Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: zBxX+HgVUHDc2hQ6FY3gD/vYo/+j003l6nAflTclT+c=
Subject key identifier: 6A:77:48:FD:27:7D:99:2A:64:D0:2F:F6:CD:B8:43:97:C8:B7:64:B8
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 019CAB6AFBA3406E239DA73943A29F21AE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 22:00:40 +0000
Manifest this update: Sun 01 Mar 2026 22:00:40 +0000
Manifest next update: Mon 02 Mar 2026 22:00:40 +0000
Files and hashes: 1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=)
2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: NzCabuOF6WnwxZcogmKp2J+QYYYIb0sThd3yldlsijo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fb:a3:40:6e:23:9d:a7:39:43:a2:9f:21:ae:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Mar 1 22:00:40 2026 GMT
Not After : Mar 2 22:00:40 2026 GMT
Subject: CN=6a7748fd277d992a64d02ff6cdb84397c8b764b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:b5:91:28:87:c5:38:a4:82:c0:7a:c5:9f:
37:c2:7f:44:46:6d:d3:b9:ec:96:1e:20:e6:98:30:
b0:2e:31:e0:8d:8b:20:65:cd:b0:3a:75:0d:e2:d2:
a9:dd:a8:16:82:8b:fc:3c:9b:81:48:07:ca:65:84:
72:49:d8:f1:04:c3:9d:26:70:be:5c:4e:d9:78:96:
16:9b:32:80:8c:bc:e4:a3:0b:b9:86:dd:61:7f:43:
ca:7e:2e:e7:77:7a:3b:80:a5:9f:7b:d2:b8:c9:9c:
76:de:82:d3:61:0e:8a:f8:ea:7d:10:2b:82:82:6a:
58:0a:f0:ea:f0:1b:63:31:34:a9:78:15:3d:45:a7:
38:3c:18:63:14:03:1d:bd:9a:db:f7:1f:75:d5:be:
ec:20:70:e5:75:de:cd:60:fe:bf:c9:e3:81:7c:78:
83:58:f0:5d:13:87:6f:f2:93:d4:d3:ec:b6:e8:51:
2a:9f:a7:11:04:49:7e:69:e0:17:d3:9f:b9:d5:99:
b8:58:8a:b5:d3:0b:44:3c:71:31:fb:b9:d4:61:d1:
ed:10:99:0d:48:1b:e5:8f:cd:4d:37:30:9f:be:f7:
15:d1:19:d7:f8:44:9c:76:db:20:2f:b7:6a:d4:83:
56:d1:39:ea:38:35:b7:8c:ff:fe:91:4c:60:8a:6d:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:77:48:FD:27:7D:99:2A:64:D0:2F:F6:CD:B8:43:97:C8:B7:64:B8
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:08:1c:5c:a6:82:a6:f0:98:0c:84:17:5c:89:24:4b:d9:1a:
58:a7:26:2d:4c:92:5f:3a:56:89:cd:40:9a:b7:11:48:59:1e:
72:64:80:d6:d8:2a:7e:fd:e3:e8:ed:8b:f6:01:9c:0d:8d:83:
7d:26:47:78:a5:ef:98:30:97:83:63:c1:98:c2:e2:23:91:05:
cf:bd:4b:08:a3:52:e8:01:96:20:33:4b:d6:77:73:5e:87:2c:
73:bb:67:07:35:79:a4:0b:0e:fa:72:00:d1:9e:48:c2:09:b2:
d9:f1:a9:18:b3:7b:9b:37:27:ff:62:0d:72:ca:52:d5:42:c3:
7d:e1:84:59:27:a4:a8:04:21:41:27:c6:d5:f4:55:03:d3:3d:
fd:5f:fa:c8:2a:d7:34:fc:fc:b9:3a:5f:60:c4:ff:be:36:6c:
c6:1a:bd:81:2d:59:ef:0d:1c:32:ce:8a:eb:52:27:ad:44:21:
62:51:9e:77:32:9c:9e:6c:ce:e9:90:de:c2:51:49:21:5c:24:
3f:b8:e6:b4:b0:ba:44:c3:64:9f:89:10:49:a7:62:00:d7:3e:
9d:60:e5:ce:9b:0a:84:fb:75:63:7b:70:07:82:1b:8e:93:7d:
0a:99:d4:11:7f:01:bd:c7:11:95:d8:ff:b5:71:2b:b6:09:a2:
5d:bd:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:39 2026 by rpki-client