Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File: Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier: Naedh9eW0tsUYfMmJeN+SVZgw/00ml4iMSzHDCaGxzU=
Subject key identifier: 81:DB:E2:FA:01:EA:9C:89:69:68:8C:05:0A:60:18:3D:C5:AB:D0:DB
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial: 019CABA1CD7F6098E0AA463AA21CFEC3FAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number: 14D8
Signing time: Sun 01 Mar 2026 23:00:33 +0000
Manifest this update: Sun 01 Mar 2026 23:00:33 +0000
Manifest next update: Mon 02 Mar 2026 23:00:33 +0000
Files and hashes: 1: CFs9QijMQZXft1qyL9GnWPO1GTU.roa (hash: oKwOUscI0w8VVSNnLxFijPy/YKPFlOCw7H1bV/hxHVM=)
2: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: QxR8OlYlGtD9MvtQzO65mBkWnruvy9cSStBt9uHxIP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:cd:7f:60:98:e0:aa:46:3a:a2:1c:fe:c3:fa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Validity
Not Before: Mar 1 23:00:33 2026 GMT
Not After : Mar 2 23:00:33 2026 GMT
Subject: CN=81dbe2fa01ea9c8969688c050a60183dc5abd0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:9b:25:da:85:b9:e7:4b:c9:2a:0f:2b:17:
20:33:1b:02:e9:43:19:18:fd:85:66:2c:4d:52:16:
4d:43:79:1e:e4:3a:6c:f7:ba:bf:86:af:95:e7:68:
72:a9:f0:c0:37:0a:11:e5:52:64:48:c3:ff:b5:bb:
13:e9:4b:b3:50:19:02:2a:da:98:bf:19:5d:6a:fc:
60:f8:b1:50:10:9d:ab:e9:02:bc:91:2a:72:4c:6c:
17:ac:c8:8c:82:f9:15:7f:16:e4:67:da:7b:b9:80:
45:45:55:e7:a2:ad:5e:66:f2:f9:54:fa:59:e4:6a:
a0:6a:d5:61:cf:d6:01:d2:19:46:17:63:18:b2:2f:
9c:1c:03:1f:41:62:66:56:29:64:bc:e0:70:71:ce:
cf:91:00:55:75:f9:d6:04:3d:7b:46:a2:0b:95:45:
0d:d6:42:fc:8e:b4:27:80:b6:9f:9c:8e:65:ef:94:
b3:ee:83:f2:50:04:89:76:8a:92:fb:6b:98:01:e9:
3c:db:8a:0f:d2:4c:29:06:e5:c9:48:a2:1a:51:46:
70:78:4b:1a:91:cd:ea:4e:6a:d2:90:d2:b9:6d:e2:
75:4d:43:e5:99:5a:51:6e:68:68:90:f4:a4:f4:b1:
62:ac:6e:88:e6:d8:d6:24:08:8e:0b:bc:ec:47:46:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:E2:FA:01:EA:9C:89:69:68:8C:05:0A:60:18:3D:C5:AB:D0:DB
X509v3 Authority Key Identifier:
keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d2:92:8c:78:5c:cd:a6:3a:e8:e5:d0:51:ca:83:7c:c7:c3:
10:2e:bc:a3:60:d2:8c:ea:ef:81:d4:c5:4c:05:c5:e4:cd:18:
ae:32:2e:43:a2:2e:73:6e:10:30:3e:18:2f:9f:df:9e:e1:cf:
3c:22:fc:49:9a:cd:f4:f3:08:27:1e:15:f9:be:49:f3:95:3f:
e0:07:30:33:62:9d:f4:9a:68:18:1d:64:9d:00:cf:ad:df:34:
23:a6:6e:db:56:5a:8f:93:e8:28:b7:dc:dd:50:57:22:b8:da:
c1:eb:57:12:3b:d4:d9:18:e5:91:ba:fe:55:db:5e:e7:08:1b:
6e:cf:9d:9c:36:b6:24:d9:d2:62:4b:33:fe:31:d8:31:c2:54:
ac:9a:a7:ab:8f:9b:d8:7f:d7:29:2f:4b:de:a9:10:0a:5b:2f:
d7:d3:2b:22:53:49:58:85:30:84:a4:cc:12:2b:5e:f5:22:18:
1d:f3:d7:a2:f2:d2:4a:f9:10:6c:69:bd:a1:d3:6b:ab:7e:b0:
f3:2a:9f:53:a9:98:b4:1c:5c:9a:b2:df:ed:4f:f9:db:90:91:
b1:19:eb:a0:d1:69:81:8b:2f:db:27:38:d8:a0:4c:26:1b:a2:
1c:55:f0:9f:a6:ca:e8:de:50:54:71:48:16:dd:50:92:b9:18:
3f:b5:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:02 2026 by rpki-client