Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: OyVW1VcGuwCSuppkMvRkvzRy4Dx1PTc0/U+As+RwpJM=
Subject key identifier: 36:C4:A5:BC:25:04:9D:EC:A2:34:D6:5E:D0:94:21:B0:4A:2F:2A:C3
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019CA8D79DCD46A5D5C6FFB8AE40C1D4B878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 10:00:28 +0000
Manifest this update: Sun 01 Mar 2026 10:00:28 +0000
Manifest next update: Mon 02 Mar 2026 10:00:28 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: /C9vlur8HWHnItQ+b6PGyexd8u7tG8RpHGTHKiLlkrE=)
2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:9d:cd:46:a5:d5:c6:ff:b8:ae:40:c1:d4:b8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Mar 1 10:00:28 2026 GMT
Not After : Mar 2 10:00:28 2026 GMT
Subject: CN=36c4a5bc25049deca234d65ed09421b04a2f2ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:7c:70:a9:6a:05:03:f2:4c:c0:98:50:8b:
7b:0d:16:94:4f:f1:5f:41:e3:bb:97:a9:20:37:0a:
4a:14:fc:75:34:d9:09:fc:39:06:d4:e7:59:7f:e5:
35:89:bf:69:52:f8:37:42:a7:09:2a:75:69:15:ba:
a4:7b:2d:a5:20:67:6a:78:20:b0:96:7c:18:29:c2:
df:71:3a:ba:ff:46:b3:02:66:ed:fb:22:be:d1:25:
1e:8f:65:bc:a0:63:80:3d:f5:6f:c6:8d:86:c5:e3:
45:2c:00:26:7d:23:e9:de:c4:16:d1:42:a7:9f:30:
0e:5b:a9:73:f4:ce:65:0b:eb:af:dd:72:c1:14:84:
ce:b9:13:3f:39:28:b7:b6:cd:94:c1:c7:d6:f4:cc:
11:22:ba:c4:78:9d:cd:d5:b8:54:73:b9:3f:33:d7:
5c:d4:c3:54:1d:d5:d0:44:1a:75:83:df:f8:9f:cd:
f9:25:03:04:4a:d3:71:45:c3:90:25:0e:fc:f8:fd:
d7:d6:e4:fd:7d:7a:a3:d3:8b:af:d1:5f:ff:de:f5:
29:9c:07:12:0b:a5:dd:8a:3c:c3:ce:ab:ba:ea:68:
c5:e8:8d:44:3b:9c:07:0c:f5:ec:03:62:c9:18:55:
d5:a5:79:52:5b:a1:a0:b1:c4:09:d4:67:23:39:4b:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:A5:BC:25:04:9D:EC:A2:34:D6:5E:D0:94:21:B0:4A:2F:2A:C3
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c5:71:7c:fe:d0:16:2b:b1:27:b5:e8:d1:67:78:5d:2d:a6:
f9:b3:46:1d:22:5a:86:f2:51:06:96:db:c5:23:e3:ee:66:d4:
47:f4:74:61:4e:6f:93:1b:71:68:c3:bc:20:6a:f5:21:e1:db:
06:7b:9b:9d:33:d7:41:94:a6:38:8e:db:71:63:80:6f:c9:87:
6c:45:5c:1c:bb:e6:2c:88:87:da:a1:3d:de:65:19:99:bc:41:
9e:f1:77:d0:4e:6d:29:17:0c:8b:15:d9:57:42:8b:32:da:88:
bc:7d:db:00:bb:e9:25:15:96:8a:74:85:0a:1f:45:6c:a6:b4:
3b:1c:f7:12:08:ba:51:6b:e6:be:4b:33:f8:77:d5:47:a2:78:
3b:1f:30:28:ef:94:aa:54:85:bf:17:69:44:0b:5a:71:07:15:
f5:b2:f4:8a:c7:48:69:4d:fa:2e:5c:0d:f1:8e:7f:02:ad:6d:
5d:2b:ed:d5:33:a8:4c:2d:4d:aa:90:e0:89:ed:a9:61:51:dc:
99:38:7d:f8:cb:cb:49:fd:e0:b5:1e:f4:8d:3c:dd:ae:4e:24:
a7:04:b2:0b:d4:72:cb:85:0b:af:3c:3a:c9:c8:6c:62:90:cc:
56:9d:45:99:0c:ca:a3:bb:59:b7:5f:1b:f1:e4:2e:2e:00:51:
f2:07:f9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:49 2026 by rpki-client