Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: Hf1OL86PUkOwYuWpPYr6IDHDC7lx+Y+FyxZAzdiXDZo=
Subject key identifier: 1A:B5:C1:67:CC:95:D2:01:42:05:56:37:63:C2:11:4C:AB:84:70:8A
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 019CAD22C8836236A2F2E7CB89090BA52A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:01:03 +0000
Manifest this update: Mon 02 Mar 2026 06:01:03 +0000
Manifest next update: Tue 03 Mar 2026 06:01:03 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: La4x7OVdrLws2uXvHZxzTP/jRCqhOzyy2w+J7t1GNLg=)
2: m0Ovx0Sqw4Mvmnjc_rT54ARItq0.roa (hash: nkxhqGEnqwsqr1mf5UgG9VF9xVU0Wk8zI/Hwu2iNPWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c8:83:62:36:a2:f2:e7:cb:89:09:0b:a5:2a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Mar 2 06:01:03 2026 GMT
Not After : Mar 3 06:01:03 2026 GMT
Subject: CN=1ab5c167cc95d2014205563763c2114cab84708a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:5b:4c:92:8b:05:e9:22:d5:0e:76:df:66:
11:ad:2a:c5:bf:c0:29:56:68:ce:dc:f6:2d:aa:ab:
94:ed:13:e3:78:d4:26:19:b1:56:c7:f8:27:96:cb:
1a:95:4e:5a:72:89:31:d9:c1:78:df:a5:47:74:72:
6b:a3:dd:68:33:f4:6e:d6:9a:4c:f9:d0:c2:8a:dd:
e9:94:1e:57:95:29:95:cb:51:f4:0f:34:08:40:39:
84:06:0d:e3:e1:02:62:94:35:df:45:2a:ca:56:f2:
b2:46:9b:d5:10:06:d0:a2:7f:98:32:95:8a:bc:5e:
5b:7b:3a:f1:79:ed:ef:58:30:f3:cf:46:30:0a:92:
87:be:d4:fb:95:5b:9d:76:f6:44:60:6c:fe:4c:ef:
c8:9d:f7:12:f3:fb:3b:29:1d:2a:d4:9b:af:49:b5:
e1:ed:2e:6d:a0:4f:82:18:4d:cb:06:48:e8:3a:70:
41:69:0b:04:2a:f0:b7:d2:23:20:10:05:40:b9:f7:
8f:63:81:41:c4:41:b3:1a:7b:90:91:f2:a7:b8:c9:
3a:04:53:dd:99:70:86:20:09:81:42:17:ae:56:a7:
60:a8:86:c6:79:2d:8d:e2:07:23:b7:19:8c:72:14:
f0:72:62:08:3d:f1:33:17:20:ff:6a:fa:12:b1:fe:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:C1:67:CC:95:D2:01:42:05:56:37:63:C2:11:4C:AB:84:70:8A
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b1:35:76:43:54:ac:c3:59:4b:7c:c3:e3:51:bb:db:d0:ae:
2b:48:04:ed:80:47:25:88:f8:16:e3:52:3c:8c:2d:64:ba:4d:
f0:3f:34:3f:8b:4f:0a:54:a7:db:a5:1d:5a:e2:e6:ca:d2:76:
39:fd:94:34:79:71:e3:59:9e:a5:7e:dd:da:34:d1:a1:a6:22:
75:e0:14:e0:75:2a:9c:69:55:4d:f2:6a:1f:dc:10:8f:9b:65:
10:ee:df:1c:58:a2:59:44:ca:f5:98:a2:a9:c2:77:8b:87:07:
3e:69:7b:16:4b:6c:b8:c3:26:7d:a5:6d:45:ac:a7:cb:19:96:
d4:54:4c:7b:6e:8e:b3:d2:f4:f4:a4:6e:42:49:38:96:36:cd:
0d:44:a3:1a:53:2d:c1:b9:20:02:20:2e:61:24:8f:ec:06:2e:
4b:bd:18:d3:e2:4c:00:7c:5d:66:6c:ca:60:28:78:e7:8b:65:
d8:15:1c:09:00:86:a9:8f:77:7f:f3:cd:0c:9a:4b:f4:6f:b5:
48:96:19:85:53:5c:9d:c0:50:bf:82:79:54:4e:e4:ca:41:d3:
8b:b6:1e:34:30:8b:44:42:99:ba:ec:99:ca:ec:48:5d:2a:d8:
71:fb:13:1a:ac:30:c8:e8:45:ac:28:96:95:87:90:76:57:3b:
90:06:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:50 2026 by rpki-client