Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File: JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier: TiKgeuWOvOpFzjV83M34cPiXEB4BLmtz6Yo2PLIXAj8=
Subject key identifier: 67:B0:0E:DC:97:62:00:88:8E:F2:37:58:AA:9D:97:F6:39:B0:A6:6A
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer: /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial: 019CAA584F8DC4E09A745759798D6C169241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: 1-etkEpJT5huTCkvp4nk0dydE9KA.roa (hash: eid4ChJhHIbdTu3ltYjDcXJHFhgZsYu7s5rAP/A4Ugo=)
2: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: p2JXKLdv4qWK/hkkPPhO44XqkQHFmpvDntV+NUBgZxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4f:8d:c4:e0:9a:74:57:59:79:8d:6c:16:92:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=67b00edc976200888ef23758aa9d97f639b0a66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:32:7d:5a:54:d8:18:60:4c:85:93:97:58:
89:13:e0:46:c9:30:b7:0b:ab:28:39:02:3a:f9:ce:
66:c6:ce:5b:70:97:a5:38:52:a8:bb:0c:2b:b0:d9:
85:0e:f0:90:aa:72:51:bb:f3:3d:60:30:d9:dc:13:
9f:89:5d:b0:93:46:ef:ef:5d:cc:bd:35:8d:6c:fd:
73:a5:99:3a:4d:c2:70:5c:35:e5:7c:90:e5:3b:4f:
83:98:64:3a:8f:cb:15:7d:50:4f:09:48:ba:82:b4:
4b:3d:50:41:97:3f:e9:5c:50:6f:25:02:0c:95:9e:
5c:5b:d7:c5:2c:35:f5:84:93:29:1d:5f:ca:02:90:
90:e4:3c:2d:d1:40:6f:dc:de:94:14:df:3f:86:8d:
9d:e3:ed:bc:af:db:11:27:1d:39:e4:c3:0b:d0:d5:
30:d4:98:37:5a:3d:3d:59:fe:c4:c8:21:cf:e4:d4:
d0:68:7a:09:4a:d3:e6:4e:8f:62:16:98:16:32:c1:
8d:e5:c9:bf:d8:61:52:ea:9a:3d:1a:d3:9a:ae:92:
39:fe:ba:45:9c:39:07:74:96:a5:55:d1:3e:1b:0c:
d5:86:df:06:b5:b0:79:6a:79:f8:24:37:74:77:d1:
83:49:4d:69:0f:57:30:58:fc:34:bb:d2:01:14:fd:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B0:0E:DC:97:62:00:88:8E:F2:37:58:AA:9D:97:F6:39:B0:A6:6A
X509v3 Authority Key Identifier:
keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3d:4c:0a:a7:ac:28:12:a1:30:79:bc:82:9f:01:f8:10:e2:
9d:77:5a:2c:77:fa:9c:23:52:c3:2a:c4:42:8b:d4:f3:ca:f4:
80:82:d8:2c:cd:77:f3:e6:c1:4f:10:b9:9a:92:22:6d:fe:15:
e5:f8:ce:04:42:54:a7:28:f5:83:46:77:aa:8f:d2:d5:fc:b4:
00:c2:20:8e:36:dc:56:6c:a7:18:2e:5a:92:b2:3d:34:34:32:
70:48:d8:88:cf:d6:a0:e8:ad:8f:8f:f5:fa:c5:18:f4:90:84:
66:e4:92:78:0f:d1:9e:97:86:27:ce:63:73:33:2b:6e:bf:ef:
77:70:9a:bb:c2:cd:f9:34:1c:ef:02:2f:ce:5c:30:90:0e:7c:
12:70:63:20:92:20:ab:89:7c:39:94:e5:f6:a4:c7:4e:2f:34:
a2:76:50:25:d9:36:e3:40:61:ad:84:8e:fc:39:e4:ac:8f:f9:
06:b6:a0:bc:5c:e4:dc:cf:87:f6:49:74:36:bf:c6:a0:2f:e2:
aa:98:64:80:5c:dc:72:2e:32:0f:c5:a2:b4:21:39:49:5e:c1:
e8:dd:d7:aa:1f:f5:58:19:96:23:38:d2:08:a0:aa:27:9b:a1:
b9:60:bd:c7:29:60:64:cf:3b:8d:02:2f:22:d4:cc:fd:97:14:
63:83:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:33 2026 by rpki-client