Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: u7TLleqh9bosJo/lnmXR+PTD268XaHylRrcIdXim38Y=
Subject key identifier: CF:99:F8:FF:99:C0:AA:23:B6:8D:16:DE:D3:8C:2E:36:2C:54:50:06
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019CAA59361F1D821775FFA1D64B1BAE7717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:39 +0000
Manifest this update: Sun 01 Mar 2026 17:01:39 +0000
Manifest next update: Mon 02 Mar 2026 17:01:39 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: HyKr/xds7OKJOzgkR4iaFS2XQXUYTnPq9T/61U0ojTM=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:36:1f:1d:82:17:75:ff:a1:d6:4b:1b:ae:77:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Mar 1 17:01:39 2026 GMT
Not After : Mar 2 17:01:39 2026 GMT
Subject: CN=cf99f8ff99c0aa23b68d16ded38c2e362c545006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:97:10:4d:5c:c3:ff:bb:fa:e1:2f:92:da:
42:a2:0c:cc:78:f5:cc:7f:0b:b7:b7:9a:2e:98:eb:
ca:df:3a:c1:09:8d:e7:86:5a:5a:ca:2c:77:3f:8b:
27:a5:e9:74:be:68:23:c5:f4:90:76:7e:d8:6b:c1:
51:28:75:20:20:fc:07:69:ee:60:84:b0:9e:76:4e:
ad:37:08:0f:b5:56:d6:81:28:de:c9:ec:55:44:df:
98:b8:97:89:7d:3e:d1:13:20:87:a7:97:3d:7b:35:
8d:a0:a5:dd:56:e7:aa:92:57:e6:ef:29:04:e2:ad:
dc:ca:42:15:f1:a8:61:5e:5b:7a:1d:e3:0a:7f:38:
cf:3a:a7:18:02:48:c0:72:e4:93:18:58:76:91:12:
5e:ce:a6:1a:42:f4:66:43:18:43:12:95:f1:ce:79:
f8:16:71:b1:8a:7d:77:e7:38:18:0c:36:10:f5:5e:
67:2b:1a:88:2d:ed:0d:64:0c:a2:bd:56:85:a7:3f:
28:be:f7:2f:03:e2:a4:e5:1a:c3:65:1b:03:de:c0:
c7:e1:8c:1c:e6:af:1e:3b:2b:c7:27:88:4c:6e:61:
fe:ac:a6:93:a9:59:d9:82:22:0f:1c:4a:b6:1c:2d:
68:3b:eb:fc:38:88:99:92:40:34:64:8e:90:32:6b:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:99:F8:FF:99:C0:AA:23:B6:8D:16:DE:D3:8C:2E:36:2C:54:50:06
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:ad:49:02:b1:6a:aa:9c:bb:11:9b:ec:41:e9:7f:5e:e2:
79:e3:8e:e5:8c:57:19:ed:e1:a9:bd:5e:74:66:38:50:04:bd:
fb:90:2d:43:7a:15:19:a9:93:05:88:06:22:99:f6:b9:77:fc:
90:c8:fb:22:88:8f:97:f5:df:dc:2e:ed:1a:14:85:ed:f4:4c:
11:73:1b:fd:25:0b:8a:7f:a7:99:fe:98:81:56:d1:2a:79:29:
5a:40:d3:a9:fa:33:64:62:03:b1:5e:dc:63:0f:f4:09:a5:ef:
50:12:8e:cd:c6:e1:0e:e4:a5:12:67:58:b7:3e:1b:ec:1f:5e:
1d:b6:27:d6:fe:82:93:85:a9:6a:c1:1f:1a:b8:51:ec:c8:6b:
ce:bd:6b:6b:c7:59:40:00:8d:44:bc:47:fa:a2:03:04:c2:cc:
78:8c:64:d2:08:61:c4:bb:7e:5b:9c:e8:e8:eb:86:76:c9:3c:
bf:3a:2e:84:b1:3a:35:6f:a5:94:5d:2e:66:b6:5b:4f:42:5d:
52:29:91:0d:a2:f1:c8:e2:83:94:89:35:6c:ea:15:99:fd:16:
5f:8b:79:8e:57:5a:fe:3e:a3:8a:15:b9:a1:51:3c:fd:29:1d:
53:21:95:c1:07:80:4f:df:b3:dc:c0:41:f6:73:8e:88:e7:27:
31:a5:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:57 2026 by rpki-client