Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: T9hpIDi0cvzZrbAnlzG1o6OGaTK+e8hGVrUcwaSzmfs=
Subject key identifier: 07:6A:18:07:81:70:CC:3D:11:D7:36:10:9D:8B:FA:71:BE:EA:56:C7
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019CAAFD26E9EFC4C6BD133FCE4F0189CF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: OH94C2ZRCxPh2BeqFsOJKsUiIRCkdZ+yb8OKtBiF2m8=)
2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:26:e9:ef:c4:c6:bd:13:3f:ce:4f:01:89:cf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=076a18078170cc3d11d736109d8bfa71beea56c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:33:ea:ed:ee:09:a4:5c:e0:7b:03:ca:40:
e0:b4:0e:41:46:6a:5b:c2:52:50:31:ef:9b:af:79:
9b:cc:11:01:c6:a7:54:14:ff:6b:fe:3e:79:25:38:
cc:6c:28:85:d1:2e:78:cc:97:ef:ec:03:7a:4f:af:
53:d4:15:d6:01:26:af:3d:1b:06:e2:d9:f7:a0:4f:
65:35:8c:cc:fe:76:25:2b:45:a7:4c:4c:6c:63:13:
91:8c:43:c7:5b:f7:c4:bc:54:32:6c:82:e2:7a:21:
a2:9d:66:2e:bb:ee:7e:75:6b:5c:5f:b3:34:45:c7:
dd:af:44:1f:a6:76:67:0e:eb:84:c9:0d:b6:9f:3f:
85:ae:cc:61:28:07:b5:18:a1:35:b6:38:14:6b:a6:
a2:44:78:b0:19:e5:8e:bc:d4:e3:e3:14:61:59:22:
84:7b:01:03:8a:c3:a9:c9:6d:8f:56:1c:6a:38:9c:
52:1e:00:0d:f1:5f:11:ec:1f:a0:de:53:bb:41:96:
c7:bf:17:e1:75:8c:e3:8c:86:03:67:98:1e:bf:8b:
65:b4:da:a3:85:4a:51:6c:9e:e4:8f:df:f1:65:3e:
d9:bb:ea:7d:41:02:38:63:97:0e:55:72:b0:4e:71:
59:ac:5c:6c:c9:e5:13:79:18:39:c5:02:c4:eb:7a:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6A:18:07:81:70:CC:3D:11:D7:36:10:9D:8B:FA:71:BE:EA:56:C7
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:45:a7:cf:8a:bd:b7:15:3f:83:bf:50:98:61:ea:ff:f6:e0:
77:f4:0d:58:f2:d4:ec:f6:b6:39:45:ff:25:0e:39:98:84:2e:
59:e6:47:fc:a9:59:8d:c7:d1:c3:e6:99:4a:10:a2:77:37:d2:
4a:0e:5e:c5:af:29:2d:9e:24:fb:ff:70:71:08:cf:76:30:b6:
3a:0a:85:99:8b:94:2d:8d:72:18:af:0c:23:e5:ce:ac:18:07:
b4:75:83:81:10:04:df:43:6a:bc:04:88:af:a9:e8:97:ae:2b:
18:80:b4:b6:ad:ac:3b:52:10:04:2e:8c:91:75:00:fd:fd:02:
0d:cd:0f:b9:95:1a:9b:7e:7d:a9:5c:1f:0f:6b:50:28:ba:fa:
9b:16:1e:67:44:81:ab:d9:e6:6f:d3:ec:75:46:e2:92:35:70:
4f:78:8f:d9:10:88:5a:c6:28:df:3b:c5:5a:77:87:43:38:a3:
e0:2d:8c:cb:b6:e0:0c:f6:0c:e6:7d:a7:0d:c9:9c:7d:23:e2:
69:80:09:97:f6:0e:a5:b4:5e:c3:db:8c:34:bd:a9:1a:c9:41:
49:08:96:4b:0f:3c:d7:11:a1:5b:50:c9:41:af:f7:b1:a4:8a:
a2:6b:43:88:e6:2e:09:c6:35:37:9e:db:3a:97:32:30:8a:4f:
42:e0:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:50 2026 by rpki-client