Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier: 1bJMJab39CAtvUE9j1bwsBeE/K5sP8oUEiANH69Z7vg=
Subject key identifier: C0:C0:04:17:7E:3C:94:6D:19:53:36:D7:0F:24:95:E3:47:A9:26:4C
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 019CACB4729D2D085660B26163A7B78C4253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number: 1391
Signing time: Mon 02 Mar 2026 04:00:32 +0000
Manifest this update: Mon 02 Mar 2026 04:00:32 +0000
Manifest next update: Tue 03 Mar 2026 04:00:32 +0000
Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: PA7JJk7XcPfm8MHUYVie3qiQxen9g4fX74EULhXMtik=)
2: xwyt0wXVsqA4eESlSVJR3Jxbi3E.roa (hash: RH1WTDRs/8Vp6UylYLIYMotB4x6HLaJVltA1rEKfSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:72:9d:2d:08:56:60:b2:61:63:a7:b7:8c:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Mar 2 04:00:32 2026 GMT
Not After : Mar 3 04:00:32 2026 GMT
Subject: CN=c0c004177e3c946d195336d70f2495e347a9264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fa:89:dc:c1:22:44:7b:bc:00:77:60:f6:6e:
be:f3:4b:f2:1c:f0:dc:37:a4:ba:bb:02:0a:c7:db:
12:39:3c:b3:75:dc:23:27:a2:04:fa:e3:7e:df:d5:
4c:a6:b1:03:5f:c1:55:07:35:9d:cd:f7:77:23:a8:
d2:55:93:10:7d:be:a0:33:9d:70:4b:77:b0:59:fe:
63:76:c7:6f:5e:cf:50:44:fe:7e:46:3c:4f:4d:b8:
d4:ba:63:8f:ef:cf:ff:d9:6a:5c:df:c9:d5:a9:70:
32:e5:98:4e:fb:26:55:40:77:ea:65:b8:65:9b:eb:
cb:b8:07:48:06:74:a6:df:e1:fa:35:89:d5:6b:27:
d1:de:6a:1f:d5:0e:ed:13:86:9e:da:f7:a8:3e:68:
24:26:75:24:6c:96:89:1a:bd:5a:06:28:b7:68:49:
ff:06:70:74:e6:40:4d:af:98:2b:67:f7:ba:a4:aa:
6b:28:41:96:62:22:31:d5:8a:4f:0c:2a:39:81:e9:
39:5b:57:ed:27:57:39:a9:da:b7:ce:40:14:f9:63:
99:1e:15:d2:07:3a:68:ab:85:87:07:99:63:d6:0c:
9e:8b:de:08:ac:65:05:dd:23:29:d3:9e:86:03:74:
71:f6:71:32:76:2a:83:07:94:4a:7a:7a:4b:06:80:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:04:17:7E:3C:94:6D:19:53:36:D7:0F:24:95:E3:47:A9:26:4C
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d2:05:1f:bf:e5:7d:ab:c5:39:cd:6e:2e:81:9f:95:69:1b:
6e:21:03:84:61:9a:fb:f5:32:3f:3f:28:9e:0d:ad:4a:ad:b4:
45:f0:1a:33:4d:67:3c:9c:88:b2:1b:c0:04:df:ba:53:04:05:
70:11:8b:5a:79:f3:fc:40:fb:cb:c1:19:5d:b8:89:08:bb:f7:
ff:03:da:28:6e:a5:2d:0a:cd:41:60:1c:fa:df:d5:af:ff:3b:
88:f6:24:1e:95:42:db:48:30:47:99:24:71:0a:ab:0d:a2:c2:
16:25:f1:2e:6a:83:8a:e6:24:b4:22:8c:c6:84:a0:57:ea:42:
46:0e:d7:17:72:ec:31:f1:9d:b8:0f:ba:6f:74:92:2b:92:91:
f2:49:de:4e:95:34:f1:4c:e5:ca:e1:0c:af:34:64:8e:16:5d:
d8:47:3e:e4:11:86:4e:e2:59:57:60:26:c5:9f:a9:fb:c7:a7:
1f:ad:a2:c8:a0:58:c7:e6:a8:5c:b0:2e:9c:c3:aa:09:ea:94:
cf:e5:1d:c4:13:5c:b3:b2:ab:6d:95:f7:c6:fd:b6:b3:80:7a:
fa:98:fd:f6:d8:b5:4e:5e:ba:d5:1e:99:39:82:e0:3d:2e:d8:
24:29:11:64:b2:b8:6c:9c:59:63:33:be:44:01:43:48:82:d0:
c2:62:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:24 2026 by rpki-client