Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: +Q5H+TxwpHb5Pri7HRVglxypwSoJsE0DDqeyre3Pv/s=
Subject key identifier: DD:2B:66:2C:B1:D0:C0:B7:E1:47:B1:58:80:2B:8A:76:BD:0A:4B:59
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019CABA24AF5471089FBE4046F377C7050F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0CF7
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: E70Nr7dK5OrjeDLK7A2u0/RIefbXJ0702KxFmfYoYtw=)
2: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4a:f5:47:10:89:fb:e4:04:6f:37:7c:70:50:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=dd2b662cb1d0c0b7e147b158802b8a76bd0a4b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:24:d4:82:05:92:0b:cf:40:30:c5:b4:2f:
27:62:4b:88:2a:95:6f:c2:30:ce:15:e2:4f:69:87:
39:a6:28:14:69:74:d2:09:9a:23:13:c6:a7:b1:87:
f5:15:de:10:d1:15:9c:32:4f:fa:9e:15:ec:8b:5d:
66:05:2e:f0:d9:ca:df:bd:92:46:90:7d:fe:83:75:
3a:83:43:a2:a4:30:71:3f:2a:3b:6e:d9:ea:49:7a:
47:40:ad:b2:e1:9e:d9:64:b5:4b:94:6b:8e:07:3d:
df:47:28:4d:5a:cc:2b:97:03:25:ef:dc:c8:72:f4:
c9:b2:68:81:08:28:c8:bb:f5:79:14:f0:ee:0e:90:
9d:21:7d:04:d4:2d:04:41:75:42:d0:cc:c2:58:5f:
53:aa:2a:08:7f:24:17:f7:af:ec:30:e7:a3:b8:72:
3c:b5:96:1a:af:56:4b:6a:51:da:e6:a8:cb:ec:33:
4d:da:48:9c:34:34:b9:2e:10:07:f5:3e:7d:47:b3:
c1:33:22:65:c9:51:5f:1c:c5:fc:b0:c7:65:4e:51:
ec:e8:a3:9c:de:b3:ef:00:44:e5:d7:23:5b:7c:d3:
9d:6c:69:4d:71:4d:cb:0c:e0:11:04:f9:07:0d:ff:
a7:e3:aa:99:b1:bf:c1:50:4a:7a:29:ac:a9:d9:3f:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:66:2C:B1:D0:C0:B7:E1:47:B1:58:80:2B:8A:76:BD:0A:4B:59
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9f:af:63:8a:aa:77:fc:0a:14:49:fa:39:e7:86:94:7c:06:
c4:5d:ad:5d:5e:44:41:8d:54:7c:7e:b5:00:1e:0d:ce:56:83:
69:bb:54:02:b7:4c:f9:dd:2e:89:5c:82:bc:4c:b5:df:9d:fd:
48:65:16:eb:90:ff:03:26:2d:31:9f:fd:01:6f:2d:ad:f8:28:
22:d0:6a:f7:2c:3a:04:7b:9c:16:4b:a1:f2:a8:ad:40:88:17:
2d:79:59:2a:f4:30:29:fb:cf:63:4f:80:ee:79:32:e7:b9:6c:
d1:14:82:7c:25:ef:5f:87:8d:ec:b9:bd:b2:20:4f:fb:b7:9d:
e3:f4:22:98:de:71:15:58:7b:15:c7:36:04:a7:d6:fa:96:26:
77:92:51:b4:38:7e:fe:ad:d5:48:01:2a:1e:1f:5e:53:38:a3:
60:43:f3:75:77:ec:98:2c:e9:1e:70:1b:a6:97:04:08:ac:ca:
34:7a:38:63:ea:6f:05:2e:d3:55:91:e2:0f:e3:4e:eb:03:f7:
fe:16:66:d0:94:70:ad:55:50:cf:d1:25:7f:75:87:3e:dc:ce:
10:e7:8c:b8:5a:9f:09:06:70:9f:90:a4:b5:6f:71:95:f5:52:
3d:53:f1:35:ba:1f:2b:c9:f3:b3:3d:86:84:1c:79:3d:0b:70:
05:62:fa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:22 2026 by rpki-client