Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: ArN18i6CuOOO8/ACsdabnYc8exJdFaugJzLC9wDi0Ug=
Subject key identifier: 2A:53:D8:93:33:86:48:3B:E2:8A:A2:65:90:05:B3:C8:05:58:BD:B0
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 019CAB6ACEE4E9766CE530FBFD205BB5445E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: p5WYh5WP4Yb6z0GRqKgMJi76k3KO/PZ5YIkQctgQJ8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ce:e4:e9:76:6c:e5:30:fb:fd:20:5b:b5:44:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=2a53d8933386483be28aa2659005b3c80558bdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:2b:c7:78:94:17:e6:73:dc:03:3a:be:79:
2b:42:fe:3c:2c:42:ed:55:37:37:61:fb:27:f9:2b:
14:35:85:70:20:14:60:b0:d4:d2:7a:79:45:3e:75:
fc:22:d7:f8:1b:b5:54:11:c7:63:f6:e3:e9:f7:9c:
37:e1:ac:d4:f6:5b:e2:26:80:ea:fe:d1:bd:fd:f1:
4e:97:18:04:d0:be:c7:f0:ee:bf:66:83:c4:e7:94:
54:3f:43:33:99:fc:4a:3f:2b:8a:48:b3:95:84:3b:
c7:ae:cd:1c:0b:69:65:ed:0d:b7:b0:52:09:26:cb:
fa:23:5a:a0:1a:1c:4d:2a:1b:3c:9e:3d:03:d8:07:
21:ea:de:ab:5c:d0:3d:15:b2:a4:34:21:a5:e5:5d:
b1:69:22:24:4b:66:18:5a:31:7a:76:b6:f9:0e:c8:
fc:a4:d1:38:60:da:38:cf:da:eb:8f:4e:e5:42:72:
a5:78:fc:10:8e:a9:54:2d:b5:dc:f0:25:37:84:62:
9f:6a:e6:de:4e:62:85:71:a6:20:ad:8a:a8:34:12:
09:53:50:49:5c:b7:24:6e:81:d1:ed:56:90:07:48:
1b:d2:ad:17:38:6d:c6:0b:6d:8b:8d:70:45:bf:22:
f5:7a:21:31:ee:f2:21:d3:8a:ef:c6:b0:1a:da:c8:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:D8:93:33:86:48:3B:E2:8A:A2:65:90:05:B3:C8:05:58:BD:B0
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:24:af:a2:4d:b7:72:d9:44:c8:69:93:b9:11:b2:9e:75:
bc:df:49:b4:63:80:5a:e9:85:bd:4b:3b:2e:d2:f5:cb:d7:00:
9e:82:29:30:32:91:cb:fa:a8:82:79:7a:9e:b6:8d:f3:d1:1e:
34:eb:70:64:96:84:37:c6:29:bf:d9:fc:ab:fd:c9:47:3d:1b:
28:a5:3b:ec:d1:4d:3f:b6:ca:27:dd:93:2d:b6:03:0c:48:6d:
69:ff:00:fb:d0:66:45:53:d9:26:ec:38:3b:c6:33:fc:59:19:
26:21:f9:87:b8:65:09:87:7a:cc:b7:64:10:0b:7e:39:11:86:
c6:97:07:41:10:cf:c5:c7:87:e7:29:b5:70:cc:75:31:c3:b1:
c4:c7:40:9f:86:6d:f4:5e:7e:55:9a:0e:bc:43:52:db:05:a9:
77:c4:7d:f9:92:c6:03:38:2b:00:58:1c:b5:53:41:3c:b4:b0:
17:e5:87:9f:ba:94:7c:9b:b2:7a:42:e9:81:5b:c2:9b:3d:96:
6a:14:78:90:c6:4a:da:79:02:84:d5:a4:44:b2:cb:a2:fc:53:
80:00:16:62:65:b6:c0:32:98:85:22:35:a4:8d:69:a9:90:cd:
c5:46:42:24:76:36:9f:4a:c3:5a:a1:65:da:3f:d3:33:9e:4e:
92:ed:02:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:31 2026 by rpki-client