Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: gy4kkFQ/wj+hQx7W5yoZ7x/8ibGcVbMo2hyZrMeooRE=
Subject key identifier: D9:1C:F9:25:23:EE:6F:64:89:92:4F:24:19:1A:1D:17:31:C3:9B:2C
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 019CABD9373FA99F941B051876D97379CBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:05 +0000
Manifest this update: Mon 02 Mar 2026 00:01:05 +0000
Manifest next update: Tue 03 Mar 2026 00:01:05 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: 46YGfFwlHTtcw1NE0b2Fduul0UpX4Urayks0iga5KUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:37:3f:a9:9f:94:1b:05:18:76:d9:73:79:cb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Mar 2 00:01:05 2026 GMT
Not After : Mar 3 00:01:05 2026 GMT
Subject: CN=d91cf92523ee6f6489924f24191a1d1731c39b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:71:8c:53:97:d7:fa:56:88:aa:53:a1:b2:
bf:04:2c:37:3d:f7:7d:d9:03:5f:a0:6e:0f:18:ff:
d6:31:f6:8b:cf:2d:f0:af:88:33:fd:03:c0:d3:86:
a0:10:29:63:c9:34:e8:36:a0:0e:d6:26:b7:d8:41:
04:e8:ff:4e:fb:91:36:57:12:dd:25:bc:c4:b6:f2:
b2:2b:8f:99:ed:80:42:b3:d7:89:9c:e0:fc:45:47:
f6:98:79:d9:48:b6:7d:83:6d:ac:08:b4:ec:f6:26:
98:07:18:c7:a4:a2:6c:c3:fa:4d:63:eb:fe:42:36:
02:0e:cb:10:4d:fe:eb:24:0f:35:44:c8:df:6c:86:
5a:a8:4c:45:12:d0:71:40:21:d8:7b:78:b6:70:87:
4c:84:e2:87:47:0e:5d:ac:df:78:2d:ea:ec:6c:ea:
68:ca:da:fb:23:e9:68:aa:c8:bb:40:06:2b:9d:37:
6f:d3:c7:60:4b:f1:e3:dc:20:1f:17:b0:fb:a3:88:
04:a3:20:df:49:ca:aa:7c:a1:60:45:37:2c:bb:9c:
27:d6:a2:fc:68:76:ee:b9:12:aa:f7:4e:a3:77:07:
c3:6d:b7:0b:10:62:12:e8:b2:fa:49:59:c7:8b:d0:
c1:64:d8:2c:83:50:ea:50:99:6a:7c:f0:e1:ac:cb:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:F9:25:23:EE:6F:64:89:92:4F:24:19:1A:1D:17:31:C3:9B:2C
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:a3:4a:95:c5:73:f1:3d:47:62:ee:66:8d:01:f9:98:a1:
3c:7b:ad:14:b9:13:e3:85:4d:e1:35:e5:8c:b3:bd:c9:b6:9e:
f1:69:1f:ea:92:dc:b9:9e:28:e7:e2:a5:1e:5f:bd:dc:05:9e:
c9:e1:7f:3d:d0:d4:ec:07:40:96:df:68:80:e0:b5:6b:e6:8b:
2c:40:17:51:59:df:85:4f:8f:69:d2:a1:2b:5f:b6:1a:a5:12:
65:a0:e3:e7:5c:ef:93:91:c8:9d:c0:1c:af:9e:fa:87:d1:42:
31:c4:31:fc:4b:33:fc:28:14:ac:09:b7:33:0c:f8:5e:a4:e6:
a4:4c:a4:7a:82:a8:e0:19:3b:15:f9:2b:ed:a6:f6:b9:57:82:
fc:9f:03:cc:89:6e:cf:f8:a3:96:90:9a:ee:d2:7d:b3:f6:90:
8c:f2:9e:47:9d:e3:de:5f:18:ab:38:d0:8f:2d:07:25:c9:52:
a7:f8:2d:f6:2a:93:bb:59:95:73:0b:fc:dd:8f:21:06:56:ed:
4c:06:a7:f8:e2:91:bd:c0:8f:95:4b:f8:be:f0:fa:b0:f7:cf:
0d:91:4c:54:f9:bf:3f:64:80:b2:91:0a:96:f1:e3:e8:e8:01:
0e:0f:4b:32:b3:fb:85:93:7d:ea:c8:65:a2:4e:69:60:a7:af:
b4:96:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:08 2026 by rpki-client