Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
File: JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json)
Hash identifier: pfS0R5R4tjV34TqJPXvXE6+XO2tWzDqoJO0s7oSPGsc=
Subject key identifier: DC:40:DF:F8:CE:A1:F1:D0:14:21:18:62:C9:11:98:3E:17:EF:1E:96
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial: 019CAD22A99276CAE28FDC32BAFFBB781DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
Manifest number: 137B
Signing time: Mon 02 Mar 2026 06:00:55 +0000
Manifest this update: Mon 02 Mar 2026 06:00:55 +0000
Manifest next update: Tue 03 Mar 2026 06:00:55 +0000
Files and hashes: 1: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: n673/gJFhBTf0EJFDbihptZ/MaUpKnKrmwFKYx671FU=)
2: xLfq7fHWOKfAm3-LjGEX86KU2PU.roa (hash: vmgwgfjyeiWhoQrfreo459MoQX1wxVVEmAYNgnHfUwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a9:92:76:ca:e2:8f:dc:32:ba:ff:bb:78:1d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Validity
Not Before: Mar 2 06:00:55 2026 GMT
Not After : Mar 3 06:00:55 2026 GMT
Subject: CN=dc40dff8cea1f1d014211862c911983e17ef1e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:06:16:cd:74:dc:94:cb:fb:c6:4e:50:6e:
4a:4c:18:ac:57:6d:d8:0e:55:8c:79:0f:ff:59:c1:
bb:40:57:5d:0d:a9:14:b5:d3:98:ce:c2:25:42:9d:
b6:bc:e0:07:da:59:78:56:2c:88:51:fb:19:45:79:
ab:02:ea:bb:e3:18:aa:ff:22:3d:61:44:71:79:71:
41:9e:d9:73:8a:28:67:9c:93:56:a0:8c:ab:e3:04:
01:08:82:62:24:71:70:a1:83:04:c2:72:7f:f4:ae:
77:d8:80:c8:4c:4f:d0:2c:54:03:09:c3:ef:b7:bd:
12:4e:1d:03:47:c5:ef:e2:f8:06:99:10:ac:19:98:
b8:07:79:24:28:29:9f:33:32:89:46:38:6b:bc:66:
6a:92:82:e0:04:e6:2d:28:e5:1f:78:53:c2:c9:17:
e7:8a:a8:5e:ac:df:01:eb:74:d8:05:cc:8b:80:6d:
26:f1:6a:c8:f4:3e:01:f9:e0:7d:d0:e7:ca:10:b9:
be:3a:63:3e:8d:79:71:67:02:43:54:f1:85:3d:7d:
60:ba:e0:3c:5a:b1:6c:3c:74:e9:01:64:44:0d:da:
06:46:61:c9:17:0e:2c:db:f4:a9:b5:59:71:1a:74:
9d:ab:de:74:df:33:7c:bd:d3:87:38:ad:11:46:e0:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:DF:F8:CE:A1:F1:D0:14:21:18:62:C9:11:98:3E:17:EF:1E:96
X509v3 Authority Key Identifier:
keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3a:12:a5:96:db:13:e9:4f:a4:5b:71:04:e7:db:df:cb:bb:
1b:fb:fa:4c:02:47:e4:95:46:e5:26:57:ae:c2:2d:17:14:91:
e3:a8:5d:01:d8:65:16:e6:60:3e:2e:ca:0e:12:f1:b0:ba:ba:
93:41:9e:fa:63:e9:60:f9:80:5e:8e:ae:09:68:5f:4e:7d:d9:
4e:70:40:fa:6d:b7:9a:44:ea:bd:9a:31:59:e7:18:9d:9c:fa:
51:af:69:94:71:4c:bd:18:ed:25:d3:67:cb:ac:53:71:39:9c:
96:64:0b:78:f9:7e:c1:17:78:ce:e2:39:e1:1e:d8:19:b8:52:
31:9c:83:60:b5:4f:e4:7d:b1:1d:0a:02:31:5e:f3:a2:2d:99:
20:e8:65:86:8f:1c:3e:cd:bf:b7:23:43:b1:64:fc:9d:6a:4f:
ba:21:4c:cb:dd:2b:60:da:91:60:49:f8:21:c5:c6:d6:2d:3f:
ff:c9:81:4b:18:99:6e:65:f3:41:29:92:fa:0c:6e:6e:5b:08:
0b:58:b8:ad:00:86:de:e7:c8:36:d2:9f:0c:f9:c2:d8:ac:e2:
2f:7f:95:a5:61:da:6d:d9:d6:78:f2:7f:01:c6:ef:f6:54:e6:
b5:65:0c:84:d4:f7:52:6b:c7:07:87:85:dd:2c:6b:be:6b:ec:
0a:64:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:06 2026 by rpki-client