Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: q4U31/ckD8ZnfF86CZkPwIpMXIRKNTMESceZpXxsPXA=
Subject key identifier: 14:BA:DE:B0:9E:CE:E6:37:B9:F5:05:02:AC:82:57:0A:0C:59:77:8A
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019CAF10CA786C38BA71493A35F800BF5CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 0273
Signing time: Mon 02 Mar 2026 15:00:38 +0000
Manifest this update: Mon 02 Mar 2026 15:00:38 +0000
Manifest next update: Tue 03 Mar 2026 15:00:38 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: WVkGtt/YNvXSGx+jMPl+mC7TYEy9MiqzxVsQMD0mfLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:ca:78:6c:38:ba:71:49:3a:35:f8:00:bf:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Mar 2 15:00:38 2026 GMT
Not After : Mar 3 15:00:38 2026 GMT
Subject: CN=14badeb09ecee637b9f50502ac82570a0c59778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:1e:68:6b:70:33:23:69:1d:f8:13:62:f8:
79:d9:25:d2:ad:7e:af:40:28:69:3d:12:4e:d1:31:
4b:c1:28:eb:f6:ae:5c:b4:90:dc:d6:4f:30:dd:e6:
44:95:1a:58:09:3b:1e:53:69:fb:c0:f6:bc:4e:f3:
5d:f6:6e:0d:f8:75:0c:50:e3:1d:0e:5d:f6:55:3e:
a4:d9:f8:7e:98:84:9c:b0:f3:2d:16:1d:25:57:f2:
49:ed:68:c5:a9:ba:13:61:20:af:d9:b9:91:90:15:
fe:8f:f4:65:2d:af:2a:a5:4e:02:b3:eb:d1:76:84:
23:47:4e:b9:18:4d:1b:a3:8f:82:9f:94:25:46:5d:
a9:c5:f0:3c:46:4b:ab:6c:5a:5e:b0:e6:b5:8d:59:
44:da:6e:b2:69:61:f2:0f:8b:d5:c5:76:9f:44:60:
c1:7f:86:cb:ae:a4:ff:82:de:45:ad:80:0f:7e:88:
1a:4c:61:8b:76:a6:43:26:82:21:6e:d0:cf:2b:48:
d7:a1:1d:a2:6b:68:39:cd:35:32:60:0e:e6:72:fb:
41:bf:7d:86:d0:0a:c1:51:8a:a6:f2:26:55:2c:ee:
d9:80:27:3a:64:15:66:34:21:6a:55:ea:72:5e:bc:
47:17:ab:5c:32:2b:50:b6:14:90:cf:39:3d:86:3f:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:DE:B0:9E:CE:E6:37:B9:F5:05:02:AC:82:57:0A:0C:59:77:8A
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:90:e5:e8:56:e1:52:0c:11:a7:9b:00:28:03:55:29:28:e4:
30:24:80:fb:78:ec:21:28:2b:ab:6e:05:3f:51:1d:b7:af:c9:
24:95:97:73:65:3c:15:90:14:26:1b:5f:ec:9f:f1:d8:6e:b3:
de:88:e5:09:cf:77:7a:e2:c2:96:94:76:d7:b4:9b:28:4f:12:
e9:c5:43:c1:20:58:6b:95:3d:31:b2:8d:e1:5f:7e:e6:38:8a:
18:c4:86:25:cb:d2:28:eb:25:db:6d:ee:0b:0e:95:b9:c0:97:
38:93:77:04:02:7a:56:97:f7:fb:b5:57:bd:c1:45:b0:ff:58:
5d:c1:4e:f5:88:9a:82:bd:b8:b0:2f:36:c4:a1:ae:59:6b:22:
0a:05:16:83:d6:49:32:6a:9b:2d:7e:82:b6:60:e1:f5:b5:0d:
69:41:1a:7f:b5:7d:37:9f:89:d3:5f:ca:7a:e0:8e:5a:93:aa:
78:eb:ac:64:a0:e0:19:8e:b6:af:d9:43:31:ad:5d:c0:38:30:
e5:f1:69:1a:15:b2:4b:a0:47:c6:79:6c:f7:87:5b:ce:59:03:
98:bf:63:98:23:c0:de:7c:a0:73:e6:77:70:6e:2a:3e:68:96:
56:73:0a:44:0a:14:58:94:e8:f5:22:32:c6:fb:fc:82:9d:c7:
cf:28:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:16 2026 by rpki-client