Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: Aj2RcakWbjUrOF/ynyDSAo/zVJyv5B9F0VlUs86iQeA=
Subject key identifier: A2:4F:54:B0:F1:A4:B3:9C:EB:8F:22:8B:93:5D:1C:ED:70:B4:46:EA
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 019CAC47967A48A68829F4F57D6A06C8D4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 1465
Signing time: Mon 02 Mar 2026 02:01:38 +0000
Manifest this update: Mon 02 Mar 2026 02:01:38 +0000
Manifest next update: Tue 03 Mar 2026 02:01:38 +0000
Files and hashes: 1: 5BqcS5YAd2CqG1Bqr1DMz14XLBs.roa (hash: hc3I67ClpXYlhmM2IyIqXgYM+yQAnq3AX4m72or+MyQ=)
2: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: aDo0m3NK+lZiduxbLSHB3z/7GCzf6ZjeYrxQsadXyLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:96:7a:48:a6:88:29:f4:f5:7d:6a:06:c8:d4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Mar 2 02:01:38 2026 GMT
Not After : Mar 3 02:01:38 2026 GMT
Subject: CN=a24f54b0f1a4b39ceb8f228b935d1ced70b446ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:ab:c9:d3:92:06:47:75:19:af:8c:b0:9c:
84:c4:c4:9f:43:04:f6:e4:35:b7:dd:41:95:43:87:
1b:0b:85:8d:7a:61:b4:54:a2:11:f7:5f:44:27:f3:
28:b4:d5:47:60:98:8e:2b:47:59:29:40:30:97:02:
df:a0:a3:e1:b0:70:fd:7c:7a:63:94:ce:2f:88:ad:
80:7f:a9:0a:d0:3d:c4:0b:24:be:9f:e0:03:12:bc:
5b:ee:36:84:56:ef:cd:32:0a:1f:87:b8:56:66:c4:
17:6b:fc:29:c7:14:4a:db:a0:de:f0:11:b3:07:31:
26:97:1f:3f:42:7e:ba:30:2b:30:74:b0:d6:1e:a8:
c4:6e:34:3e:15:9e:13:4b:48:c1:db:94:87:cf:b0:
2a:ca:cc:6b:e4:c2:83:2f:db:fc:9c:73:06:a3:8d:
07:a5:ec:13:7e:b5:f7:cc:d1:84:d8:25:ed:4c:91:
64:e3:c1:6c:6f:fb:1e:b2:29:13:d6:cf:ec:69:c0:
64:3f:3d:2f:9e:0b:c5:34:ab:12:98:9d:f5:5c:ca:
3e:25:20:c4:2f:64:6b:6d:ae:82:e5:e0:49:c2:fe:
31:9a:06:90:9a:6a:63:24:da:19:8e:5d:1f:c4:3f:
6e:13:46:24:4e:a3:f9:b3:44:9b:35:68:5b:91:c5:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:54:B0:F1:A4:B3:9C:EB:8F:22:8B:93:5D:1C:ED:70:B4:46:EA
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ab:bf:22:5c:a7:ed:3a:b8:61:8a:23:c4:a6:58:bd:ac:93:
b5:70:70:d7:af:5d:e7:ec:39:95:ec:8b:f2:bf:6a:d9:18:c5:
ee:bd:b5:b6:be:3f:ba:da:ad:ad:cc:19:18:a6:b6:0e:78:b5:
fc:f8:8f:1b:6f:1a:84:52:32:02:c8:72:bf:2f:4c:e7:d9:7e:
d8:32:7f:46:ab:9c:af:fc:5a:d6:08:ad:4c:d0:b5:79:f2:8b:
b5:7a:f9:eb:97:65:77:2b:8d:31:0e:e3:ca:46:c1:98:6f:d8:
63:15:c6:24:88:e2:57:e9:9b:b0:f4:0a:f3:78:b9:fd:55:6d:
28:d3:0c:63:2e:5a:7d:c1:32:fc:5e:a8:d1:1e:a1:ec:d9:61:
d0:ea:77:a7:ad:2b:bf:e7:c4:bc:c6:ad:f9:5f:5f:bb:5b:0d:
cc:42:6f:ef:f1:1a:1e:18:9f:1c:12:ee:11:38:e4:82:fe:71:
c3:11:1b:ae:78:ac:c2:51:1d:fa:09:65:4d:25:82:57:57:9a:
5a:13:8c:51:c5:4d:78:09:23:71:9e:0c:17:81:f2:e4:6f:c9:
b7:fa:58:25:73:bf:a0:bf:71:ff:b9:99:5a:bf:e3:31:cf:e4:
63:54:8a:8a:e5:90:a2:9e:29:88:21:35:9c:57:ee:c9:c2:db:
40:7b:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:38 2026 by rpki-client