Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: b/0n4yMMIHk5QQjMK7j45u3I1MB93cs0pCxpM9AJrMQ=
Subject key identifier: 03:F5:4D:13:82:4A:DA:42:4A:AD:BD:F0:32:0A:E7:C1:B4:6D:96:E7
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019CA94604A18089B53886E830362FDDA588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 15A1
Signing time: Sun 01 Mar 2026 12:01:03 +0000
Manifest this update: Sun 01 Mar 2026 12:01:03 +0000
Manifest next update: Mon 02 Mar 2026 12:01:03 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: cyQpEWpYlpGpihRJckLEETBmWFFFDHlwLfE+XKptD8k=)
2: MAhA7gXCpIgcNBSezx0_LDNuYeE.roa (hash: gtd0FuYBYyd/LSXZ+56QOfyLvd9q78kArCStkyYOOCk=)
3: mzscA40zEoiH9Kq_9VBI19qX6D0.roa (hash: uudB9v4jzWmfwl14GqVDG6tHwsesFOICQ29lxjuw2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:04:a1:80:89:b5:38:86:e8:30:36:2f:dd:a5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Mar 1 12:01:03 2026 GMT
Not After : Mar 2 12:01:03 2026 GMT
Subject: CN=03f54d13824ada424aadbdf0320ae7c1b46d96e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:de:05:2a:bb:ae:98:94:d7:76:ec:1a:b9:
41:79:c4:9f:df:e0:f8:69:43:1b:22:2a:e9:23:06:
57:ad:82:cc:5a:b8:7a:9b:41:29:07:0d:3b:a2:73:
c7:1c:25:65:03:00:ae:eb:be:49:43:d9:08:d6:24:
bc:6a:ab:eb:dc:23:a3:a4:2f:24:90:b6:d5:5e:5a:
7a:0e:d9:e5:10:20:f0:13:be:20:2e:0f:b2:48:70:
99:47:4f:c1:d8:46:3d:a6:c7:87:81:2b:d4:51:a5:
59:1f:b0:63:7c:1e:22:f0:17:8c:a5:5b:16:41:53:
1f:a8:30:59:2d:7b:c8:24:84:c9:17:45:27:91:e2:
0c:b0:44:68:92:26:75:eb:81:c5:85:1b:25:49:c8:
f4:7b:9c:d4:87:0d:cb:f9:18:28:a3:e5:b2:48:de:
3d:8a:cf:c5:30:d1:e5:d8:f1:4c:3b:ac:6b:b8:57:
3e:f1:92:a4:9d:17:69:81:30:e0:c1:62:01:f0:e6:
46:23:98:af:ab:05:00:77:4c:b6:f4:43:80:7b:76:
4a:3a:7e:fd:b8:3f:62:c8:00:06:47:c1:8a:b5:02:
1d:41:71:23:ac:d2:01:c9:5f:1a:b9:ce:b6:b7:ba:
be:c7:13:6d:df:2c:ad:e5:62:7e:0b:c7:5c:d6:83:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F5:4D:13:82:4A:DA:42:4A:AD:BD:F0:32:0A:E7:C1:B4:6D:96:E7
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:62:f0:c3:3c:cc:3e:44:54:26:ad:d5:f1:36:05:98:e0:9e:
6b:7d:1d:c8:8c:91:5d:b5:3a:8d:b6:b4:7f:b4:10:e6:65:1c:
0a:fd:fc:53:f7:9f:19:02:20:53:b9:7d:c2:29:b2:c7:01:af:
c2:9c:1b:81:53:0e:d5:3d:0d:31:6a:e7:aa:aa:0d:f9:77:12:
4a:f2:72:81:0d:d2:8a:c4:69:25:9f:7d:20:22:84:c9:ca:77:
bc:b7:22:83:fc:d8:28:d9:a5:61:2e:73:46:a9:36:9f:5d:25:
d4:99:19:67:25:10:db:1e:f8:04:5f:91:14:04:c4:5b:8f:5f:
17:09:d3:7a:95:dc:e9:6e:19:f2:3b:7a:f7:7f:1f:be:5d:2f:
85:da:c2:8b:a9:d0:20:22:39:3a:7c:ba:01:3c:fa:72:70:bd:
cf:c1:57:a1:18:c7:d4:6b:ad:42:ec:07:66:bb:b7:d3:2e:6f:
4e:3d:28:fc:39:2b:ec:f6:d1:17:be:c6:02:18:33:8a:6e:51:
d3:b0:d5:27:22:fb:63:03:71:3a:9d:48:d9:cd:c2:ea:f6:b3:
be:2f:7d:cf:fc:e6:9e:2c:3b:fb:20:18:d5:56:4b:a4:67:74:
9b:e9:1d:28:4c:b7:5b:67:b6:28:eb:4b:c4:c3:12:35:dd:1b:
0f:87:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:44 2026 by rpki-client