Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft (raw, json)
Hash identifier: f+DYkJWGE8FalC3ctpyOEDmTWA5zMwWy8PlshNxHigE=
Subject key identifier: 96:A4:77:F2:4A:C7:22:25:61:AE:49:BE:32:7C:EE:46:C4:75:A7:30
Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Certificate serial: 019CB092083081D2B505CEB07D3295951D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
Manifest number: 0191
Signing time: Mon 02 Mar 2026 22:01:26 +0000
Manifest this update: Mon 02 Mar 2026 22:01:26 +0000
Manifest next update: Tue 03 Mar 2026 22:01:26 +0000
Files and hashes: 1: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl (hash: oEtbCedSdE8x7cmiFw9VjDs46pS4FaEl5xQfjGozsGw=)
2: a7dC-fTyRsxAqjUqXt-V2l_sFRk.roa (hash: Yi2vsWWavytIaBmtL4DN0PmLyI2j0Zs4YPCaJ/VDFVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:92:08:30:81:d2:b5:05:ce:b0:7d:32:95:95:1d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Validity
Not Before: Mar 2 22:01:26 2026 GMT
Not After : Mar 3 22:01:26 2026 GMT
Subject: CN=96a477f24ac7222561ae49be327cee46c475a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:65:f0:3a:cb:37:9f:89:56:a6:fc:0f:c7:
a9:ac:d6:9e:46:f2:a4:e1:b3:f9:bc:65:91:66:a3:
81:7b:9f:a6:56:61:f1:a4:fd:89:6e:f7:82:05:7f:
4c:b6:51:56:a1:6d:ef:79:9d:73:32:f5:34:d1:fa:
ec:9a:d1:24:07:9a:fa:88:7f:01:ae:7c:9b:f1:62:
6b:28:ba:49:46:34:ec:e6:55:c5:2a:a0:e9:75:91:
6c:57:fe:89:aa:81:60:9d:f3:fc:d3:46:b2:97:70:
d3:c3:3c:ed:86:d0:2f:fd:ba:3b:04:65:8b:48:32:
27:87:29:f4:97:ad:e6:fc:7b:3b:34:ce:de:d3:6b:
8f:09:9b:50:61:b4:c5:bb:39:54:37:72:38:35:81:
b7:8a:81:b3:c4:75:49:39:2b:68:35:b8:31:f5:34:
fc:70:df:b6:64:09:66:bf:c0:81:42:fc:23:53:8f:
ca:61:ae:de:b0:54:d0:12:71:a7:da:50:44:b8:1e:
42:86:d3:6f:b2:56:a0:da:b6:76:48:f7:54:4f:3e:
23:67:3d:57:62:b4:cb:ed:9d:a5:26:f9:dc:57:4b:
72:55:22:9f:8c:49:05:bf:22:36:ce:1a:7d:60:a5:
a2:17:c0:6b:4d:62:3d:6e:c1:dc:23:fc:ec:8a:d6:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:77:F2:4A:C7:22:25:61:AE:49:BE:32:7C:EE:46:C4:75:A7:30
X509v3 Authority Key Identifier:
keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:7b:5a:2f:63:14:dd:90:37:17:3d:70:38:3f:a7:e7:ed:
6b:56:38:2e:5f:21:04:45:0c:70:bb:b4:17:69:86:14:24:8a:
cd:d9:a3:93:4b:64:2b:84:53:c5:9f:c2:01:c0:12:2a:ff:b2:
2b:78:bd:86:82:01:da:73:c1:e0:9a:ce:1e:d8:f7:ab:59:3c:
48:26:06:3e:e5:e2:06:df:8d:95:f9:b8:6c:aa:fe:85:56:9c:
9a:62:eb:91:c5:ad:de:a0:df:8e:6e:87:3f:9e:3b:c1:52:fd:
31:44:eb:47:b6:b8:bc:cc:29:1b:60:77:08:4c:07:a7:33:be:
1a:69:e2:a3:c2:50:25:f2:fa:ee:f4:7f:54:74:d6:78:50:3b:
05:f2:38:3a:cb:19:b1:f5:6d:08:31:22:58:f9:bd:42:f4:26:
52:23:e5:da:c3:d5:09:8b:24:cb:89:67:50:2a:f7:88:b8:ed:
80:20:51:e1:c7:42:d3:66:31:f4:1e:8f:06:18:e9:45:ce:0f:
bf:08:d5:7d:c2:93:0f:7a:b9:58:7a:ec:f6:a2:11:2f:38:48:
71:31:e4:10:cb:b1:34:e0:de:71:ac:c0:c6:ab:82:c7:60:e1:
b8:47:f5:6f:b1:18:ee:6c:4a:bd:31:5a:18:6e:a6:a2:2e:79:
b3:c3:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:54:58 2026 by rpki-client