Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: Qw0QvhDFLdkBGehBqSYKimFJMc7SJlisSOu0ixyXdHw=
Subject key identifier: 41:28:30:FD:4D:AA:02:C8:FB:E9:D8:43:54:63:F2:9A:C0:5D:8E:A3
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 019CAA586A1D282E7E14BC32E2EF438E8F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 1593
Signing time: Sun 01 Mar 2026 17:00:46 +0000
Manifest this update: Sun 01 Mar 2026 17:00:46 +0000
Manifest next update: Mon 02 Mar 2026 17:00:46 +0000
Files and hashes: 1: 1MewjKs7oZbPQCWXkDdeqf-hRUI.roa (hash: ZIOY5qx7Rihwq5CYw6fFGk6ypYaqCmJubtJXiapIpl8=)
2: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: CeUqbvx5LNzu9sal4Kfi0ZkbRLk/KP7k5xJ9B6BZI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6a:1d:28:2e:7e:14:bc:32:e2:ef:43:8e:8f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Mar 1 17:00:46 2026 GMT
Not After : Mar 2 17:00:46 2026 GMT
Subject: CN=412830fd4daa02c8fbe9d8435463f29ac05d8ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:3b:3f:61:9f:50:47:63:6c:84:ad:48:cf:
f4:47:e0:75:2a:f8:38:f6:ed:ba:53:7e:30:35:f1:
c6:8e:e6:c2:c1:a9:3c:ff:2e:d0:c1:9c:66:b8:77:
6b:da:64:5f:3e:9e:8e:f0:8e:a7:4d:5c:38:8e:7c:
36:e0:3e:b2:6e:19:d4:a1:76:ba:ff:7c:06:fa:2b:
47:9c:ae:22:ca:36:42:31:c7:e2:de:e6:89:32:bd:
ae:ac:41:a7:68:83:5c:b9:47:db:d2:8b:f8:f9:fa:
03:2f:fa:06:a3:fa:32:9b:47:96:43:d2:4a:01:e5:
d3:7e:5f:0b:0f:82:60:7d:84:82:b1:12:15:20:02:
f3:33:6a:65:13:08:63:9f:2f:01:5b:88:e0:2f:a4:
38:19:21:c5:06:44:2d:d8:5f:40:12:de:0c:d6:90:
00:03:a8:23:8b:ab:f6:12:88:af:23:bc:3a:a4:8f:
37:96:ec:69:57:f3:aa:f6:8f:5d:51:0b:60:01:3b:
67:6f:de:e2:9b:39:21:1f:a3:6a:3a:52:8e:74:da:
3f:32:4b:4d:b2:22:76:79:65:17:06:a0:4f:c5:28:
9e:d1:ef:15:f9:a2:c6:ba:ee:a4:58:04:a7:23:a0:
72:19:d4:bc:cc:d9:53:0b:54:3a:25:10:14:dd:c4:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:28:30:FD:4D:AA:02:C8:FB:E9:D8:43:54:63:F2:9A:C0:5D:8E:A3
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fe:94:6e:51:f9:5b:16:5e:a5:9b:76:97:48:dd:ba:a2:85:
52:ee:27:6f:cb:6e:90:30:0c:25:55:42:c4:96:8c:a0:e9:ec:
2d:d3:d2:b1:61:e0:c7:df:f5:73:1e:99:00:f2:37:14:53:f5:
cf:67:0d:77:6e:49:8b:1f:80:3f:ba:f9:e6:af:df:b7:13:f4:
77:87:6f:3f:49:cd:f6:77:31:d3:5f:39:54:c1:00:29:d5:c1:
86:de:44:bc:14:83:36:d7:9d:13:4d:61:d4:8e:1e:54:11:2a:
a5:62:48:ee:78:d0:ef:16:22:42:7f:6c:95:2d:fa:f0:5b:6b:
09:c8:38:a7:e7:65:c5:c8:ec:45:08:31:b7:50:11:f4:43:59:
b9:b8:df:15:11:2a:1a:a3:cd:6e:cc:30:8d:e2:d2:b0:b5:2a:
3b:0d:ac:c8:2d:02:73:ff:27:2e:06:b4:3a:2b:66:42:ff:55:
ce:5b:70:bd:b6:c0:53:ee:91:4f:0a:7f:bb:97:d3:a4:1b:c1:
b1:81:71:aa:7b:ea:b0:83:4b:9d:df:29:34:c1:6f:b6:e6:d1:
f9:84:eb:8e:60:54:37:97:43:41:69:34:5d:8d:13:ee:42:38:
b1:7b:0a:43:1e:c8:d2:48:af:a5:01:b7:cb:e1:ea:d0:0b:a1:
64:4c:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:04 2026 by rpki-client