Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: MUN18S0AIIwY1e0DAKk8x7VJcR/hq940VouP9UAnLcg=
Subject key identifier: 01:44:71:F7:F5:20:F5:26:8A:26:CB:B4:C9:7C:A5:5B:C3:01:D5:6E
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019CABDA046BB59808A895ED25FBF93898BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 1173
Signing time: Mon 02 Mar 2026 00:01:57 +0000
Manifest this update: Mon 02 Mar 2026 00:01:57 +0000
Manifest next update: Tue 03 Mar 2026 00:01:57 +0000
Files and hashes: 1: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: lYKeFnlWGVPAcreJTh6c7BAQaLTaiFiPJPtsglMkGqU=)
2: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:04:6b:b5:98:08:a8:95:ed:25:fb:f9:38:98:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Mar 2 00:01:57 2026 GMT
Not After : Mar 3 00:01:57 2026 GMT
Subject: CN=014471f7f520f5268a26cbb4c97ca55bc301d56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:7c:eb:13:64:7a:ab:27:d2:36:b6:33:b5:
95:a8:cf:56:29:6a:92:b9:fd:a2:c2:19:a0:77:02:
24:36:bc:87:ec:52:ca:a9:a0:97:8d:6f:f1:eb:5a:
59:65:7a:e4:16:ff:e0:fb:ae:0e:04:d9:be:ee:b7:
62:bb:6e:1f:aa:72:a1:dc:fc:6e:25:4a:b5:48:f3:
43:e3:de:2b:e0:ed:05:a8:3c:f1:e9:4a:07:8e:bb:
1b:84:14:01:84:1f:d9:2a:30:13:d1:ca:fd:35:95:
90:ae:0a:24:2e:94:fe:76:51:e4:b0:de:78:c1:28:
42:ab:80:ee:60:15:d3:25:d8:14:aa:a8:0a:c6:ab:
58:1b:18:13:dc:c1:78:4c:40:89:9f:2c:52:9d:03:
69:8f:cd:8c:fb:ac:5d:df:70:f2:39:59:28:bc:2c:
c8:ee:69:22:76:32:f3:57:ae:f7:76:cb:f5:2b:96:
e9:21:db:7e:9d:9d:46:5e:7b:cb:c8:d1:cc:d4:48:
ea:15:87:ed:9a:77:e6:07:3f:5b:a9:05:a3:8d:5b:
cd:0e:86:f0:b6:07:b9:3c:0e:fe:69:d4:ee:09:ba:
ba:89:ad:7d:1c:78:51:2e:90:41:c5:25:65:41:bf:
f5:f0:8f:67:2e:30:b4:4e:a5:12:ee:58:60:e7:97:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:44:71:F7:F5:20:F5:26:8A:26:CB:B4:C9:7C:A5:5B:C3:01:D5:6E
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1b:f0:8b:38:92:04:62:2a:67:50:42:7e:7c:19:dc:79:aa:
f3:36:66:51:22:9b:53:8c:14:31:97:3f:8a:f1:72:64:bc:e8:
9d:60:6c:b1:ee:19:b3:a4:55:00:e3:1d:e8:64:13:fa:a4:23:
77:f7:4b:a2:30:a1:52:7c:8f:79:01:d0:8b:87:f4:5e:da:27:
56:bb:6f:a0:79:78:8c:42:40:1f:23:ac:92:aa:25:82:13:ba:
15:21:43:c8:98:27:93:0a:99:7b:bd:2a:4f:7c:9e:c8:af:35:
e8:20:11:e6:cb:c0:49:fd:da:96:29:97:49:61:45:ac:7a:65:
c9:a5:e6:9d:06:91:5a:63:c6:d1:bb:07:12:43:fe:6c:44:18:
ad:1b:f6:41:4d:7f:2f:62:7b:75:28:1e:28:60:4b:5d:5e:82:
f6:8b:df:00:b6:69:f6:95:5d:52:1b:bf:39:e9:11:8f:56:28:
ce:43:c8:76:09:1d:01:a6:26:38:7f:cf:44:d7:86:e1:8b:3e:
0f:77:8a:59:98:6b:d7:74:a3:e4:04:4d:72:e6:ef:30:77:02:
a5:8b:9f:03:d9:62:8d:14:17:0d:e2:08:09:2f:9e:55:c4:97:
c3:c7:6e:c0:d8:ba:c1:a0:ea:6a:9c:da:cd:ba:7f:4a:ae:2e:
16:c0:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:41 2026 by rpki-client