Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: IZ0+qEihQboBugQ+4nOGSgForBFgvLStZYGTcQVenTY=
Subject key identifier: 9E:0D:E4:22:D7:F7:E8:4D:47:7D:60:2D:79:1B:93:F1:64:E2:EB:58
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019CA94657B172FC3626273D45A714C1DEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 12:01:25 +0000
Manifest this update: Sun 01 Mar 2026 12:01:25 +0000
Manifest next update: Mon 02 Mar 2026 12:01:25 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: 24D9HxK8MUPMPJouD75kgarQHgEl+mfxd+mWyiYKa20=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:57:b1:72:fc:36:26:27:3d:45:a7:14:c1:de:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Mar 1 12:01:25 2026 GMT
Not After : Mar 2 12:01:25 2026 GMT
Subject: CN=9e0de422d7f7e84d477d602d791b93f164e2eb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:3a:e2:37:82:4c:50:54:d3:4f:84:ef:2f:
88:b2:61:61:50:2e:33:76:da:98:b7:78:81:28:69:
5c:ea:3a:2a:ec:f1:69:75:c1:ff:5c:65:46:30:0e:
2f:79:5b:36:40:cf:b9:a2:57:9d:8c:a4:08:99:47:
39:4b:f5:c9:da:99:e0:db:87:a1:a9:0a:5e:e5:7b:
f6:1c:fa:de:61:c7:43:d4:3b:79:0f:e9:bf:ea:f6:
13:91:31:b7:f8:d8:be:4c:8b:98:84:0e:ef:5e:f1:
1d:2d:f7:73:05:8e:8c:6e:c2:9c:98:b9:da:cc:23:
63:bf:1f:45:60:4b:68:93:55:92:f7:91:6e:a8:07:
e7:98:c0:bc:0b:ff:09:b0:47:97:e4:4f:fb:c7:8f:
ed:4f:df:40:13:62:90:e6:b4:62:b8:f1:52:b7:2e:
41:70:8f:6d:3e:f7:96:6c:2a:92:e3:af:07:d8:cd:
0d:d3:e0:18:91:8e:d1:77:b5:b0:db:72:16:e2:a7:
16:6d:28:b5:65:a2:96:69:3f:43:b2:2c:8a:9f:80:
60:b3:a9:2a:48:47:7c:e4:9b:0b:5b:5a:c2:94:2a:
cd:eb:af:b9:46:4c:17:c0:85:82:c6:df:c0:ed:e3:
4a:ab:39:ec:f2:69:fe:e0:0d:c5:21:2a:4a:08:b4:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:E4:22:D7:F7:E8:4D:47:7D:60:2D:79:1B:93:F1:64:E2:EB:58
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:6f:7a:52:8c:88:88:1f:e9:c4:89:f6:5f:6c:ad:69:3d:d0:
5e:53:32:4e:75:2d:7f:3b:2b:a7:17:fe:c8:50:55:99:00:40:
ff:18:31:2a:19:c6:42:0d:78:71:32:2f:5b:e5:47:29:9d:30:
e7:53:af:9a:78:0a:4d:d3:5f:72:bb:c1:84:ec:5f:7a:dd:a9:
86:d2:75:fb:91:23:d2:8f:76:b1:58:32:a1:51:58:82:06:05:
96:8c:64:4c:0e:b7:08:b2:de:f8:9c:a5:75:94:20:04:3b:a8:
5c:ff:08:0f:ca:d1:f5:3a:0d:2f:86:9b:ad:30:e9:9b:a8:6b:
01:7b:84:ad:10:1c:3c:59:8c:0d:cb:23:d9:4d:97:82:56:98:
23:8e:94:55:df:ad:f2:eb:4f:e6:08:41:ad:76:df:11:6a:6a:
01:54:6b:ea:5e:34:4a:a6:98:98:06:07:6d:41:fd:d7:cf:23:
b8:eb:5d:59:7c:2f:96:28:59:6b:d0:84:a2:05:da:55:f3:03:
d7:38:e5:48:97:ca:0b:48:57:0a:95:1b:08:3b:02:c2:70:30:
52:d3:fa:9b:24:2f:2b:88:5a:96:0f:32:5e:c1:20:b4:5f:a9:
6d:4d:43:f6:a4:31:7c:76:74:14:ce:e8:05:07:0b:3d:8a:fa:
84:c2:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:25 2026 by rpki-client