Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: VgORCMS1qTopaDROry75bKsZG1CpI+01qEPIQzxH1+g=
Subject key identifier: C1:F8:73:8D:3E:2A:94:89:F2:37:D5:74:C7:E7:FA:07:6D:E9:E8:59
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 019CAC7E029F9A74C5199DBD0453D3A0EDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 05CE
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: NQQRESFxIELLxDvWeKX38c58OEw7EEu5VXDcR5GSt7k=)
2: m1C5L7CbhAcIOumOYRBFsLzm0eE.roa (hash: SYAtLc5fN9d8S/lPjJCzeOzecwlCkRAmvHG5vPw/tRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:02:9f:9a:74:c5:19:9d:bd:04:53:d3:a0:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=c1f8738d3e2a9489f237d574c7e7fa076de9e859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:d3:83:e9:5b:2d:09:61:d9:38:29:5c:d4:
ca:8b:08:1b:0d:97:a9:c5:4e:59:d0:d8:e2:6c:c9:
61:b3:07:e8:3e:d9:07:21:74:2e:f9:ae:d3:a2:76:
1c:60:e5:3b:6c:cc:fa:84:ca:f4:fd:f2:06:74:81:
ea:07:d2:cc:6a:a0:c2:ed:c1:13:cb:9a:34:00:80:
f8:43:8c:b6:fd:bf:98:fe:47:6a:fd:ba:20:0c:cc:
84:49:9b:e3:b1:68:c3:8d:45:4d:26:c3:cc:d1:e3:
3c:37:f0:fa:bd:78:64:fb:5a:e5:07:9d:c1:86:3c:
dc:82:e0:46:91:15:6e:ca:8e:15:02:70:1c:6d:e7:
08:6e:3a:af:f9:85:a1:ac:07:a9:ae:7e:17:26:c2:
90:88:bf:7e:4d:da:ac:d4:0c:f5:93:7d:67:de:00:
04:f8:06:8c:77:33:69:e8:81:bf:eb:0a:83:b9:57:
ea:62:5b:4f:2b:fd:fc:73:11:51:db:45:cc:81:6f:
a1:36:0a:8a:b8:c2:df:0b:c5:ee:d2:1e:36:2d:b5:
83:ea:1e:ea:ec:03:11:90:6c:f1:f4:e8:51:98:a2:
d6:9e:a0:5c:e3:ac:e8:29:27:52:c1:3e:f2:23:18:
db:2d:da:6b:10:47:e2:da:1d:17:85:2b:bb:fe:e0:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:73:8D:3E:2A:94:89:F2:37:D5:74:C7:E7:FA:07:6D:E9:E8:59
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2c:d0:1c:f5:69:83:39:eb:19:2b:6e:92:3e:a3:a1:8e:79:
8e:cf:fb:62:14:0a:58:30:9c:82:65:74:b8:c3:53:c2:a7:fe:
a6:26:b0:1d:e7:8d:62:d0:48:c9:17:b1:41:3f:ef:f7:13:b6:
4b:c0:ea:71:3a:f6:3c:44:ad:81:01:11:6b:ff:b6:b9:ca:1f:
80:1e:c5:91:39:f5:d5:51:8c:2b:9a:cc:94:4b:d8:7c:b8:25:
7f:18:db:19:d8:fb:be:0f:65:ce:8b:69:00:dc:4f:25:ac:35:
73:68:9f:d0:4e:62:73:84:5b:68:68:f3:19:c4:e7:d9:88:10:
24:d8:10:ed:83:92:57:a2:e7:ab:ed:29:06:07:d4:d4:61:19:
da:46:f3:69:57:8f:74:83:ae:fa:28:3c:c9:97:51:5c:ca:06:
1a:9a:27:b4:ac:fe:09:6e:5b:1e:48:53:88:f4:c4:4e:20:12:
43:cd:4f:43:43:c0:da:f6:64:06:1c:3e:07:cd:ce:76:0c:d3:
82:d7:da:ee:d8:bd:b5:f5:12:c8:3f:82:4e:35:5e:8a:21:9a:
0f:42:33:0c:78:cc:27:50:c5:6d:02:9d:af:b2:4d:ea:68:75:
75:22:c4:e2:21:2e:bd:9e:a9:66:a5:64:25:da:7a:a6:b3:b3:
4e:0f:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:06 2026 by rpki-client