Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: 22Xi2tGH2xCA6sJ/R1um4Kdj++cPp2Lm26Tx2a7DLBw=
Subject key identifier: B0:7B:A4:33:35:75:9B:76:C0:20:EF:CF:D0:FE:C1:F9:18:D1:5D:03
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 019CAC4766B1D342195E461E3F9B8FD5D62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:01:26 +0000
Manifest this update: Mon 02 Mar 2026 02:01:26 +0000
Manifest next update: Tue 03 Mar 2026 02:01:26 +0000
Files and hashes: 1: 7T34cJ5eXiFw90xTsWzMsemczZ8.roa (hash: NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=)
2: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: BmlGfHCYx7gbc+hAY4tlY4Idy34gcfrxA7njDFZmSXA=)
3: qGguuT9Ru0OfORRSKp-reBQ-KRE.roa (hash: OTU77wowFQko6pFhiDvLMQKWLsSMn8KIv1XwXHLkEb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:66:b1:d3:42:19:5e:46:1e:3f:9b:8f:d5:d6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Mar 2 02:01:26 2026 GMT
Not After : Mar 3 02:01:26 2026 GMT
Subject: CN=b07ba43335759b76c020efcfd0fec1f918d15d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:87:35:26:71:df:a5:c2:5b:07:be:11:b0:
02:de:d9:df:d5:07:5f:c5:00:2c:0d:6d:26:a4:56:
94:54:8c:05:03:fb:c8:49:ac:f1:62:df:6d:73:bf:
07:8f:77:87:60:23:98:38:07:27:0c:9d:2e:7f:75:
d0:d7:52:29:90:04:ca:12:87:ed:37:3a:4c:19:e8:
59:6e:b1:2d:31:5c:1a:29:f2:d4:43:0c:2f:1f:85:
73:ce:c2:b9:b6:36:50:22:e8:c3:c9:ef:51:d8:20:
2c:9e:2a:c4:13:5b:ca:07:35:8a:4e:9f:4f:4c:69:
6c:54:f0:ca:1c:31:ff:88:75:45:13:26:87:dc:3c:
61:af:15:a7:68:7e:09:d4:81:66:59:42:b5:56:27:
36:d0:96:28:7a:fe:a4:15:3f:39:e3:26:96:3e:9f:
80:42:33:ce:66:e4:70:64:5f:e7:a2:8d:6c:7c:e9:
51:cc:26:41:60:34:43:b8:72:32:37:5b:1b:ca:f6:
61:50:d4:32:70:ed:8a:d8:07:84:ec:e5:b8:d2:29:
88:df:fd:62:f7:f2:b4:e8:32:e1:49:5a:a1:cc:32:
99:f3:61:a8:68:dc:f2:fb:d3:c3:18:4d:af:d3:d9:
99:98:ed:86:9b:d1:a3:3b:ab:d2:8e:c4:99:01:3d:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7B:A4:33:35:75:9B:76:C0:20:EF:CF:D0:FE:C1:F9:18:D1:5D:03
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2b:a5:11:f6:b1:22:84:bb:b9:9d:a6:a0:ee:db:95:95:65:
91:00:61:9e:78:19:60:e3:08:cd:93:2b:11:b5:9a:9c:da:13:
0a:8b:e2:c6:db:1a:df:d1:09:4a:b7:03:02:6c:da:29:fa:bf:
4d:22:9f:22:11:60:8e:0b:2e:d6:4e:30:a0:5c:28:cb:40:2d:
60:0b:f3:ab:5c:0b:01:bb:d1:16:03:86:62:8a:98:f7:f9:14:
1b:6b:f3:14:91:47:d0:e2:f3:6f:2b:57:fc:fe:6e:0b:dc:d2:
e7:83:f4:a7:e1:9e:08:9e:9a:55:8a:3a:08:c4:06:fe:ef:eb:
50:a1:de:ea:a0:95:6b:a8:29:42:04:0e:9d:7e:97:f0:d4:25:
66:40:08:94:d5:fa:1e:99:28:fb:c2:bc:d4:f9:7d:e0:47:33:
15:87:31:ae:7d:85:b3:9a:3f:96:ca:72:b6:36:c1:d5:ca:22:
84:81:70:d2:c1:f2:0c:86:1f:da:a6:1b:0e:a9:ba:51:a6:72:
c4:4d:3b:b7:8a:ea:40:e4:c1:ae:05:b7:8f:a1:da:ec:7d:e8:
bd:2d:61:64:fc:05:00:bb:fd:ba:6b:68:8a:35:ee:5b:3e:58:
bd:51:d0:b5:56:4a:e9:8b:2e:e4:07:ca:3c:8c:78:66:30:b6:
c8:80:07:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:13 2026 by rpki-client