Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: FOKsUHcm6+oBB9g4nBoLgfzbZyW/g4Yu90WdDc36d50=
Subject key identifier: F1:D2:0A:12:A8:09:25:D0:05:9B:1E:24:D3:50:B0:E7:DE:C4:20:66
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 019CAD59D3BD4B6A8F4C02F66B7211B7ABB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 1586
Signing time: Mon 02 Mar 2026 07:01:11 +0000
Manifest this update: Mon 02 Mar 2026 07:01:11 +0000
Manifest next update: Tue 03 Mar 2026 07:01:11 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: /NHtHly1B7H9ynQuiaOOHiuXjDiuRc1ZjNiyTevrMqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d3:bd:4b:6a:8f:4c:02:f6:6b:72:11:b7:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: Mar 2 07:01:11 2026 GMT
Not After : Mar 3 07:01:11 2026 GMT
Subject: CN=f1d20a12a80925d0059b1e24d350b0e7dec42066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:ea:cc:6a:b2:32:24:2c:a9:6e:00:d0:4b:
eb:f9:c5:17:41:3a:43:26:42:28:07:91:6b:3b:4c:
4d:f6:26:ba:52:91:e7:ea:21:16:39:f5:26:ca:98:
18:02:d4:91:3d:41:3f:1c:16:35:e3:2d:1f:0d:ad:
36:81:df:f3:3a:22:7f:30:a4:a1:94:12:2d:a2:a3:
a0:a7:8c:5b:52:d8:1b:6e:97:1b:81:27:55:aa:e9:
6d:f0:81:bf:14:73:c9:e6:13:12:ff:85:97:81:15:
57:79:d3:0e:97:5c:23:ed:2e:76:98:70:6d:a4:b4:
09:28:94:0d:6f:3f:9b:2f:6c:ed:d5:4f:42:6d:00:
27:b3:f2:af:d7:86:ef:d7:14:38:3c:40:7b:64:29:
64:b3:32:ef:48:2d:f4:ec:08:c9:77:4c:d9:63:3f:
2b:a4:29:6f:8a:b3:12:1d:01:63:3a:ed:77:e9:d7:
fb:ad:45:a7:ba:6a:5c:a2:53:eb:84:a3:68:d8:54:
ac:e1:77:46:4a:55:a0:1c:f5:a8:68:43:e1:aa:e5:
8f:c2:38:20:9b:f8:07:01:42:d0:bc:fa:22:37:22:
ca:84:ea:30:e5:4b:a8:88:8d:69:27:31:8c:cb:fc:
f8:85:2a:b7:ae:12:c4:ed:87:c6:5d:87:7c:31:91:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D2:0A:12:A8:09:25:D0:05:9B:1E:24:D3:50:B0:E7:DE:C4:20:66
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fd:93:9f:07:23:c9:7b:08:f0:16:48:7b:c8:50:eb:19:7a:
02:f0:ff:54:ac:df:60:68:ce:99:88:24:b1:02:eb:6c:c5:38:
aa:9d:72:e8:b4:73:71:c1:53:dc:e9:29:dd:02:1b:51:2a:ea:
75:ab:ea:b9:ad:9e:23:39:ca:6f:b8:f4:bd:20:8d:d8:cc:86:
9c:58:4f:e8:93:28:32:58:ec:b0:f6:f3:7f:c2:86:53:28:6f:
cd:0a:96:8e:b5:38:bb:01:83:24:d3:d2:93:6a:9d:2a:57:6c:
0e:a1:5e:2b:52:df:16:82:d3:c3:10:78:24:c6:07:dd:05:0b:
bd:7d:91:c9:35:9b:2a:41:d1:53:35:64:36:37:ed:dc:6d:7c:
a1:52:51:34:88:84:b6:6f:61:d3:a4:ed:02:f8:39:da:d6:7e:
60:42:db:c9:11:d7:5d:7e:c0:a6:b2:de:52:2b:79:e2:77:4f:
84:ad:26:0f:a0:41:2a:d3:96:9d:7f:82:03:84:4b:79:b7:da:
d7:18:a4:7f:a1:6d:3d:c8:d8:db:2f:80:f6:d7:ce:d3:31:df:
9f:e0:3d:32:9a:4c:e6:bb:35:10:70:f1:92:ae:4e:01:67:8a:
a7:18:c5:15:d0:43:cf:e2:af:59:bb:18:88:56:f6:fc:97:75:
25:62:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:32 2026 by rpki-client