Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: 9V1X30iv+yXuSCOM5x1XhvJIBH4RBB9YsyKxGkcwJgk=
Subject key identifier: 26:0C:04:75:75:57:86:38:DB:7E:58:15:B2:8E:29:87:66:71:62:F0
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 019CAD5A408AE1A86F320E297144B46CF8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: gKMtZzHo6ZDUbnW3AFPfD+EfRIKeS5247lbadwpHpEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:40:8a:e1:a8:6f:32:0e:29:71:44:b4:6c:f8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=260c047575578638db7e5815b28e2987667162f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:be:71:7f:9e:78:9e:7b:b8:04:b5:13:64:
f9:f1:5a:de:6a:5e:44:9d:ae:18:bc:9a:21:ae:7b:
11:d6:1e:87:92:d2:8a:e8:aa:a7:34:34:91:3c:a2:
51:3f:5e:69:c2:29:92:b0:75:f3:70:29:53:b7:01:
3c:10:98:6f:70:74:37:71:21:8d:24:ef:c2:03:3a:
f5:86:8c:12:e2:a5:19:92:0f:54:30:cd:d5:5c:b3:
5b:ee:a4:ff:d9:b9:8b:af:fe:9d:c5:7d:ae:e6:31:
35:af:eb:d2:94:09:aa:34:21:8f:19:b2:f2:89:10:
20:ae:5d:72:c3:17:e7:c8:cb:36:0d:a9:b9:15:1f:
5d:2c:d0:ef:35:c6:dc:29:4c:b0:d6:ba:0e:61:46:
a8:84:c1:c5:96:75:36:8c:1a:d1:6e:f4:0e:63:b4:
27:61:ff:89:cf:e0:1f:1f:55:b3:f9:80:95:37:e8:
07:3d:57:41:cf:c1:14:6a:3e:c8:56:9c:b6:35:c4:
b5:e7:7c:9d:30:d9:6c:8b:40:81:2e:30:a6:23:cb:
fc:fd:80:d6:cf:0d:37:ea:ee:23:0c:31:20:ad:77:
68:6f:6b:2d:16:4a:fd:97:a4:01:c7:b1:04:38:64:
3b:99:d5:4a:91:6c:f2:81:fa:62:40:0e:dd:f6:ae:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:04:75:75:57:86:38:DB:7E:58:15:B2:8E:29:87:66:71:62:F0
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1a:c1:d2:49:9d:c7:4b:c3:36:28:fb:9a:5b:99:a3:df:fc:
19:3a:ad:21:c7:7a:92:3f:03:7b:a6:86:dd:40:a3:ab:17:1f:
2c:fa:8c:1a:0c:e8:56:7f:e6:66:93:69:50:60:82:37:be:14:
52:14:c4:c7:58:b1:49:d9:b7:1c:56:94:95:63:43:d5:4f:07:
c7:9a:fa:35:56:b9:d0:72:9d:f6:c3:4c:f6:4f:f3:21:3b:22:
65:72:9e:8f:23:c2:05:9c:9b:0d:72:80:49:76:a9:1d:55:eb:
3f:7c:01:39:69:3c:10:54:2b:bb:11:6b:af:46:0b:48:d2:ec:
cb:a1:fd:e1:f8:fd:c0:f8:24:3a:0f:d9:5c:37:32:b6:09:fc:
ab:82:59:ff:17:e4:09:e0:4a:43:26:17:6a:cc:9a:be:a9:a7:
8f:d7:64:44:39:47:a6:d2:0b:06:bc:cd:51:d0:8b:b3:28:0e:
ec:69:56:45:e0:90:11:2c:cb:d5:10:35:57:3f:72:15:ac:b3:
ad:36:68:f4:6a:cc:2c:c0:51:5f:98:3c:86:aa:3b:18:07:a9:
4d:12:ec:9b:26:7c:45:01:11:4b:a8:1b:71:21:f0:ea:b0:3d:
71:a6:2b:b8:bf:9d:a9:a3:a6:3f:e9:15:b7:e2:e5:e1:e3:21:
2e:39:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:05 2026 by rpki-client