Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: /g69pbJBaYL3yX2sof6FrSuIAQUDEx1A/mgXyjhFUYo=
Subject key identifier: B4:7E:C0:DA:84:A1:D9:5C:2B:78:73:9F:A7:B8:FF:CC:31:2D:BA:F6
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 019CAA21E56AC7B21B6A6EF7AB851D629AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 1661
Signing time: Sun 01 Mar 2026 16:01:13 +0000
Manifest this update: Sun 01 Mar 2026 16:01:13 +0000
Manifest next update: Mon 02 Mar 2026 16:01:13 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: nSGhXBbsgah6MOU18vAvINmZLwdiRNP57oUJ+CZEGaw=)
2: KrmrfuyTmay6BxzsP6g7DR2EuMs.roa (hash: i89qUuvLONj+YCXDaSghoBx5U4M3h/mBM7QmhvsqeeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e5:6a:c7:b2:1b:6a:6e:f7:ab:85:1d:62:9a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Mar 1 16:01:13 2026 GMT
Not After : Mar 2 16:01:13 2026 GMT
Subject: CN=b47ec0da84a1d95c2b78739fa7b8ffcc312dbaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:17:9c:be:e4:e7:af:a5:cf:1c:9b:fc:66:
6d:34:87:95:b6:2f:be:36:fd:a9:74:8e:be:cb:9c:
2c:28:cd:36:1e:6d:13:b0:48:e9:29:58:46:28:d3:
79:07:d6:ec:54:e6:6a:71:cb:ac:a8:c6:e9:f9:16:
d0:8d:2e:9e:87:49:99:b2:01:70:5c:5f:5d:6d:d1:
19:ac:cc:11:8a:b9:f6:2a:4c:35:aa:d8:03:76:0b:
7f:9b:06:9f:c0:df:d2:96:8a:49:cf:f9:c8:8a:77:
47:4f:2a:56:e7:ae:bd:75:1d:71:9e:ba:5d:cc:eb:
87:07:23:e7:51:3c:e4:b5:30:3b:fb:69:12:75:16:
34:ac:3d:79:e7:29:ff:3d:50:e4:46:0b:9f:96:a4:
bd:5c:c4:7b:94:32:4b:01:0e:76:73:75:8c:a2:4b:
25:0c:0f:5b:f0:fe:d5:14:2d:b2:75:58:a0:a3:67:
bc:b9:9b:86:57:a5:19:12:32:09:77:17:4c:eb:4d:
0c:1b:6b:39:fc:6b:29:39:5e:58:f1:84:5a:b3:e6:
25:e7:a9:1e:62:63:18:f1:f0:0e:46:cd:c0:04:e3:
5a:30:cd:ec:26:42:f8:20:56:c9:d9:19:37:4e:6e:
5a:66:a8:cb:e7:22:72:08:a6:7e:c2:55:9c:e2:ef:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7E:C0:DA:84:A1:D9:5C:2B:78:73:9F:A7:B8:FF:CC:31:2D:BA:F6
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cd:93:2a:4b:5c:0c:55:01:6f:a0:a0:a6:2b:d8:86:23:05:
19:1e:8c:61:6e:42:b8:f4:da:ad:c4:09:76:9a:bc:b2:91:bc:
60:c7:92:69:9f:4a:5c:b0:6d:fa:9f:0a:40:9d:b2:cc:ac:76:
59:9b:54:3c:87:df:d0:df:f4:a5:ea:c4:29:87:1d:dd:61:9d:
36:20:05:0e:6d:07:95:4b:59:4c:9e:91:a1:f3:78:6e:bd:6b:
98:43:ce:ab:99:55:32:9a:a0:a5:e5:ff:da:f2:61:31:0b:99:
63:2d:ee:6e:fe:69:80:78:07:ce:74:1b:c1:e9:66:ae:30:7e:
d1:2c:61:5c:8b:e1:80:fe:68:55:c8:3f:3e:b3:58:e2:64:06:
ea:6e:76:ad:b8:33:1b:b2:a8:16:04:86:7a:11:ab:5a:5c:3a:
2a:97:83:6c:e2:b0:66:fc:c2:e5:dc:ce:b6:4f:eb:9a:ce:ff:
12:8f:71:b1:6e:f4:3d:06:02:54:d0:0c:1b:f4:83:9e:bc:af:
d7:44:11:89:41:95:9e:3e:c6:7f:38:d7:d3:43:fe:dc:6a:44:
7c:de:32:36:7a:4f:b3:af:d8:11:13:b2:15:84:6a:46:18:f1:
c7:8f:ba:75:a4:e3:ad:e7:f1:f5:5b:57:5f:51:fa:79:40:ff:
5a:48:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:07 2026 by rpki-client