Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: pzsiKbSldUerKbdi+mm/MvykPRyAJJUTcEXxxrbxemw=
Subject key identifier: 2C:19:3D:C2:26:9C:FF:CA:4A:7B:04:64:CF:29:0E:A6:4B:D1:8C:F9
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 019CAAC6EA1B28530F7FF4E5BCEA1C5A0BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 149F
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: hv5ykPRQzR2e/4GyI2dXcoyGcOAYG3ionYTQ15Vjsa8=)
2: p5WK8SqdNKrQAJq8_gZrFH1Py64.roa (hash: Nm8rFW/KHjUYCTq0McUqQzXzdbDIF9y2fLjjuqM6uz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ea:1b:28:53:0f:7f:f4:e5:bc:ea:1c:5a:0b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=2c193dc2269cffca4a7b0464cf290ea64bd18cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:97:3f:c5:b8:8c:96:17:a3:c0:2b:2f:2f:
61:8f:61:2d:02:02:1d:b3:1f:9c:6c:02:5b:17:9e:
65:0f:db:9e:c9:03:13:32:94:aa:73:8e:1e:fc:96:
ca:d3:5c:99:f9:35:30:ff:7e:c5:0e:c0:d5:bf:0e:
e3:64:d8:47:85:86:5f:a4:a6:8f:f3:0c:51:3d:29:
77:91:cd:78:1b:1f:f7:c8:18:c7:8d:d4:51:96:81:
cd:31:62:8a:bb:a3:3b:81:84:e4:f0:6b:ee:8d:44:
cc:c6:31:20:ae:c6:46:97:1a:1e:0d:1d:6b:1d:cf:
d8:ee:4e:b4:4b:3e:ed:2b:ee:8a:f7:24:ba:31:b9:
2d:9b:41:18:37:ea:51:a3:23:2f:89:e3:be:a1:d9:
db:24:29:eb:5b:9d:66:c7:f3:ca:c8:ac:2c:46:c3:
0b:ba:ca:1e:a5:a2:62:fd:8f:5c:35:9e:62:6e:3a:
dd:e3:6e:96:c9:de:29:eb:e9:e0:0a:26:a3:a6:3d:
82:40:bd:17:00:bd:66:cb:6e:9a:47:71:72:58:c3:
5e:e5:df:39:f3:af:5b:21:9f:a7:16:67:e6:d6:6d:
b4:3c:9a:75:e8:f2:c3:96:7b:05:2a:8a:6b:04:d3:
c8:90:d7:ae:92:fb:19:93:1a:12:9f:ce:7a:22:1d:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:3D:C2:26:9C:FF:CA:4A:7B:04:64:CF:29:0E:A6:4B:D1:8C:F9
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:44:f7:8d:69:f2:5e:0c:e0:b8:fb:f8:d6:d2:b6:1b:2c:6e:
3c:4d:59:d6:90:fd:e5:77:33:ee:6b:ca:26:c2:9a:72:5c:8d:
c4:46:6f:58:30:52:1d:7d:3b:c2:4b:6f:bd:5f:0a:75:e4:9a:
e1:00:df:3e:79:c6:50:c5:fd:24:77:a1:54:fc:1c:bd:6e:d0:
a6:fc:10:8d:d2:45:5a:f8:d9:80:c4:a8:43:b9:dd:4c:08:b6:
50:ef:7e:22:b8:c4:63:98:1f:e2:20:5d:76:7b:1e:33:53:dd:
77:b1:b8:e9:f7:50:64:92:59:48:79:37:42:91:25:8a:59:b5:
7d:ae:94:85:73:1e:9a:94:ea:5c:c8:fb:a6:ff:8d:8a:aa:33:
57:3a:99:71:8a:69:a2:a8:25:45:20:22:c5:93:1d:c2:82:d7:
96:4a:8e:55:ad:ea:d5:49:4f:36:41:d0:e2:f8:ae:95:5e:99:
b5:56:a5:f2:f1:9a:8e:e6:13:e7:e7:e2:e0:4b:23:ee:88:64:
70:d3:c9:72:54:2d:6c:63:c2:d7:1e:58:fb:86:a8:b8:db:41:
bd:69:bb:a5:5d:96:79:88:2c:df:ec:54:4e:38:3b:02:08:15:
ce:8d:fa:72:d8:b6:51:38:9a:21:32:d3:ee:57:81:23:c6:57:
d2:30:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:48 2026 by rpki-client