Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier: Z5vBp3KbhKZGlkxYNK0/SqC4+SaLC5ticoeRau7bprA=
Subject key identifier: E2:52:DB:35:ED:25:DD:0F:80:2A:B2:CC:12:E6:C6:EB:2C:9A:F3:8C
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 019CAC4713F30134883B16E593E848DD9471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number: 0BE5
Signing time: Mon 02 Mar 2026 02:01:05 +0000
Manifest this update: Mon 02 Mar 2026 02:01:05 +0000
Manifest next update: Tue 03 Mar 2026 02:01:05 +0000
Files and hashes: 1: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: M8AlNtiOLgUtHpANZJ8ZtQKawZiP+eiSpebiBO8Qu3w=)
2: UfOE-rSQQJxT5pel5hxB7CI5WyA.roa (hash: lITU3NpiQckWKnEMAb5T8z+uP9+F2438Al8BboidjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:13:f3:01:34:88:3b:16:e5:93:e8:48:dd:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: Mar 2 02:01:05 2026 GMT
Not After : Mar 3 02:01:05 2026 GMT
Subject: CN=e252db35ed25dd0f802ab2cc12e6c6eb2c9af38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:0a:d5:0f:08:77:41:15:f5:75:6b:6c:9c:
a4:f4:50:2d:18:80:08:3c:15:18:5f:76:a2:c7:40:
8f:0f:17:45:9b:c7:0b:67:fa:b8:ac:55:35:0f:b3:
8f:b7:77:7d:72:20:46:5e:71:09:e2:0c:0e:3e:6f:
e0:d9:90:8e:d2:b5:50:0f:fd:f6:69:1c:bc:e3:45:
b4:5c:ec:ba:d9:b9:35:3c:81:7f:be:cd:9c:ba:fd:
5a:69:41:90:75:d1:f0:80:d9:d4:5e:f6:ed:61:b6:
be:e9:0a:d5:9f:e1:db:03:5d:83:bb:c1:17:90:96:
92:77:9c:89:6b:73:f3:c2:8f:eb:43:1c:fc:f8:65:
5e:89:72:da:6b:60:7d:a2:44:f3:26:ee:41:3e:d0:
48:5c:bd:9d:73:9f:e0:5e:81:20:03:8d:42:81:c3:
8a:97:9e:fa:c1:77:ce:0f:c4:14:4e:d8:83:cf:ac:
23:0a:29:e6:01:d1:8e:3c:0c:e5:9d:90:c6:12:9c:
06:cf:44:ce:fd:6b:16:1f:c4:e0:93:23:33:28:b4:
36:90:50:53:65:af:b9:6b:05:89:c7:22:8d:8f:fe:
85:d2:0a:c5:24:8f:38:b7:ad:11:6a:e0:6c:5b:ac:
5e:44:0f:94:27:1e:8f:37:63:74:d4:a5:e0:ce:f6:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:DB:35:ED:25:DD:0F:80:2A:B2:CC:12:E6:C6:EB:2C:9A:F3:8C
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:93:51:8f:d9:99:fb:09:f1:57:51:60:38:b4:ad:5b:ea:98:
87:b5:d1:05:81:cc:25:01:ec:5f:69:f1:41:36:64:8c:c3:20:
32:4d:72:54:51:5f:ad:ad:3a:2e:bf:69:4b:4a:82:0c:40:0a:
fa:1f:8d:82:52:8f:d5:9c:0c:30:72:a8:e3:d1:bf:97:63:f2:
7e:92:8b:93:d8:e2:dd:81:30:be:e3:5d:ce:e6:95:e4:37:16:
f3:39:14:38:dd:ba:fc:bb:0b:cd:32:af:40:02:8f:6d:02:48:
59:63:d3:b6:fe:b0:d3:a6:2f:fd:b9:16:fe:2f:02:6b:81:c8:
72:23:57:b3:c6:19:da:f6:05:24:3e:52:50:2b:37:ad:c3:6a:
1d:db:71:90:4b:94:5a:a5:7d:7d:f3:98:9e:f3:99:2b:4c:fd:
77:07:55:48:61:ba:7a:5a:71:6d:a8:80:fd:e9:8d:d0:e4:78:
25:9f:2b:b5:ca:28:e6:45:91:6a:85:93:be:9f:43:49:c2:b5:
ca:76:d6:f7:ae:3c:7e:4d:d2:9e:ea:7a:e2:f5:88:98:62:56:
5e:58:50:cd:d4:85:84:ca:47:41:7f:a9:18:81:5d:11:b2:e4:
25:c0:ea:83:d1:0a:8b:00:0a:43:1c:0e:91:fd:4b:05:d6:80:
72:d9:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:38 2026 by rpki-client