Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier: FCgKOvT2YQwQqpvOsA1GD92UY3F7YqZW3hQedgqkhr4=
Subject key identifier: 91:91:6B:C4:48:44:DA:02:C0:D2:B5:D2:BE:88:31:08:BD:CE:F5:BD
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 019CABD93D8E17C1863052AE4C4F9C85A42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number: 0B3C
Signing time: Mon 02 Mar 2026 00:01:06 +0000
Manifest this update: Mon 02 Mar 2026 00:01:06 +0000
Manifest next update: Tue 03 Mar 2026 00:01:06 +0000
Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: NvkdfIyqkFmB0eNpKt02o8IV575xZ4lROXe1HD/33ik=)
2: hKMbuHr2aXc8zzCBYrN1Pl3PnrE.roa (hash: GT98HeqOpegXQJEdGgjawpeJJ5F69fX5SkGY05H68og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3d:8e:17:c1:86:30:52:ae:4c:4f:9c:85:a4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: Mar 2 00:01:06 2026 GMT
Not After : Mar 3 00:01:06 2026 GMT
Subject: CN=91916bc44844da02c0d2b5d2be883108bdcef5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:23:4a:b0:33:5c:0a:d5:bd:fb:aa:9f:c3:
45:0d:23:4e:e7:8a:98:b0:74:9f:49:e2:41:11:fc:
79:fa:19:25:1c:7f:c4:ed:68:4b:87:ef:74:77:18:
96:7d:13:ac:9e:89:1a:15:38:59:69:7c:ce:d9:8d:
7e:49:26:4f:a0:d7:e7:e2:02:b9:2a:6f:51:6e:f1:
95:8e:f1:b8:6c:49:4f:34:80:d8:78:ec:50:1d:f8:
c5:e8:97:08:6d:5a:99:76:4e:64:2c:d2:02:77:79:
67:aa:11:54:07:78:9e:c1:5b:45:ef:eb:9f:02:93:
be:b2:61:1a:38:b4:7e:91:ab:87:fb:3e:d6:36:46:
78:19:a8:47:d2:af:50:99:99:fe:b8:27:dc:fe:0e:
6b:ee:cd:05:6d:50:ec:2c:ca:a5:f1:12:d2:d8:bd:
88:7f:f0:e3:4f:8d:d1:f1:a2:c8:1e:3c:30:7f:bf:
18:b8:91:0d:b9:2f:e7:e0:e2:a9:90:48:ac:e6:4b:
4b:40:37:eb:e0:1c:63:5d:ad:9b:89:fd:79:4d:cb:
69:9c:9b:fb:91:6f:12:c3:c7:62:bf:d9:50:c2:a0:
a2:4c:d5:e6:48:ac:6b:bc:d7:87:25:12:d1:fd:5a:
9a:49:aa:c2:1a:59:7a:56:02:ec:a2:5d:50:e5:6f:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:91:6B:C4:48:44:DA:02:C0:D2:B5:D2:BE:88:31:08:BD:CE:F5:BD
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6e:1a:83:34:5c:ff:5a:45:02:4e:1b:a4:ec:6b:4e:a0:93:
59:af:c6:97:14:57:e5:c6:0d:b7:97:08:84:7b:a2:3e:36:b2:
ec:fe:6a:f8:81:14:36:cb:28:70:91:4f:de:e3:3b:2b:8d:a6:
c9:af:24:36:e0:03:3b:bb:7f:cf:88:59:c7:6e:76:1b:12:51:
b4:8a:2f:23:4d:c4:ac:8a:d1:09:70:f6:94:42:22:09:0c:83:
af:96:0b:cc:53:c2:07:79:04:de:61:40:5d:fd:d5:b1:01:1a:
a8:67:81:79:96:bf:49:96:27:ab:27:3a:16:c1:aa:0c:35:31:
e3:39:88:f0:13:18:28:d1:2d:df:6d:7a:60:4e:c9:68:c1:ba:
18:95:49:cd:ee:19:35:37:53:ef:d0:b5:33:50:fe:5f:2c:7e:
bb:5c:69:62:60:1c:0c:b7:49:1c:79:c1:23:9d:e6:72:c2:1f:
d1:aa:be:77:9d:26:29:90:24:82:80:8c:c3:d1:13:57:b3:72:
30:31:8e:c1:ea:4b:dd:2b:91:2e:4f:c1:eb:eb:d5:9c:58:62:
07:93:59:1e:a4:cb:11:2a:5a:fd:79:41:47:79:30:c0:b0:bc:
e8:fc:55:27:aa:25:50:e7:0e:8c:0b:de:d3:c5:49:12:bb:86:
1d:62:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:24 2026 by rpki-client