Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: XkSDXYjLyoNYmiECEFUAiw110g6Xt/Y/U4OOg/BhBuE=
Subject key identifier: 50:A7:B4:4B:A2:64:42:A1:0A:8E:6C:13:10:65:D2:9E:C7:9B:8F:45
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 019CABD9A6DF9027AEF849B8831B65A5D4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: GHTdayMiWDlw-FficQL48lxhZOg.roa (hash: FsnkdiClv5Pq5UfPSWarTRIqcdA96NlEZ5WqhhR+uB4=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: lboxPT/hqc99sW+p28vTuAyDbVv7QuZkMW8dxzX+B/E=)
3: YoG-FSIwZG75jmbunNKK5iNqjxI.roa (hash: 4W4AIOU7bTCXgAo+Q56kCjhAV3Ite04SA4ttlsHvgNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a6:df:90:27:ae:f8:49:b8:83:1b:65:a5:d4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=50a7b44ba26442a10a8e6c131065d29ec79b8f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:17:cd:a0:c5:76:a6:83:6e:35:29:b5:fa:
e0:45:41:25:2c:3b:a9:a7:a0:04:43:85:b6:39:87:
bd:fd:f1:8d:28:bd:d2:d7:92:e6:f2:e8:f2:4a:69:
db:e9:6e:8f:a3:a5:74:1b:53:83:aa:2c:cb:06:96:
44:5a:71:83:04:38:9c:76:8f:81:3c:3a:57:bc:cc:
74:bc:e7:97:52:1d:bf:f9:b7:78:ad:48:31:51:fc:
51:cc:95:7d:b9:04:05:2b:84:b9:fc:a7:61:7c:20:
51:51:75:e4:d7:53:33:8d:93:08:9e:eb:57:41:d3:
ce:65:b9:92:1f:c0:cd:c7:99:a9:b4:f0:79:8d:45:
87:d9:6f:69:b2:c0:7b:c9:2b:34:d9:5c:1a:dd:59:
a1:2c:bd:4c:4a:11:a3:ac:a1:1b:3a:41:93:bc:e1:
09:8f:db:2a:21:d3:89:b2:a7:ab:c8:5d:d6:59:c8:
02:94:f8:f0:74:ba:6c:e1:96:69:1f:4a:0f:7b:7c:
a2:b0:7e:67:cf:5a:d3:b2:1f:2e:6c:88:56:da:c9:
f4:39:4f:93:b4:c8:29:58:50:93:93:75:f5:77:42:
f5:1d:e9:3f:c8:ea:b2:02:aa:82:8a:64:e6:67:11:
77:fd:b2:d2:4e:01:ab:ee:93:26:77:3b:e4:34:ee:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A7:B4:4B:A2:64:42:A1:0A:8E:6C:13:10:65:D2:9E:C7:9B:8F:45
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:eb:ac:97:be:87:97:d8:6e:46:98:2e:83:84:e0:e6:cf:a9:
b3:df:45:d5:8a:47:e3:09:a0:8d:19:ad:40:b9:64:57:f4:4d:
e8:97:58:ce:2c:9f:72:ce:06:d6:ea:cf:ab:12:5b:df:34:92:
c1:04:9c:9b:ce:a9:23:10:06:0d:59:8a:14:4d:d2:02:d5:3a:
cc:80:fb:11:72:2e:78:e2:78:f3:12:bd:d7:f9:20:1f:dc:e5:
90:c1:a2:ca:bf:e6:a4:00:70:f4:62:4f:c3:0a:69:c3:2b:4d:
bd:25:5b:59:c3:1c:d9:f4:da:bb:eb:84:88:d9:c7:91:1a:24:
31:6f:bc:a2:6e:ef:11:0f:f0:54:0d:00:71:b7:3d:43:95:33:
8b:89:4b:26:6e:4e:59:95:d2:36:9e:eb:23:1a:f5:dd:bd:ad:
79:97:d2:03:11:a9:66:09:b8:3b:64:17:b3:8c:34:a6:c3:18:
6c:fb:17:46:b7:57:40:07:f5:20:12:a7:39:f4:c8:3d:e5:cb:
13:31:89:8b:36:fe:78:d5:69:f6:cb:b5:13:44:88:1a:39:93:
a0:7e:b7:e2:fe:86:64:b8:43:aa:77:09:d7:75:07:82:95:e4:
a7:ff:58:8c:ab:4c:3a:c3:51:9d:6c:44:19:22:64:cc:6e:b1:
97:9d:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:44 2026 by rpki-client