Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier: nXpb0EGU7+MYWYG7BrzC6U8Iufpn7dgQUyVdOJdtSao=
Subject key identifier: 49:76:5A:DF:28:B4:88:6C:8E:3E:B4:43:7C:6E:31:27:B5:C4:72:87
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 019CAD23174791C370845024156C843ED11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number: 158D
Signing time: Mon 02 Mar 2026 06:01:23 +0000
Manifest this update: Mon 02 Mar 2026 06:01:23 +0000
Manifest next update: Tue 03 Mar 2026 06:01:23 +0000
Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: uvqywnbZxi+TWpt9B+r2artfPhpaG2J8JBoTIJ5MRs0=)
2: rc_J4XOHhixLylCcfyExPkYQnWs.roa (hash: kaE6EoD8hyc9JZvUwXOFpWk4FxFp7L/CsoCCjqyPHoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:17:47:91:c3:70:84:50:24:15:6c:84:3e:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Mar 2 06:01:23 2026 GMT
Not After : Mar 3 06:01:23 2026 GMT
Subject: CN=49765adf28b4886c8e3eb4437c6e3127b5c47287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:28:b3:5a:7f:65:d6:e4:c7:0a:8c:ca:ca:
b2:ca:d8:1d:79:4a:0b:27:b5:ad:e3:20:c0:89:28:
2e:3e:9d:23:e7:15:de:ba:17:09:92:10:72:d9:2b:
fc:64:d8:eb:3a:9a:84:48:33:9a:52:a7:4a:a6:79:
b2:a6:01:bb:b3:7b:31:2e:d8:be:71:61:03:7c:b3:
7e:37:67:b1:9d:f0:0f:0c:c6:82:f9:32:d4:b9:f1:
0d:6c:0f:0a:51:9c:b9:a8:40:f8:ba:90:1c:cd:5e:
fe:a5:bd:a1:09:8d:28:d1:e5:09:05:e1:83:64:07:
10:c1:10:ee:22:04:6a:f0:73:96:a8:f6:90:75:b6:
77:5c:ba:e0:69:65:20:ef:13:98:97:79:02:05:e4:
93:d1:7a:1d:4a:a1:1a:d8:29:bd:d9:2d:89:d7:03:
91:1b:2b:0c:64:27:53:ff:7d:d3:37:87:8a:a1:e1:
34:b5:d3:8f:e4:a3:35:f8:a8:8a:9a:14:b1:b1:0e:
85:2e:f0:d2:24:0d:df:37:39:53:1f:fa:3d:11:12:
4c:1f:92:04:66:d9:09:6f:0a:10:9c:42:de:a6:5f:
84:a4:f5:bf:b3:20:96:2e:15:d2:45:bc:3b:4d:5e:
dd:4e:8a:a6:d3:3a:a7:df:a2:2c:ed:32:28:47:e1:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:76:5A:DF:28:B4:88:6C:8E:3E:B4:43:7C:6E:31:27:B5:C4:72:87
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2c:ed:49:df:e4:0c:63:e4:5f:fb:2a:69:4b:33:35:bd:c7:
e4:9d:0d:a2:6d:2c:24:44:c9:ab:64:f9:35:aa:ef:b6:dd:eb:
e6:ef:8c:2c:ce:8c:02:05:cb:94:02:26:41:27:84:aa:42:2f:
27:89:c0:30:2f:88:b5:34:29:44:53:32:11:ee:47:9b:83:a0:
ae:ca:5d:35:2f:4e:3e:eb:68:aa:12:9c:5d:1e:96:c0:51:f3:
45:9a:54:83:9f:4e:56:91:4f:06:df:c7:64:72:16:04:a9:a9:
82:7a:8e:ed:5f:09:84:dc:12:45:02:05:87:24:51:61:d3:30:
2e:65:8a:3a:04:0f:b7:ea:4f:12:ae:36:62:9d:94:b5:54:ef:
6c:d9:a2:5f:ae:d8:d7:c9:a6:7b:b5:dd:7a:2d:1a:f2:97:69:
c6:30:4a:c4:53:86:82:47:75:83:be:b0:7b:8c:46:52:39:11:
c0:b8:75:f6:55:a0:e1:9e:6b:45:40:46:54:19:c9:8c:a2:83:
e9:5f:2c:c9:11:d4:b4:9b:93:fa:9c:e1:38:92:cf:fd:f6:46:
45:27:f1:c5:d5:ea:a1:2e:ff:91:72:73:8d:96:6e:f9:27:3f:
77:72:4c:08:d9:3f:b1:d0:f0:42:da:d3:88:eb:b4:3e:c6:9c:
7d:29:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:20 2026 by rpki-client