Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: oz6oF3dLjcAoNqZBuHczVKEQujg02zb31XcY87FJoPw=
Subject key identifier: 5E:81:1A:C4:9C:57:45:35:F0:49:12:2E:2F:A6:7F:D7:7C:3F:68:C0
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 019CAC7DD0B080A88AD24ABEEBC6AC73453C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 03:00:52 +0000
Manifest this update: Mon 02 Mar 2026 03:00:52 +0000
Manifest next update: Tue 03 Mar 2026 03:00:52 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: 4kf+yjWZZyYxKvAAjmjUaC3WBuoZb8onvVRvy4XTF4E=)
2: VnCUFpdYn6p9SWgBKCYPBMB_uag.roa (hash: CTE/bVTVJxivSVfHlKssz3gbLXyaKsvtaNtZL1+VzWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d0:b0:80:a8:8a:d2:4a:be:eb:c6:ac:73:45:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Mar 2 03:00:52 2026 GMT
Not After : Mar 3 03:00:52 2026 GMT
Subject: CN=5e811ac49c574535f049122e2fa67fd77c3f68c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:eb:79:65:1e:1d:17:48:db:ee:30:4a:7a:
42:56:52:cb:77:3e:2a:f7:1e:b3:b8:9d:39:9d:c6:
23:df:e3:68:34:4d:f9:75:83:ac:8a:da:9c:dd:a6:
80:78:c7:c6:38:a2:f9:b9:94:90:a6:c9:fe:60:bc:
e0:ef:a1:a3:28:4e:63:7f:aa:8d:87:96:f1:1f:35:
95:82:ba:7b:32:b9:57:cd:fc:33:e2:bf:72:2a:23:
cc:87:54:02:8f:2b:7a:ef:35:bc:9f:a5:5d:46:d9:
17:4c:51:c3:96:b4:14:d5:96:e1:0a:74:b9:63:c7:
a4:f2:4f:76:e0:df:3c:c9:b5:e9:8c:5e:8c:e2:8f:
e0:14:dd:c4:77:70:6b:2d:47:9d:5d:9b:df:32:fc:
b3:16:43:6c:62:43:90:20:c2:8a:22:82:78:df:70:
4f:2b:6a:e3:6d:5f:25:e4:5a:4e:54:a2:7c:b7:97:
c2:8b:ee:e9:32:b7:a1:74:6e:f5:e5:71:4d:52:bb:
95:b8:36:29:e4:d6:c5:30:18:98:f0:be:8d:4b:73:
a2:68:2e:c4:9f:31:6d:18:40:38:f0:23:52:d3:97:
28:77:f3:0d:e1:19:2c:01:72:e8:7c:79:1d:64:ef:
57:dd:0e:16:3a:e9:7a:fa:b4:49:79:35:0b:fe:df:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:81:1A:C4:9C:57:45:35:F0:49:12:2E:2F:A6:7F:D7:7C:3F:68:C0
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f4:ad:84:dc:e9:1f:54:b8:d4:64:c3:0e:b3:27:e1:5c:ab:
f9:31:6f:a0:85:c4:7f:0f:8b:58:d2:8c:db:d9:27:c9:79:56:
1b:a2:7e:10:94:83:fa:9a:8e:9b:24:99:0e:e5:6b:f5:5a:7f:
7c:40:bd:bd:46:38:73:24:bf:eb:77:00:3b:9a:99:70:ce:08:
13:4f:27:24:15:7d:4f:af:88:d5:35:c7:41:95:55:c7:63:43:
9e:7f:9c:8a:00:ba:9c:45:84:d0:6e:a6:5b:37:66:1f:45:5c:
83:3d:fe:9e:bf:42:50:fe:a8:e1:bd:e7:ef:06:39:55:b0:b0:
f0:d2:9b:8a:c4:a5:25:b4:b7:66:9e:1c:bc:74:79:23:5a:5e:
8f:7d:d9:d8:40:5f:57:95:4b:62:98:26:f9:01:e4:43:f4:67:
1d:04:a7:d5:fc:d2:9d:56:41:e7:88:2e:64:2f:24:1a:de:22:
4b:98:85:92:82:a1:2d:da:c1:8f:8e:2e:e2:6f:c2:87:90:37:
2e:41:6c:fa:f4:4a:07:9c:29:79:9a:57:70:36:f6:aa:0c:26:
dd:0d:b4:60:c0:8e:8a:97:f2:c7:1f:e4:54:86:01:4b:21:15:
d9:41:a8:0a:81:50:5e:61:92:8f:e9:66:a4:ef:93:a8:78:be:
2b:cd:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:54 2026 by rpki-client