Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: 9gnOYn4lJ71CUVhQHpGH52PJeKtHhdWMg7WPTy4W+bw=
Subject key identifier: 62:BE:19:48:CF:C0:B2:71:95:81:F2:2A:ED:8B:8C:50:D0:DB:3D:5E
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 019CAC7E00CBCE12915D885DEC587C404916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 0646
Signing time: Mon 02 Mar 2026 03:01:04 +0000
Manifest this update: Mon 02 Mar 2026 03:01:04 +0000
Manifest next update: Tue 03 Mar 2026 03:01:04 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: ltUzAIesnlOMDaag2Mdcninlgx6nBFkE3fFuxymZobA=)
2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:00:cb:ce:12:91:5d:88:5d:ec:58:7c:40:49:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Mar 2 03:01:04 2026 GMT
Not After : Mar 3 03:01:04 2026 GMT
Subject: CN=62be1948cfc0b2719581f22aed8b8c50d0db3d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:71:26:ee:09:ed:22:ff:84:8d:2e:8d:0a:
e3:19:27:49:37:b8:5d:ee:94:1c:fe:ab:7d:23:9c:
5b:4d:8c:de:93:5f:d3:23:09:75:b5:cf:eb:d9:0c:
52:da:e5:c9:29:f7:b6:45:0f:a7:c5:9e:33:aa:9f:
28:aa:cc:bf:d7:3c:e8:fa:97:e2:88:12:e1:32:cb:
c8:69:70:c0:4c:8d:aa:18:9f:62:9a:d2:46:b4:fd:
8b:9a:ee:bb:5a:56:c2:37:96:73:6d:99:80:10:ac:
c6:91:ce:54:f6:1f:c9:07:2a:40:1e:9e:80:5f:cd:
a5:74:b6:2e:15:4e:e9:80:33:c7:ea:22:56:c3:9e:
0d:8c:dd:12:81:f8:7a:80:3d:d3:6a:b2:28:31:3d:
26:e3:50:f1:58:24:d2:b1:26:8a:46:b5:df:a3:77:
8d:96:39:95:bc:e7:ee:68:5e:d6:24:9e:86:85:e2:
3b:49:a0:6a:de:8b:f5:ce:7e:bc:93:1c:96:da:30:
4c:a2:af:52:90:d4:b7:55:0b:b8:8e:d6:b4:ca:7a:
1e:d3:e5:a2:73:38:a6:13:3a:05:66:67:1e:48:d8:
c6:26:36:c9:27:c7:29:d4:cf:52:ee:39:c6:c7:c7:
40:2b:20:cd:0b:c9:8c:1b:0c:f7:2a:bb:8f:df:99:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BE:19:48:CF:C0:B2:71:95:81:F2:2A:ED:8B:8C:50:D0:DB:3D:5E
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f5:ed:7a:2a:a2:66:d4:da:ea:60:dd:e7:ff:ba:1b:13:ea:
9a:36:3a:5b:3c:87:f7:99:3d:91:bc:5a:62:75:cc:ec:0d:6f:
c8:bf:00:e1:93:9f:3e:9a:30:3a:91:3b:fa:67:b9:43:85:19:
39:b9:11:4e:d7:a6:55:c4:52:cb:ff:e2:c0:05:84:3f:e7:f6:
65:3d:f5:d4:4e:38:e9:da:f6:5e:f7:0c:cc:30:04:4f:e4:8b:
01:ff:1b:e3:f4:dd:09:2c:81:a4:32:42:a9:50:78:a6:95:0f:
0c:8e:1c:b4:e9:27:b3:d7:db:7a:03:79:16:ce:aa:e6:a2:62:
4f:1b:35:10:b5:c6:80:02:44:39:07:c7:0d:b8:9b:f5:90:75:
ef:d0:1c:a6:90:a7:43:8c:10:1b:20:f9:e4:81:f3:61:bb:aa:
75:3c:96:4c:b6:20:e1:30:17:00:04:51:26:57:e2:be:8b:ff:
36:0e:6c:ac:39:44:b2:81:ee:68:3c:88:33:20:64:fe:89:af:
53:41:9f:b5:1a:a5:b8:b7:5e:39:3b:f6:40:53:9a:dc:bf:07:
7e:02:3a:2f:91:5e:44:0d:ba:a2:1d:f6:c3:9c:06:9d:13:7c:
bd:b4:2b:36:cf:5c:c7:cb:03:ae:e9:2b:a9:a1:dd:35:3b:2f:
23:e0:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:35 2026 by rpki-client