Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: 2PNkdCymPUoSBfmWrpzqD2bfpi+Rxtx3jx8YHUDTj8Q=
Subject key identifier: 9C:F7:6D:FB:F4:DE:5A:D5:0E:FE:D7:E7:B7:52:A6:A1:DB:55:BE:C4
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 019CAA58319C4A166FD0E9A2FD47E716B535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 1328
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: 2nPIRP72Jf5YjvsBZiLCnmbp-p8.roa (hash: Yz/8CGjOJYnOasszn6ZNY2vs5w5ux3r0g0CLHgZyjdU=)
2: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: u73aGauT6wgvP4DssllLCaZ8VxdZtqCJK9Fpk2tZuY8=)
3: LOJidQiFIuwqnumT6oMuEmIp5LE.roa (hash: sVHheWyLptBtdCb64wvygyXOjpNHZkJcRj9kxNMP3GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:31:9c:4a:16:6f:d0:e9:a2:fd:47:e7:16:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=9cf76dfbf4de5ad50efed7e7b752a6a1db55bec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:4b:f1:ec:2d:a5:3a:5f:2d:57:a6:58:dd:
46:cb:72:35:1a:78:fd:57:76:aa:21:1e:e1:d8:54:
ce:d8:3d:70:5d:0f:46:c7:86:ff:9e:81:f6:0e:56:
52:d7:07:ee:bc:1c:46:c5:fd:2f:8e:0b:71:d8:7b:
22:8a:29:2b:d2:bc:8a:6f:18:06:d0:ae:08:b4:17:
13:31:0b:da:52:cb:ec:82:28:b3:4a:7f:a2:d4:d5:
eb:03:89:1f:01:81:3f:32:af:b5:0c:91:0c:a3:1a:
69:e9:bf:99:15:97:95:4d:f6:6e:c2:3d:7f:5d:fc:
3e:cb:7c:7c:ce:ff:f4:bc:da:fc:64:dc:a5:ab:76:
b0:05:1b:f0:c5:a7:9a:9e:7f:d4:6b:6b:b0:b4:d1:
c0:bb:89:0f:a5:5c:1a:0e:40:78:71:04:d8:03:ad:
3f:c1:77:8b:9d:a8:0a:cd:72:11:77:d0:66:2f:70:
46:79:c8:37:78:da:b5:78:8f:e9:fa:91:fe:93:36:
4e:ef:78:3a:7d:d0:ca:61:a8:d3:7e:77:6e:19:4b:
e3:28:4e:be:60:75:e1:30:80:9a:2e:90:79:a8:9a:
b5:fc:1d:4d:ad:1a:99:07:73:a6:e2:45:68:4e:a8:
b8:04:70:fd:7c:40:e5:d0:de:ba:7d:0e:8e:7f:14:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:6D:FB:F4:DE:5A:D5:0E:FE:D7:E7:B7:52:A6:A1:DB:55:BE:C4
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f5:18:9e:1a:1e:e0:4b:ba:3a:70:81:42:e7:bc:af:61:ab:
a6:c7:d9:dc:59:96:b0:72:0d:7d:84:cd:1e:9b:df:29:f0:ea:
d5:fc:64:cc:53:a0:dd:59:fc:96:50:fb:e8:34:61:49:9f:d8:
57:c0:ac:11:87:2e:7c:27:b3:47:e1:1b:aa:2c:6c:80:b2:33:
32:00:fa:85:47:f5:0a:16:4d:28:3d:83:87:bb:26:16:bb:16:
7c:ef:cb:14:76:45:0b:d3:8f:ff:c9:88:54:b8:9a:2d:ef:65:
a8:2e:57:73:e8:4b:3e:39:8d:b6:5e:05:e0:61:ad:99:56:eb:
19:3f:ce:4c:02:d8:ef:ec:3e:43:fa:63:c1:bf:c1:b7:89:6d:
7e:3a:af:bf:dd:6e:41:e7:f6:58:5c:28:f6:3d:58:1d:0d:72:
6e:49:3c:1a:45:df:7f:38:1f:74:5e:38:0c:07:29:c9:50:3c:
f3:17:34:10:ff:57:ce:99:b1:9b:db:18:2b:64:3a:37:ac:ec:
d2:9f:c2:2d:f3:4a:db:81:04:28:62:7b:d0:68:de:17:13:99:
eb:d3:fe:27:5a:53:6a:7f:ef:e9:51:59:7c:7b:f5:ce:bd:15:
49:5f:79:fc:2a:4b:da:1c:ad:de:b0:0a:92:02:7a:c8:0e:49:
e5:38:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:55 2026 by rpki-client