Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier: 3+ki2SxT9nwcViq7LIKN+3Q55daMwH5DJlwqhWjrjV4=
Subject key identifier: 53:97:20:28:2C:6F:38:30:EE:A8:F4:A9:03:E8:6A:CD:BB:95:1A:8C
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial: 019CA833583E9401FDEE84B3DEB7C7A5BAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number: 08B5
Signing time: Sun 01 Mar 2026 07:01:02 +0000
Manifest this update: Sun 01 Mar 2026 07:01:02 +0000
Manifest next update: Mon 02 Mar 2026 07:01:02 +0000
Files and hashes: 1: 2l98OJUUaR9ta-P_Yl3BL25xX6E.asa (hash: epA5OEpKpO6J6HOrXhbe4eK7JMJAieEm7djq/rBNlXc=)
2: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: R1T6qwQjlnpIQ9FHZFP3CJ3Eidg9ZHV5ZPpY0mjiyJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:58:3e:94:01:fd:ee:84:b3:de:b7:c7:a5:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Validity
Not Before: Mar 1 07:01:02 2026 GMT
Not After : Mar 2 07:01:02 2026 GMT
Subject: CN=539720282c6f3830eea8f4a903e86acdbb951a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:5c:89:75:19:8d:15:55:d0:1a:0c:22:f8:
71:be:16:0e:ce:13:33:bb:fa:f4:f5:1a:63:1b:3f:
9c:83:d3:36:36:43:5c:4d:e9:eb:dd:e8:e0:21:47:
c3:31:09:81:76:31:8d:9e:65:40:74:a2:02:c1:eb:
82:50:82:cb:ac:62:19:3a:11:8e:da:58:1d:e6:c4:
ac:72:c9:6a:3f:a9:5e:29:a1:00:cc:62:29:7c:19:
7e:94:2a:d7:a5:b2:75:ec:41:5f:03:db:61:1d:a5:
92:22:c9:a1:0d:8c:cc:ea:66:9a:1d:31:fe:55:85:
23:44:b9:d2:07:70:af:cd:9b:52:30:ed:f0:f9:0d:
ca:89:32:6b:d1:d2:54:7a:b7:06:c3:76:22:59:82:
e2:52:a8:13:56:1a:c1:70:48:28:14:90:67:55:50:
3d:c2:e0:46:8f:c8:e0:38:d7:f5:21:18:e1:ca:b0:
5a:91:3b:24:15:6a:b6:8b:e7:b1:d3:23:68:95:a4:
67:c9:d4:fc:ec:b9:23:30:ab:d6:04:fd:06:7d:e3:
4b:5a:c9:98:74:4a:1d:84:b6:f6:15:51:7f:57:fc:
86:b0:bf:87:a9:90:07:17:61:7a:34:66:be:80:f2:
75:1f:fa:46:8a:af:f2:4a:02:21:ef:50:e9:26:9b:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:20:28:2C:6F:38:30:EE:A8:F4:A9:03:E8:6A:CD:BB:95:1A:8C
X509v3 Authority Key Identifier:
keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a7:71:bf:ca:29:a9:14:07:3c:c9:89:fe:31:96:fd:91:82:
da:2a:48:fe:32:d0:64:fa:51:e7:b7:2a:9d:f2:b7:6a:a8:f1:
e8:18:77:3e:5e:7c:b6:bf:d1:87:1f:c0:59:c0:9d:7c:97:d1:
6d:e6:94:98:2f:0a:58:2d:2c:ce:a6:02:62:13:25:f5:38:22:
e0:79:a1:3e:99:27:65:22:17:8e:6c:c4:12:39:f7:5d:d4:23:
f8:91:eb:e3:80:bf:a9:e4:5c:9b:e9:ad:f5:35:88:43:6b:c1:
a3:5b:32:40:8a:b1:41:0d:a6:a2:72:cf:44:0e:ad:ec:cf:bb:
73:16:f7:0f:7c:ba:25:e2:4f:95:05:77:3d:19:92:f1:fc:41:
22:7a:70:83:69:05:23:e4:67:12:55:79:e1:0f:7b:d9:e3:13:
9b:43:52:da:ac:da:72:36:98:f6:2f:4e:0a:e9:fa:f9:76:c8:
81:a2:27:28:15:02:b5:c5:15:ff:84:ac:f2:69:10:c1:72:f4:
80:fc:cd:6c:28:e4:20:08:fc:af:b8:05:ff:a4:34:d1:39:7b:
30:a4:7f:03:bc:8e:a1:e8:8f:1b:90:72:d1:d7:16:1b:59:d2:
f1:c5:d3:f6:88:3b:ee:6b:1a:3b:89:bf:e8:35:b8:c5:81:d7:
09:81:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:49 2026 by rpki-client