Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: Jon9T9vx3ybkmub/T9ORF0KC2AKCnG6Zj+SNQChEIa4=
Subject key identifier: 48:06:49:EB:6B:A4:53:A4:85:24:CE:08:57:30:23:54:C9:7D:BC:DA
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 019CAD5A09A3910FEEBD5C10FE8804788B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:24 +0000
Manifest this update: Mon 02 Mar 2026 07:01:24 +0000
Manifest next update: Tue 03 Mar 2026 07:01:24 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: uJ18dpdxsXp1entaBVqux+FrGoxu/B8OqX0+ZbJ067o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:09:a3:91:0f:ee:bd:5c:10:fe:88:04:78:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: Mar 2 07:01:24 2026 GMT
Not After : Mar 3 07:01:24 2026 GMT
Subject: CN=480649eb6ba453a48524ce0857302354c97dbcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:be:50:23:4f:c7:11:29:a5:4c:4f:e6:c8:
d3:29:82:af:5f:42:fb:51:8f:f2:bf:49:7a:27:9d:
e3:e5:4a:d9:17:71:92:9c:66:9e:37:e1:87:f0:89:
71:b6:35:1c:07:ab:2c:8b:08:35:32:b3:53:07:1d:
b1:48:cd:0c:68:df:3a:c9:c7:21:38:f4:fb:fe:3b:
0b:1d:d7:da:62:f8:b1:ba:6f:86:7f:ae:66:9c:23:
aa:b1:b9:7f:94:ae:c9:b8:2b:fa:30:23:03:ab:75:
bf:c3:99:b1:6b:7b:42:bc:bd:af:fc:84:6b:13:ca:
88:2d:a1:ee:a6:42:42:7a:20:09:6f:4e:92:67:6e:
b8:c4:3e:93:8f:56:0e:9f:34:fd:ba:13:10:61:5a:
ad:30:7c:9a:71:d8:43:3a:42:5f:00:6e:c3:b2:b7:
09:8e:0c:80:0f:82:20:ba:94:35:93:08:ac:cb:9e:
d3:80:cb:1a:b5:f4:39:55:cf:c4:01:d3:89:b8:85:
c7:45:d0:74:32:2a:2d:14:8f:55:ed:6b:69:cc:37:
13:cf:ca:29:ec:52:1b:21:ae:bb:f6:0c:ff:8f:0d:
f5:e9:3c:2b:94:5f:e6:88:fc:ec:49:72:42:7e:27:
34:86:4b:02:09:e1:d0:4b:a2:d9:22:06:f0:0a:e0:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:06:49:EB:6B:A4:53:A4:85:24:CE:08:57:30:23:54:C9:7D:BC:DA
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:47:4b:3e:ab:e1:8b:ee:3e:55:56:e9:fb:e8:8a:21:3d:40:
ba:72:89:b1:aa:e9:38:ae:0e:f7:53:fc:23:09:be:6a:84:1d:
88:9d:fd:cc:18:e7:6b:ea:e4:2b:92:9f:a7:50:52:4b:7b:76:
fe:fb:7c:34:6b:de:e4:33:a0:7f:36:ab:5a:6b:c2:31:3e:80:
56:0f:38:c2:8c:fc:4e:1d:0d:73:24:a7:79:ba:14:9f:83:f0:
41:06:16:a5:28:ab:4a:69:70:e3:9e:5b:5b:b0:9b:ad:db:24:
42:e6:da:e0:ca:20:71:48:48:b5:e4:e7:6b:00:39:7d:d2:99:
1c:9a:3e:07:9e:d7:50:8c:4c:18:b2:c5:58:fc:bc:70:b1:a6:
61:f7:53:d5:a7:d2:aa:14:96:2e:4a:73:78:a8:51:8a:89:c4:
e9:cc:2e:d2:a5:8d:73:1a:6a:14:b8:d7:a0:8c:b6:ba:b0:ed:
9a:c5:11:04:c4:e2:44:5c:6a:0f:4e:20:76:1b:ba:1a:c1:ba:
79:68:cb:2c:56:5d:f5:c5:61:f3:71:af:e6:4c:34:8c:d4:c6:
2a:19:76:0e:c9:67:78:69:db:43:2a:59:56:8a:93:a3:59:f5:
0c:47:9c:7f:1c:08:b1:57:75:51:34:7f:ff:14:23:1d:2e:31:
fa:79:51:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:29 2026 by rpki-client