Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: +tFW/5LG3Lx0VoLzLAQ25z2Fmpw20+wKFQxiQgG7A5E=
Subject key identifier: 59:DA:CC:6F:0A:4A:82:A2:88:62:0E:78:AB:66:21:1A:3C:95:A4:26
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019CAE6BE80DC5DA8F76AFC0F32FA38F4E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 12:00:33 +0000
Manifest this update: Mon 02 Mar 2026 12:00:33 +0000
Manifest next update: Tue 03 Mar 2026 12:00:33 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: Sz5g0sxa+TMk7NBk6RXUMgq5llwl1xvWcaWbhHE8hYc=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:e8:0d:c5:da:8f:76:af:c0:f3:2f:a3:8f:4e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Mar 2 12:00:33 2026 GMT
Not After : Mar 3 12:00:33 2026 GMT
Subject: CN=59dacc6f0a4a82a288620e78ab66211a3c95a426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:95:c1:09:f3:2b:e2:50:40:d1:33:bb:82:
57:2b:73:73:4d:96:04:43:3e:aa:aa:d9:2e:5f:94:
c9:51:80:b9:8e:81:b8:32:1c:02:0d:60:4e:9c:0f:
e4:7b:89:4d:78:79:14:47:8e:c5:80:e6:92:20:22:
df:cc:3e:12:ea:5b:d2:39:8d:1f:ef:f7:09:ce:0a:
2c:cb:98:27:82:ab:ec:cb:92:94:69:64:db:09:48:
de:8b:ca:69:bb:3e:d8:ed:b0:7f:9a:ab:89:24:ef:
4e:b3:20:fe:49:c1:5b:e9:b5:8c:2a:a0:1d:1c:5b:
a1:6c:8e:97:1e:ad:d7:4d:04:ba:51:16:42:2f:cb:
c0:15:a1:6f:1e:ff:6c:a2:4e:8a:d8:ca:0c:61:92:
95:ca:a1:15:1b:b5:e2:0a:61:53:cf:57:40:3e:2b:
2b:20:85:e1:8e:65:b8:36:27:84:6c:05:77:d8:9d:
b8:c1:2d:9a:3b:1c:e5:d1:78:4c:ca:96:05:ac:ed:
f1:78:f0:65:c6:d9:da:cf:a4:8d:b0:9d:f6:84:a0:
f4:78:a8:d1:22:12:59:21:cd:d2:15:3d:0c:6c:f1:
3f:2b:3e:5a:03:0b:de:99:57:ab:f3:c7:30:92:00:
41:e2:64:22:62:6b:e2:3c:f2:e6:3e:cf:83:db:2f:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:CC:6F:0A:4A:82:A2:88:62:0E:78:AB:66:21:1A:3C:95:A4:26
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:45:1c:0a:c0:5d:6c:24:69:4a:d3:c4:21:25:71:1f:78:cb:
38:4e:d8:24:ae:9b:cb:01:e3:3c:73:53:e0:7e:c8:55:46:10:
d8:0f:3b:92:b4:7b:e4:fd:ec:70:80:ce:b8:c7:b3:80:82:42:
87:12:8f:21:00:08:a1:30:63:96:b7:8b:4f:ba:07:7a:5d:06:
ed:52:19:37:50:49:24:5f:b2:cf:47:0e:94:49:3e:03:00:b8:
55:0d:35:70:cc:28:3e:12:c9:89:33:76:45:7d:56:82:25:f3:
36:d9:50:8e:0f:95:3d:29:03:c5:ab:f6:b3:1d:c1:18:f0:0c:
02:83:91:0b:52:f2:21:43:30:cd:94:5b:6e:f9:70:22:8c:46:
69:5e:c7:c1:f1:9f:e5:4e:65:e1:a3:19:11:a8:3f:43:42:94:
ca:34:4c:1d:b3:a1:14:d1:98:d4:c3:06:f0:82:4e:ee:c9:6f:
d0:02:d6:85:38:73:44:58:5b:aa:84:f5:6d:f4:b1:5c:47:53:
ea:2e:92:84:57:90:1a:d4:6a:53:d6:38:14:d3:9c:a9:4f:31:
c8:b8:ae:06:16:fc:b9:6d:5f:a3:22:98:83:f6:38:82:a0:69:
21:43:65:2a:63:98:14:c4:dd:8d:c4:2c:63:a6:e1:6a:f6:f5:
1f:c7:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:01 2026 by rpki-client