Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: itry+xvCDXlIEQIegGBU718xMMcGc8FH4CvrilT7wqY=
Subject key identifier: B1:FA:58:19:98:B0:EC:E9:26:12:D4:38:CC:6D:00:64:E4:F6:54:7D
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019CACB4F9C85518730AEC7836E28AC60A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: DMom3rPUm8HweXvQ4-Q9jSK3W5A.roa (hash: LnHplGcwbJiDTN78KXR+EeXnQF5rJq6ndATkaGyGt6Y=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: lmXlvnMjP4JHOfDf9vmjZAU/Q0M/wZXqslVmCudPG8M=)
3: zo3coJXTyvhldkMVh9gvp4uyZ_c.roa (hash: XrJ9G8/whLu/oZmZ7d5+aY/tS2aPDpwbEqSKZTYhu+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f9:c8:55:18:73:0a:ec:78:36:e2:8a:c6:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=b1fa581998b0ece92612d438cc6d0064e4f6547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:bb:51:68:4a:0d:78:a3:f6:51:33:e2:33:
4b:3c:df:2e:eb:4b:1d:ac:a4:81:5b:be:1e:08:89:
6a:fd:37:31:1e:a5:8e:0a:43:23:72:ec:5f:d1:dd:
91:de:cf:b5:47:e3:24:21:08:c6:5f:52:86:e7:e3:
5d:be:cf:7e:8a:c2:66:dc:de:45:c5:4e:7d:5e:2a:
bd:11:a4:ac:62:cc:c9:7e:ce:b1:7b:48:d5:86:0e:
58:a4:bd:29:53:fe:e5:07:3b:5f:59:6b:3c:ea:26:
26:be:1d:c9:0a:70:bc:23:50:0c:ba:80:df:c5:ac:
d5:7e:e9:78:52:65:31:e5:28:95:8b:68:5f:c4:da:
b9:51:52:ca:e8:dd:f6:bc:14:29:52:4a:09:fc:e7:
3c:5e:01:e0:c7:81:bf:c3:e8:cc:d5:bc:e1:ac:be:
e9:37:e7:40:19:dd:b7:ac:d7:62:0b:d5:98:3c:c8:
d3:39:d5:1c:75:42:fd:07:ce:b9:e2:57:b3:a0:ff:
28:2f:4a:f9:06:2d:4f:7d:1d:e5:ce:0c:0e:84:74:
c9:ef:8b:f5:f0:df:08:b7:20:35:31:13:08:e5:11:
7a:fb:f9:ae:a1:c5:23:2d:46:1a:92:10:7e:b1:85:
f5:60:30:fc:ff:59:5f:60:67:af:9f:16:0a:83:13:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FA:58:19:98:B0:EC:E9:26:12:D4:38:CC:6D:00:64:E4:F6:54:7D
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ab:0f:c0:90:29:99:94:74:bf:4e:5e:d2:98:11:11:bb:3f:
d2:c0:c2:fa:76:d3:a0:44:a9:da:e2:82:43:e0:22:21:9b:39:
f7:4c:d9:50:0e:cc:a6:13:0f:9b:05:d0:58:dd:9e:11:03:9b:
68:f9:a6:13:0c:37:9f:53:cb:3e:e3:1c:6f:cb:20:7b:60:f2:
a9:48:1e:4c:4e:57:45:6d:65:fb:5d:c3:30:e5:8d:06:4c:3c:
75:c6:69:ff:9a:0f:b8:b0:0b:d3:cd:69:d8:60:96:45:b9:e4:
4b:af:43:c7:82:44:10:62:85:7f:ba:ba:71:c0:e9:87:12:16:
62:ee:c9:9d:d1:52:a3:3e:bf:ec:19:9e:94:48:38:f4:af:73:
22:56:86:68:ea:f9:d9:7a:69:58:80:f7:48:5b:b1:63:86:47:
b6:a0:63:e9:ab:96:aa:19:40:f3:f4:6b:02:3b:e6:68:c2:7a:
87:4a:0c:43:2b:f0:f4:82:a3:62:51:51:7a:71:b1:91:d2:08:
7b:73:d3:10:71:44:fd:77:ed:71:67:4d:5e:3b:18:d5:02:d8:
9f:1e:f5:8a:c9:83:88:65:22:fc:e5:32:ed:6b:ec:20:0b:d4:
21:73:2d:12:c6:17:46:d6:a9:21:ff:be:fd:42:79:a3:87:16:
5e:e6:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:05 2026 by rpki-client