Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: 6CwfVoRX/tELA/sZ5uPhhxW1zi+wQzPGEiQ8U/BLrZ4=
Subject key identifier: BC:9A:98:A7:9B:56:B9:FC:44:CE:68:59:01:2E:3A:6A:57:C4:12:83
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 019CA9B38128C344DCE88C921886A9E67F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 1070
Signing time: Sun 01 Mar 2026 14:00:39 +0000
Manifest this update: Sun 01 Mar 2026 14:00:39 +0000
Manifest next update: Mon 02 Mar 2026 14:00:39 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: v0uN2GUHmAfnXC+AdFmfbbs5w1FxwGOy+Mj/szuRTwE=)
2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:81:28:c3:44:dc:e8:8c:92:18:86:a9:e6:7f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Mar 1 14:00:39 2026 GMT
Not After : Mar 2 14:00:39 2026 GMT
Subject: CN=bc9a98a79b56b9fc44ce6859012e3a6a57c41283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:4a:ce:1c:15:a6:84:f7:a8:3b:5a:81:1c:
7e:5b:c2:62:e3:cb:e3:11:9b:c9:b9:b1:18:88:f5:
90:9e:2d:98:36:f9:31:7e:a8:d3:11:1d:c7:a2:d2:
79:67:77:f3:fd:48:fe:a8:35:87:a1:fd:48:c5:cd:
66:ac:98:65:b7:1c:d5:2c:b5:51:b5:ec:17:c2:52:
53:4f:90:15:51:63:37:19:86:bc:71:49:c5:61:e8:
0f:69:5a:58:61:01:b6:53:e0:8d:3a:c1:db:42:c1:
32:e0:fa:0f:f0:ab:0a:11:2a:41:68:bd:96:23:3c:
51:5a:b4:f6:d6:54:53:6e:32:12:47:b5:f4:6e:cc:
ae:83:b1:a5:b9:3e:99:5f:25:bf:63:78:71:bf:1c:
6b:2a:ef:73:2a:67:94:b7:2e:e5:6a:68:f2:96:e7:
04:20:96:18:1b:81:83:ce:aa:72:c0:09:5c:b5:d1:
37:b4:84:3b:4d:52:8b:88:ae:6f:9c:de:e3:35:57:
97:9b:99:17:57:8d:88:81:0a:8f:0a:44:ab:ed:59:
c8:cd:bd:f6:ef:d6:ca:be:a9:04:8a:4a:cc:b1:3c:
00:a3:5d:72:76:bd:9a:54:99:28:1a:c3:e5:49:5d:
5f:7e:59:2d:e7:9c:8f:a8:76:e6:ac:0e:5c:89:91:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:98:A7:9B:56:B9:FC:44:CE:68:59:01:2E:3A:6A:57:C4:12:83
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:51:ef:dd:19:46:f0:39:ac:ca:b8:f0:f8:25:a7:b6:fc:
7f:7e:a2:bf:a9:5d:9d:ae:50:1a:88:f8:6a:e4:41:13:7e:d5:
4f:c0:a5:39:d0:7b:16:bf:c8:bd:39:91:ad:ac:4c:91:da:ba:
71:34:10:81:31:3b:67:5a:60:1d:a0:1e:69:e9:85:28:8d:9b:
99:16:de:a7:b7:04:af:80:87:d1:98:6d:3f:13:b0:80:d4:df:
93:7e:35:0c:e1:e7:2f:67:06:a2:de:a6:2c:b3:5c:a5:69:02:
51:db:af:01:68:27:d6:d8:67:33:2a:33:dd:f8:10:ac:d5:a4:
95:14:87:15:e0:80:7c:5c:8a:55:59:23:ba:3e:98:8d:0b:55:
4f:c7:00:e7:b5:84:34:0a:34:49:4f:2d:e9:9b:33:be:ed:65:
2b:5b:4d:31:ea:a1:89:f9:b4:5b:d2:6e:63:00:f7:77:64:4e:
62:47:58:02:e5:ec:af:5f:c6:bc:18:36:3b:7c:d9:a4:bf:31:
1d:03:8c:c0:9e:c2:46:3f:00:59:05:2a:2d:2f:9b:46:b0:3c:
c9:de:4f:d5:3e:9e:0a:a8:2c:8a:bc:3c:39:3a:09:4c:93:95:
16:a9:8d:bd:25:83:ba:d6:00:d8:56:2e:33:3a:e4:d8:11:3f:
b0:34:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:05 2026 by rpki-client