Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: a8fIkgCEonA/fHNOQ1ltv2h0c0C4TcBV6JLBii8B2sE=
Subject key identifier: BB:D8:E0:4E:15:DA:24:C3:19:E7:4D:E4:D7:89:66:F2:52:4D:02:E8
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019CAB33F4C67ED923D75D0D99835F5E5836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:00:34 +0000
Manifest this update: Sun 01 Mar 2026 21:00:34 +0000
Manifest next update: Mon 02 Mar 2026 21:00:34 +0000
Files and hashes: 1: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: X29SLF7yFiAwwewsE+6LBi9SIG0NS0MsYcsAJaVF0c4=)
2: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (hash: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f4:c6:7e:d9:23:d7:5d:0d:99:83:5f:5e:58:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Mar 1 21:00:34 2026 GMT
Not After : Mar 2 21:00:34 2026 GMT
Subject: CN=bbd8e04e15da24c319e74de4d78966f2524d02e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:2b:c7:e3:89:cb:e9:de:2f:14:01:c3:4d:
a5:92:f8:37:f6:3e:d9:69:e5:c9:b1:13:df:ee:18:
36:3c:7c:b3:80:bb:01:ad:7e:08:55:03:67:25:0e:
6a:2d:8c:2f:08:5c:95:c6:0a:00:95:a0:4f:08:66:
04:13:00:2f:a4:fc:62:a2:78:06:02:ff:67:0a:3c:
a7:1d:84:56:b5:94:f2:59:f7:87:b4:77:fb:de:b7:
71:3d:68:dd:65:16:4e:d3:6e:0f:c6:88:81:77:28:
b1:c3:f8:c6:c6:42:46:71:ca:ef:35:eb:39:a0:f1:
13:ee:62:90:c3:bd:98:b1:76:7b:cc:b3:16:52:f1:
16:9b:eb:1c:6e:a8:a4:96:27:05:2f:3d:69:2d:33:
6d:00:72:a7:be:4c:12:66:4b:86:b7:7b:3b:7c:85:
23:e7:33:95:ca:97:97:47:4c:42:8b:ff:61:12:b5:
96:b1:cc:d6:6a:db:62:7e:74:be:36:47:88:e6:fd:
f6:d0:ff:85:b8:53:46:ed:7f:3a:ba:bc:7b:44:18:
33:88:b6:69:1b:74:d2:b5:97:54:02:b0:20:44:6b:
af:29:39:7a:8e:1d:a7:de:ea:4f:31:bc:85:37:2c:
37:62:db:82:68:18:c8:44:3c:51:49:e3:3b:28:2c:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:E0:4E:15:DA:24:C3:19:E7:4D:E4:D7:89:66:F2:52:4D:02:E8
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:61:76:67:82:d0:ef:73:6b:44:31:e1:16:c9:7a:81:66:73:
08:83:aa:2b:3c:31:97:08:bd:30:1f:e2:30:18:02:02:c3:93:
8e:d1:8f:b3:25:23:9c:f5:e7:53:cc:ef:39:ae:0b:ab:6e:0e:
42:0e:18:6b:9a:70:fd:9d:ac:91:3a:9a:9c:cc:90:17:4b:0a:
7d:25:b9:94:27:db:32:b0:fe:78:1a:62:02:e4:84:15:d1:4f:
36:8f:24:9e:0c:42:c0:55:5f:b7:5b:a8:69:37:1b:8e:4e:0a:
69:2e:a9:34:14:10:10:b1:f3:11:1a:e9:82:52:0a:e8:c9:c2:
3a:5d:93:fc:b2:97:f7:e1:12:f7:75:e8:65:0b:31:52:27:4e:
fc:d5:cc:79:46:9f:01:eb:3a:d9:f2:06:b7:57:ed:ae:d6:c9:
15:aa:e1:9a:99:c0:99:36:d1:68:6d:2c:82:b5:35:da:bc:39:
7f:45:9d:0d:a5:62:1b:72:7f:ea:87:f5:ef:ab:5a:dd:a3:73:
70:5f:a3:ea:19:ea:a6:23:3e:01:76:0b:9b:79:0a:e6:4e:3b:
45:0d:7a:ff:7c:21:00:41:e7:ce:3f:47:db:b0:93:91:06:ad:
c6:ca:e9:e5:2d:0d:e1:e8:6e:86:9d:a7:81:13:49:22:e4:39:
a4:ac:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:46 2026 by rpki-client