Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: +yw+wV24K1qcv2STL+YRfwl0Z5MjmhB3VprTiMKSI0o=
Subject key identifier: C1:24:8D:6F:B6:CC:8A:51:D1:12:82:F2:7C:30:0D:7C:DD:BC:20:50
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 019CAA5877936470840A7D4F107482918799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 1387
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: JShjTgZEUh3jKnI7pSrLz9WJnMop1o/Qpqc3bKK1IXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:77:93:64:70:84:0a:7d:4f:10:74:82:91:87:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=c1248d6fb6cc8a51d11282f27c300d7cddbc2050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:6e:4a:42:94:9d:96:3f:14:9d:6a:57:cd:
bb:a9:f3:c2:14:b1:c7:b1:db:55:a0:7d:df:6e:e8:
ab:b2:3d:c4:47:0b:16:d7:30:61:70:4e:d7:45:0e:
c3:c2:ba:eb:07:3b:0b:c7:38:88:3f:cc:03:e1:82:
d4:92:d0:95:d8:ab:45:5a:82:f2:45:3b:8e:00:e2:
d7:02:c0:87:ab:a1:57:41:f7:2d:4c:b0:e3:36:53:
12:00:57:2f:f5:ed:e7:9c:6b:e6:23:26:da:6e:d0:
51:0a:d1:5e:cf:47:cb:95:40:4c:55:aa:b8:ed:0e:
1a:fa:0d:ed:06:f3:2b:dd:10:da:08:e5:5d:62:ed:
fd:92:de:4c:f1:87:30:1a:4a:97:b4:87:db:f3:85:
e4:dc:39:65:6e:65:d3:05:84:e7:fa:98:26:93:2c:
bc:93:5b:7e:12:0e:15:88:e4:82:c1:9c:e2:e9:8c:
2c:0c:00:92:dc:76:9e:94:a7:1d:e1:27:33:30:1a:
d4:d9:64:a6:82:ce:b2:b8:57:cc:6e:57:15:1d:37:
7a:d1:cd:91:84:5c:94:fe:4a:8d:2d:a6:d8:bc:db:
15:f3:20:93:5a:a7:47:36:6e:b4:ef:56:e9:ea:29:
ba:cc:27:c3:2b:23:b5:c1:0d:e6:6e:ce:13:8d:2d:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:24:8D:6F:B6:CC:8A:51:D1:12:82:F2:7C:30:0D:7C:DD:BC:20:50
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:03:6a:c1:ef:7d:9b:ab:1a:e0:10:d6:16:2a:24:10:b0:06:
45:e7:22:7b:53:36:a5:90:4a:37:92:5b:87:ea:b9:60:2a:3d:
2d:79:ef:5e:1a:44:af:68:bd:87:8f:c5:7d:5f:30:e2:c0:64:
06:d6:be:45:41:67:2d:3c:07:ed:31:ad:97:01:9b:a8:48:16:
7a:a4:56:60:38:f6:79:f9:ac:d8:3f:e9:44:ee:66:13:3f:1d:
8a:2d:f3:0e:1e:5d:71:00:d7:0f:83:91:30:f7:08:05:da:21:
53:79:4c:b8:38:d1:de:a3:a6:03:5f:76:de:c1:ab:e1:7c:62:
ee:5d:94:59:ba:f8:21:58:dd:7c:c8:9d:dc:cb:d1:63:02:8e:
c0:53:10:d5:d7:b5:f8:c0:81:4c:fb:81:b0:6d:d1:3c:9e:c5:
a0:f9:2e:03:ba:ec:e5:5c:2e:f4:ae:d0:6f:13:a2:0d:f5:05:
e9:ef:42:d4:85:15:94:e8:36:16:d2:04:92:98:ff:41:7a:1d:
6b:b5:bc:49:17:fc:1f:4a:14:d5:0a:c8:2c:c4:ba:f3:20:1a:
1f:76:1c:c0:65:90:89:af:57:86:8e:0f:93:40:3a:ce:70:ca:
c8:8f:f6:6c:85:14:1e:ae:30:3f:d1:6f:0f:d8:b7:e1:d0:f4:
a1:2b:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:05 2026 by rpki-client