Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File: JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier: kCUQ2CMWp6e1cg2+ifjTs2Ivm7q1O7gnCxXVOcR+uy8=
Subject key identifier: 82:7C:1B:46:BB:60:44:85:25:9D:6F:87:98:4A:95:69:37:4B:E2:36
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial: 019CADC7CAE2860F03DCDE1578158D6909EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number: 0D3F
Signing time: Mon 02 Mar 2026 09:01:17 +0000
Manifest this update: Mon 02 Mar 2026 09:01:17 +0000
Manifest next update: Tue 03 Mar 2026 09:01:17 +0000
Files and hashes: 1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: B7iAVt1QYVItW6cn+h7emqMO2Ods9vy24FZs+au3YnI=)
2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ca:e2:86:0f:03:dc:de:15:78:15:8d:69:09:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
Validity
Not Before: Mar 2 09:01:17 2026 GMT
Not After : Mar 3 09:01:17 2026 GMT
Subject: CN=827c1b46bb604485259d6f87984a9569374be236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:cc:da:28:86:bc:2b:09:14:90:c0:63:15:
ba:58:db:0a:e8:4e:cd:ab:a6:75:9d:3d:37:8d:4a:
01:81:34:c9:d9:1f:45:7b:f5:61:14:8f:0c:1f:8c:
28:d1:21:f8:7f:5f:83:a1:4e:99:a8:15:9c:4a:ed:
b1:91:06:99:d2:f8:0d:76:76:16:82:08:d9:1a:d0:
e9:ba:36:1d:33:37:53:dd:ad:6d:71:3c:42:88:83:
11:54:9a:ad:d6:61:7a:29:26:2e:cf:bb:40:9f:a1:
52:b2:00:52:c4:f7:45:9c:30:68:0e:73:db:9d:39:
88:ec:0d:39:d5:5c:ad:b8:0e:d1:83:af:05:16:de:
ac:03:94:c2:d2:ae:e2:82:f7:66:e3:57:f8:57:75:
bc:6b:44:79:f5:be:64:32:6c:3c:74:b0:4e:b6:ef:
5f:f2:b7:91:7b:aa:b5:d7:b6:c5:ca:4c:99:8d:45:
3a:65:72:12:eb:c8:30:fc:7b:89:88:66:e6:86:32:
c7:12:48:4e:b2:9b:f9:3a:83:80:66:6b:8d:a8:81:
ed:10:1a:fa:40:a6:eb:03:26:0c:40:9e:29:28:73:
41:4d:46:cc:92:77:21:e8:61:e0:ba:27:bb:51:69:
a9:31:99:e3:24:00:c0:db:a8:fd:c8:9e:cc:0f:af:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:1B:46:BB:60:44:85:25:9D:6F:87:98:4A:95:69:37:4B:E2:36
X509v3 Authority Key Identifier:
keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b3:43:8b:8c:be:6a:4b:5a:c6:88:6f:96:39:58:ae:13:7b:
40:7a:da:d7:55:78:7e:3e:46:1e:79:fa:d9:d1:36:c7:0e:b7:
4c:21:d6:29:c1:1d:85:ea:e2:d7:aa:08:c0:a1:ff:f7:c5:de:
9d:c9:0e:e5:71:73:8f:2b:33:30:65:a3:f8:23:db:10:10:1a:
59:95:1c:82:4d:a0:e3:ef:6f:cf:06:16:03:b7:4f:2d:89:a6:
60:ac:78:50:ee:a0:20:43:78:41:6a:32:36:ad:60:d0:c4:15:
b8:0b:3a:1c:52:ad:7c:2a:f5:46:58:d4:40:ee:2f:d4:cf:7c:
df:57:14:eb:7a:84:33:8b:93:e5:a6:ff:d8:3e:f4:cd:4c:bc:
51:3b:fc:f0:e2:c0:9c:bc:0c:74:90:57:3e:ea:63:62:65:05:
25:e5:d7:7f:59:6b:1d:24:29:52:61:85:b7:d5:cc:41:08:05:
19:5d:ce:c0:09:ee:0b:0e:7a:8c:33:0e:89:1f:9c:6b:90:80:
ee:6b:d8:52:e3:31:b3:b3:09:96:42:4a:33:8e:c0:3a:c6:12:
df:52:09:95:c8:b1:2b:2b:58:2f:c8:41:40:3d:f7:f2:be:14:
d3:a1:ec:d2:20:9a:f2:a7:09:ca:2b:a9:c1:6f:83:13:98:3a:
38:11:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:09 2026 by rpki-client