Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier: fVMtixehapqzVUQg8h0u1s1/W/96boun78eaN9sUlKI=
Subject key identifier: 4A:F5:FD:A5:69:52:B1:D5:34:49:D0:62:B6:0B:8D:BE:21:5E:ED:05
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial: 019CAD90BC2EFCB22FBA8BDCD5BEFE1F4C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number: 0B4E
Signing time: Mon 02 Mar 2026 08:01:09 +0000
Manifest this update: Mon 02 Mar 2026 08:01:09 +0000
Manifest next update: Tue 03 Mar 2026 08:01:09 +0000
Files and hashes: 1: GlykVOikn4XnRoLuWNGdM56c2EM.roa (hash: PEeEYZ6zGRcz+bkEXEUMwgvLYtQPN6tXT1/DZfRULqk=)
2: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: FClVdLfs8tI4+6E4UDPchU+xi403EiXI4935lkTJuHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:bc:2e:fc:b2:2f:ba:8b:dc:d5:be:fe:1f:4c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Validity
Not Before: Mar 2 08:01:09 2026 GMT
Not After : Mar 3 08:01:09 2026 GMT
Subject: CN=4af5fda56952b1d53449d062b60b8dbe215eed05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:f3:e6:25:b7:82:11:7e:ac:74:33:6c:7f:
6e:0b:54:59:51:b9:08:4f:7f:02:7c:eb:02:15:00:
29:1c:fd:72:67:2f:0b:8d:60:d0:80:84:c5:7a:a7:
82:30:66:3c:e4:e2:3a:be:82:96:19:ca:e1:71:e2:
b0:2c:9e:cd:d9:31:02:ff:0b:bf:b9:71:c5:35:ef:
7d:31:15:14:51:ea:b0:4f:5e:c1:63:0a:2a:6a:41:
72:b2:16:5b:d0:e7:5f:d5:d5:4a:f0:d7:73:43:d1:
ba:37:79:a5:96:c3:f4:ac:82:5d:5c:bb:ac:b6:53:
85:17:9e:cf:3c:e6:07:c3:19:e8:d4:4a:ff:4a:28:
8d:53:ac:fd:d0:f9:35:9e:8a:07:10:fb:e0:84:ce:
95:d6:70:25:96:cc:eb:9e:c4:9b:72:7c:b5:ce:82:
56:4a:28:a0:3d:7e:dc:d4:2a:a5:77:dd:e5:40:36:
33:9d:f2:b7:b3:74:b2:d1:0e:d4:fc:a0:a0:73:dd:
fa:e5:00:5d:0a:4b:cc:86:3e:d9:ee:70:6c:d4:0a:
c0:44:6d:1d:ae:70:80:c6:eb:b7:9c:e7:bf:d9:53:
9e:79:89:49:f3:e5:b1:22:92:31:d4:b7:ea:e6:c9:
96:c8:c0:38:fc:b5:f7:87:4d:fb:ae:ab:ef:77:9d:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F5:FD:A5:69:52:B1:D5:34:49:D0:62:B6:0B:8D:BE:21:5E:ED:05
X509v3 Authority Key Identifier:
keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8d:9c:ff:86:82:28:b5:16:2a:ac:13:58:ef:fb:00:08:84:
0a:8b:a0:72:43:59:e7:a3:45:99:13:18:f1:af:4f:eb:98:ab:
6f:9c:90:3f:9a:79:55:2b:5c:af:a1:52:78:61:4a:7a:d1:0a:
6f:d9:93:03:a8:f5:33:81:02:ef:02:1a:d2:21:9f:ed:b3:82:
9d:f8:ce:a7:fd:3d:1b:8c:a7:46:59:dd:a0:a0:20:ef:22:0e:
d6:74:63:19:2e:88:de:33:84:cf:e3:e2:be:c1:03:b4:33:58:
8d:a7:41:01:c9:48:58:56:d6:3f:09:4c:3a:8b:fd:a3:13:0f:
8c:27:14:77:36:7f:d3:0d:fb:db:00:1f:fb:16:a5:e7:a1:1a:
05:a1:39:df:06:7b:7f:2a:5e:d0:67:a0:95:56:ee:1c:86:9d:
77:4e:a3:0b:77:ba:95:c2:a6:05:d2:52:e2:ed:9a:d1:d9:af:
ce:41:43:21:42:bc:f7:a2:6f:54:ed:ee:4a:74:bf:ce:cf:57:
f6:df:3a:c4:4c:c4:0b:19:c3:88:66:c2:79:18:d5:11:70:5d:
a3:97:46:89:90:27:36:e2:f3:22:2f:34:f9:3f:44:42:57:81:
99:68:d1:90:4e:31:9b:8b:5f:82:d1:d2:3f:8b:1c:75:e2:34:
5d:bf:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:26 2026 by rpki-client