Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: iu6i+q0bJnIRTHx0Sv3zJ2OPgIpRz2lyp8v7XELm9qk=
Subject key identifier: BD:B9:D4:05:B3:5E:AC:E6:56:C7:3A:04:2A:6E:4D:32:FC:FE:AC:19
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 019CA90EF65DA8ED150516321A0CDB89DD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 16B7
Signing time: Sun 01 Mar 2026 11:00:55 +0000
Manifest this update: Sun 01 Mar 2026 11:00:55 +0000
Manifest next update: Mon 02 Mar 2026 11:00:55 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: yocecy5IOQtlTkBKyc4W0uJ3WCzyesP7z2dAHIaeVo4=)
2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:f6:5d:a8:ed:15:05:16:32:1a:0c:db:89:dd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Mar 1 11:00:55 2026 GMT
Not After : Mar 2 11:00:55 2026 GMT
Subject: CN=bdb9d405b35eace656c73a042a6e4d32fcfeac19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:c8:eb:5d:c6:2e:5f:32:d6:0a:5e:ec:fe:
be:96:0b:c0:50:fa:0f:1e:1c:96:63:97:6a:8b:ab:
b5:80:fe:bd:63:31:f8:1c:fe:c3:ac:8b:1b:d5:3f:
13:2e:7f:07:12:c3:85:21:3b:8f:c8:e4:01:96:c9:
3b:2b:cd:d4:eb:62:3e:ce:d5:ab:42:c0:a1:1b:61:
76:c5:3a:9c:93:6f:7d:54:2d:f0:4d:bd:14:f8:75:
fc:95:a5:43:20:bc:20:4e:45:28:88:f4:a4:dd:24:
3b:7c:e2:9f:5d:b2:6d:5d:0b:6b:35:e7:b6:20:30:
87:22:72:84:08:02:41:36:b6:13:ee:aa:44:42:c2:
73:5f:d0:58:da:f3:53:d0:04:5f:ca:dc:92:7a:28:
91:ac:93:38:2c:3a:77:39:8e:bc:4c:e1:a5:5d:87:
40:4c:b7:4b:8d:4f:71:d3:53:5d:73:80:c3:8c:e6:
4d:b9:93:ff:3c:22:33:87:6b:33:49:7c:0f:02:5e:
0e:26:87:2a:46:32:d4:37:70:f3:da:e4:90:9e:25:
49:c1:c7:14:5f:2e:81:6e:a5:57:00:53:9d:70:17:
2a:97:48:c7:54:40:f1:db:9f:90:ea:73:a7:75:65:
01:c2:54:a3:46:e6:d4:1e:95:c5:ae:de:00:c4:bf:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B9:D4:05:B3:5E:AC:E6:56:C7:3A:04:2A:6E:4D:32:FC:FE:AC:19
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a9:b9:60:5e:5c:3c:7c:bb:a2:23:b2:49:17:63:17:4c:c5:
96:c4:31:f6:51:2e:72:04:28:17:ee:80:bd:a1:ce:22:3c:52:
87:eb:0a:78:e2:ec:76:e8:9e:8d:a4:26:b7:db:1d:1a:2b:da:
44:99:d9:60:35:dd:0a:3b:36:19:7a:4d:0f:8f:12:74:19:54:
08:c6:77:2d:bf:c0:a0:31:db:10:2e:03:ee:86:0d:90:e7:19:
1c:65:26:a1:0b:7b:d6:22:d1:2c:6a:97:1e:42:30:52:f4:a7:
9e:00:a3:8d:6e:e7:5f:e9:b1:b0:de:b2:30:83:7a:a6:6f:41:
9b:ef:08:30:ce:b5:6d:14:11:be:4a:a0:7d:45:35:18:f2:c0:
30:b7:e3:5c:85:74:db:d6:6e:57:71:36:4f:12:4c:ea:00:ea:
be:7c:22:cb:f3:15:b3:34:88:e8:e7:eb:91:f2:89:07:aa:df:
97:8b:fc:1b:ef:38:fd:52:21:f5:07:fa:8b:e9:e7:e4:f0:90:
50:72:f7:a1:bd:0d:c3:30:44:97:b7:66:29:0e:9d:2b:44:88:
5e:d8:e9:cf:e7:aa:fa:c8:f9:de:6b:d1:e4:c2:c3:20:a6:0c:
a2:31:0f:85:30:44:e7:4d:3d:1c:79:aa:fd:55:cc:98:76:b3:
c5:e6:18:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:07 2026 by rpki-client