:24 +0000
Manifest next update: Mon 02 Mar 2026 13:01:24 +0000
Files and hashes: 1: JkXNQMgEm-mprn8DM2q9P-CCr7k.crl (hash: Cy2d2hg5vJYNWL6wUexxbGDLRF5dF1pvnUvUCS8+d3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:43:a1:87:78:47:db:1b:99:e2:04:e7:d5:ed:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Validity
Not Before: Mar 1 13:01:24 2026 GMT
Not After : Mar 2 13:01:24 2026 GMT
Subject: CN=7f36ed6c921eb1a31eeea645f578f12d93220152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:26:93:3f:11:74:2b:49:6a:3d:2a:90:6a:
c3:36:eb:38:63:50:61:d3:7b:8f:db:12:69:5a:f9:
4b:a3:8f:89:e0:c8:71:22:5f:28:e9:3e:0f:1b:17:
19:17:1f:64:67:b6:92:b0:86:79:97:9b:2d:9d:f6:
43:67:60:c5:58:f9:27:81:dd:63:76:54:cd:9f:d0:
8a:ae:2a:f6:55:c3:8b:0b:00:1f:13:0b:e1:13:f6:
50:9f:15:1f:11:e8:e3:67:dd:ec:81:71:e2:cb:98:
37:8c:f8:1c:30:87:b6:d6:c9:eb:c0:0e:d3:f8:3c:
eb:21:94:aa:80:03:59:2e:e0:ab:a5:c3:85:e7:28:
db:49:81:20:b2:c4:c1:4b:a1:54:16:16:22:70:33:
41:a9:60:83:17:db:5e:79:3f:6f:39:32:79:28:f8:
3c:6e:58:e3:e1:47:cc:79:e7:06:3f:bb:79:0c:7c:
af:2c:c9:22:d3:9b:05:c3:e4:ff:14:97:2c:e1:1f:
03:10:fa:bc:3f:14:6b:82:8a:35:25:f4:5f:33:bc:
20:da:c5:b5:c4:5f:c7:b1:e6:00:97:22:ce:a4:39:
cd:3a:37:14:41:96:6b:ef:c2:b2:5b:6a:3f:91:9e:
73:22:ad:df:2e:1d:1c:0a:ce:86:6e:bd:15:69:2e:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:ED:6C:92:1E:B1:A3:1E:EE:A6:45:F5:78:F1:2D:93:22:01:52
X509v3 Authority Key Identifier:
keyid:26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:de:46:95:67:2e:90:0d:82:f2:50:c1:6c:05:b8:75:6a:
63:83:05:a9:2e:42:6f:fc:a9:8a:3d:ff:e9:18:10:be:5d:c4:
56:a5:18:44:dd:e9:4c:67:86:c6:35:73:9e:5b:e0:7b:8e:40:
eb:48:25:6f:46:d7:bf:61:d6:06:fd:d3:ee:bb:e5:53:6b:b3:
b2:8e:50:30:35:e3:c7:4c:f2:ea:00:58:ed:f1:1d:40:a9:5a:
97:ad:34:fe:8c:08:5f:8e:9b:51:11:8a:71:83:3c:a8:2d:52:
a9:ee:b0:3c:bc:d7:f3:65:5b:eb:b0:ce:e0:99:e9:c0:68:93:
92:87:4c:fa:8b:7f:8e:26:f7:ac:e0:22:3c:fb:2f:53:81:d6:
1f:55:69:37:68:3f:4f:aa:e0:9f:81:4a:ce:39:e1:04:ca:9e:
96:d3:73:2a:d1:ae:e9:35:3b:85:e2:c6:9b:4a:09:fa:bf:33:
c8:af:9d:f5:cf:c6:82:67:93:ce:93:50:5a:d5:62:df:f3:aa:
25:2a:4e:12:e1:dd:68:31:e7:a0:e1:2c:aa:c0:b6:4d:3c:c2:
5c:74:64:a9:ff:e4:58:b9:b2:79:9f:63:42:08:89:06:fd:ef:
fe:d5:95:3d:3b:c2:32:2c:90:a7:25:85:1e:70:d0:d5:77:3d:
3e:00:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:44 2026 by rpki-client