Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: alzJmDbgfA4MxY9zDxtrnn7brVUEe7B92qmxvs4fkxk=
Subject key identifier: EF:7C:AA:47:56:C9:2F:18:D7:91:24:7A:E9:5C:28:F2:D5:D5:BD:8C
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 019CAAC7094BF2B5607D42B6DA82591127D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: E9IB3sYZ-oc7-YPITpGQaihn-so.roa (hash: 5jPfUKrdbwudGJGlNuuaExPB1D+OPBNCB1dk0F5dGxU=)
2: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: 3ytPC7sBuA9xrpRFBxxrlPZWf4s8Brr0yZguKjcUrew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:09:4b:f2:b5:60:7d:42:b6:da:82:59:11:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=ef7caa4756c92f18d791247ae95c28f2d5d5bd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:4d:08:71:f2:6e:63:30:94:e8:a3:c0:32:
d0:c6:3d:98:db:df:4e:ed:cd:6a:48:7f:be:6a:0c:
6a:bb:35:a5:a7:de:66:35:b4:f2:8a:1a:b5:8d:5f:
50:5a:d7:59:fc:ec:17:c3:00:03:1d:41:ff:5b:ec:
e2:6b:e7:72:96:20:49:0e:3d:74:82:79:da:a3:dd:
96:b8:94:f1:1c:7a:1e:83:5d:6a:fd:7f:f5:a7:8f:
b1:64:59:c7:7f:73:bc:17:8c:77:5d:85:53:3e:a3:
b0:b0:b0:e0:dd:2e:ab:c4:3e:37:4e:8d:94:c6:b7:
0e:ab:62:cd:67:7b:92:bd:95:b4:a9:48:96:6f:ac:
56:d2:7a:f9:3f:55:ee:72:93:4f:2b:b4:76:31:36:
01:a9:7a:12:a5:46:7a:87:78:72:61:b3:62:16:62:
43:6c:7a:78:89:c4:ac:d3:b8:c1:69:19:3a:d7:4f:
00:01:86:59:25:ca:21:e9:d6:b3:55:05:95:ec:99:
17:dc:79:8f:3e:09:63:58:34:b1:c8:ac:f2:17:74:
24:b4:e1:87:8e:27:ba:41:ab:4e:26:de:3f:f5:99:
7f:2c:2b:f9:2c:a7:20:74:c2:4f:56:18:37:6c:a0:
44:63:d0:f9:d0:c3:bc:7d:b1:58:ba:ef:9d:3d:0e:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7C:AA:47:56:C9:2F:18:D7:91:24:7A:E9:5C:28:F2:D5:D5:BD:8C
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dd:cf:2c:f1:19:5d:56:76:7d:5c:94:c6:02:e7:72:43:9e:
1d:e7:f2:ec:37:3e:fd:c4:72:f3:6f:46:3f:29:db:2d:e1:f9:
2c:31:a3:16:e2:68:97:92:07:07:fb:c2:c6:4a:e2:a5:0f:2f:
01:1c:66:39:58:e7:24:a0:8d:ad:fd:8a:9e:b8:1c:44:58:6a:
af:ec:7e:06:92:c4:b3:2c:f2:05:43:62:32:31:4a:6b:77:50:
df:6b:e1:56:be:60:1e:d4:23:88:98:33:f3:8e:7a:bd:72:2b:
28:46:ec:0c:1a:7e:d8:ca:67:0a:04:f0:99:c4:16:fe:56:0c:
67:64:da:93:00:12:44:88:8f:8c:b9:33:c9:16:b6:98:43:4d:
93:2a:e0:29:f0:90:bd:1d:27:29:81:94:eb:b8:c2:f8:89:b4:
0a:1b:47:8b:15:37:91:ef:f2:05:0a:34:a7:50:ee:7a:b9:04:
fe:5f:b3:1f:6d:09:19:a9:d2:a8:73:3f:7c:bd:71:9c:fc:16:
d4:6b:b9:fb:5a:8a:52:fe:5b:07:20:4c:7a:03:96:97:48:0c:
36:4c:81:f3:bb:aa:fb:62:79:ec:ec:87:f5:24:95:84:b4:bd:
25:3d:ff:15:61:22:06:e8:b0:e2:97:32:7e:e2:4c:c1:35:0d:
1c:aa:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:40 2026 by rpki-client