Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: P/l3uYU13QNMmYdqCmeB9JM+PzPutTMrZKU0JSRkIBw=
Subject key identifier: 04:10:94:BA:24:16:AC:14:C9:BE:EC:34:03:1D:B6:2C:06:1A:85:B7
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 019CAB34400AB133B5ABC7B159230A0D8A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: OM4KLQmzyd_Wm52APVHhgRe4ToE.roa (hash: yWOF8Zx5ObpIqx5RDQmGc/nckpLK3IVHrsfnnr9/bl4=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: sO3rxb92H8wpTcRH8MCZqvfTjjDbtOH8NDJ7GAg68/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:40:0a:b1:33:b5:ab:c7:b1:59:23:0a:0d:8a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=041094ba2416ac14c9beec34031db62c061a85b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:00:f2:0c:0c:d9:bb:2d:22:ff:9c:b6:7e:
5a:f9:ca:f3:1e:92:79:5c:43:74:a2:0c:04:12:48:
88:13:f8:a8:90:04:f7:10:92:e0:75:df:b7:46:67:
fc:ff:97:31:f3:e0:52:ef:e5:27:6a:bc:21:3b:e3:
50:c8:ac:ce:75:4a:7d:b3:54:45:fc:8b:fd:72:6d:
7a:f4:e0:77:95:38:37:f2:25:d6:4f:5c:77:ac:66:
5a:58:5e:97:8e:ad:ba:88:02:f5:ad:84:84:a2:b2:
5e:b5:ad:41:6f:83:bd:36:f0:72:6a:67:f1:2c:c4:
c6:63:b4:0b:a7:59:93:1d:c0:ea:83:d7:4c:51:97:
a6:8d:c0:bf:05:91:ce:2b:50:b8:60:84:5c:e7:47:
51:f1:8f:58:72:fd:1b:ab:2d:73:99:15:dd:9f:b8:
f9:94:93:87:78:95:0b:65:02:2b:10:4f:52:d3:0a:
46:06:bf:bb:02:1c:89:be:ef:37:75:4c:32:8c:f1:
53:53:77:e6:8c:c3:aa:f2:b5:d8:b4:ed:0a:df:83:
75:5c:02:01:80:90:ba:63:ce:0a:79:82:3a:47:14:
76:14:f4:c0:1b:7d:43:6d:3e:09:7d:fa:af:c7:d3:
35:fd:d6:e1:a1:d2:5f:17:bb:40:73:d3:6c:4a:bb:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:94:BA:24:16:AC:14:C9:BE:EC:34:03:1D:B6:2C:06:1A:85:B7
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bd:ff:5d:f8:bb:06:c3:b0:5a:61:8a:81:41:68:1b:11:45:
96:9f:32:c0:ac:6d:e0:a3:0d:08:aa:38:0f:19:31:04:3b:4d:
d0:9f:91:b9:d5:95:a2:5b:13:5d:33:d8:f6:7e:f5:0f:43:11:
57:a0:2c:85:01:47:0a:bf:10:33:e3:60:40:91:4a:93:00:c3:
e4:38:3a:ff:b7:5e:e1:3d:8a:d4:03:4e:d7:08:de:ad:d9:f4:
15:86:17:6a:f1:64:5c:88:12:1c:4c:cd:82:24:9d:1c:b9:bb:
0f:c6:35:39:66:ec:8c:be:64:4b:83:c3:d7:24:1f:a9:06:32:
92:73:64:ce:74:ee:fa:0a:b1:a1:de:04:2d:2c:8d:96:98:c1:
ae:09:c8:45:ed:da:12:40:31:75:f7:ed:b9:41:d3:95:a4:cc:
56:ee:f7:c2:fa:5c:b1:2d:36:f8:6d:47:ee:bf:14:6f:47:9a:
49:c9:10:a9:6e:b1:b9:37:47:37:33:65:9d:8d:63:02:53:d6:
52:65:f7:dd:62:66:0c:0e:a6:19:73:3e:06:46:fc:a7:9b:3f:
9c:4b:e8:dc:3a:1f:72:66:c2:e4:0a:94:c4:82:e4:a4:bf:e0:
79:bc:0f:fc:f8:d7:62:be:95:24:fb:df:67:8a:13:d8:54:94:
e5:4e:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:01 2026 by rpki-client