Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: c9SYx/ICMJeryMqZGpBetm+Om13dBNW41NN5IUsiANE=
Subject key identifier: 0B:18:E5:44:F3:11:72:86:AC:DC:65:EF:FC:49:8E:C4:46:DE:A0:BA
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019CAB3485703FECE093EF5DA4246C75FB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 1401
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: zAyWzovIRR50sEp6txJvuYde4y75n8+STs7EsgUf1as=)
2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:85:70:3f:ec:e0:93:ef:5d:a4:24:6c:75:fb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=0b18e544f3117286acdc65effc498ec446dea0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:54:fe:d4:af:91:50:fb:0c:8e:06:b6:df:
85:b1:90:f7:c5:93:6f:3b:d2:66:84:2d:da:49:f8:
59:41:dd:64:08:83:ef:e8:70:e4:39:7f:f1:1f:54:
52:80:bd:70:9b:f9:a5:4c:dd:02:7a:3b:67:26:b3:
52:10:d4:53:b2:62:ed:4c:4e:c6:1a:62:a5:81:1f:
b7:88:cb:e2:c3:5a:d7:45:63:d2:8d:82:eb:da:db:
84:9c:87:be:08:eb:e7:68:90:69:a6:22:45:51:40:
f1:b7:a1:ff:5a:e3:44:c5:f5:86:04:43:d9:e4:27:
ab:ed:19:34:a0:7c:d4:81:14:16:94:e1:9e:d7:d9:
82:39:ae:26:6d:e3:8b:81:71:b7:c4:71:eb:f7:d6:
16:d1:11:6f:6d:77:ee:11:4a:06:64:0a:f6:f5:cd:
22:a2:ad:49:f0:98:82:9b:55:a8:d7:67:a6:41:29:
48:49:32:83:f3:4c:fb:d9:48:bb:bf:fe:ec:a3:a6:
2d:0b:46:e4:51:e2:63:57:34:ef:9e:d8:28:24:f7:
e1:b8:69:0e:25:a9:06:03:a6:3a:78:22:96:33:14:
2f:cc:04:b3:c1:b3:a6:9e:3d:c1:6d:1a:a5:33:b7:
08:cf:a5:5b:46:ae:fa:a9:39:95:49:dd:a4:dc:20:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:E5:44:F3:11:72:86:AC:DC:65:EF:FC:49:8E:C4:46:DE:A0:BA
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6e:2f:e4:6c:92:1c:55:bd:9c:7c:a2:3f:9e:de:0f:f1:46:
69:f4:43:e1:b0:79:d1:cf:95:a9:1a:d8:6c:2a:1f:1d:bf:c6:
69:6c:7f:a2:8a:f9:0f:0f:6f:e9:69:86:02:ac:38:a5:b5:a7:
d2:53:fc:a8:74:09:81:c5:1a:64:2e:cf:22:09:ce:71:44:7c:
9c:1d:58:bb:09:b1:44:0c:68:d3:5d:45:97:64:25:66:7c:e9:
e6:38:ed:68:4c:b0:05:22:72:0d:08:58:06:a0:37:dc:08:26:
7e:a8:d7:a4:3d:1b:cb:6c:a1:1c:91:e5:82:37:fb:88:a9:03:
c7:f9:e1:58:a9:de:46:d5:89:7e:cd:74:01:41:f8:56:59:53:
05:45:10:9f:2a:ec:4f:d6:41:9c:56:d3:78:04:a7:15:f9:6a:
f7:57:58:7c:d9:ca:c6:a4:64:0e:83:12:58:d9:f5:5c:dc:01:
8d:ac:af:d4:70:2f:e8:66:38:a4:41:d2:c6:18:75:19:59:2f:
50:14:d5:b1:b2:ee:6a:cb:cc:54:75:82:1b:1a:b5:16:51:c6:
25:27:b4:56:55:08:82:0d:90:27:7a:fc:ef:45:85:0a:73:6b:
ab:8f:ee:23:00:77:26:b4:35:80:c6:82:30:e2:21:f9:8b:f1:
33:fc:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:51 2026 by rpki-client