Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: 9OnhqjfAPRFvoSR0FXlqRVGGNcOA/Tp9ziTxxMdb7d0=
Subject key identifier: 98:AB:AA:9A:26:08:96:CF:7D:82:C0:82:DD:F0:10:73:56:4D:BA:E4
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 019CABA216E0F54E1EAC7479DD9A52941FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 1222
Signing time: Sun 01 Mar 2026 23:00:52 +0000
Manifest this update: Sun 01 Mar 2026 23:00:52 +0000
Manifest next update: Mon 02 Mar 2026 23:00:52 +0000
Files and hashes: 1: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: vvHcFrXnagUldGrUmeEkfp0N+1ThfvtB596oftFfZnc=)
2: Y0kWTJNEeoRy8MGbIFO5TAU7Xjg.roa (hash: FhwuGsqg5qv9vqOR+yg/RFF7XmZsYJAD0kJ1Rn+2ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:16:e0:f5:4e:1e:ac:74:79:dd:9a:52:94:1f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Mar 1 23:00:52 2026 GMT
Not After : Mar 2 23:00:52 2026 GMT
Subject: CN=98abaa9a260896cf7d82c082ddf01073564dbae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:d8:2d:ac:0c:19:ed:a3:d0:b1:49:ee:ad:
59:d9:da:26:31:40:c2:ba:13:84:68:10:8c:c9:ad:
7f:13:05:02:aa:b2:a9:d9:60:bb:37:72:cf:63:5a:
a1:3d:0c:dd:3e:57:9b:22:5a:17:f9:d0:e4:9b:da:
de:ea:f7:6b:86:b7:71:2d:e7:dc:e4:b1:68:13:eb:
d3:5e:ba:cb:5f:da:9c:20:ae:63:16:4e:f3:68:db:
62:1c:9e:3c:b6:d2:2e:cb:4c:57:5b:02:e0:9b:b8:
4f:24:08:43:7a:d2:38:f1:a0:6b:44:de:1d:72:87:
eb:05:f4:2f:24:4e:ba:a5:e3:8c:45:09:5e:b8:1b:
23:0c:54:d9:71:6e:b7:68:47:9b:c6:a7:c9:c3:32:
90:68:34:f3:d1:83:e5:0e:b6:c2:a7:8b:e2:4e:19:
58:57:a4:b3:2d:dc:ad:49:f5:ea:69:d8:2a:29:89:
ee:18:e1:b9:6d:49:29:f0:6e:ad:77:d5:63:00:50:
ab:77:f5:d7:a2:72:42:56:23:79:e6:88:38:ff:43:
5a:1a:ae:68:54:15:92:c8:61:83:d8:2a:9b:c3:21:
86:09:c1:d6:fa:27:c2:41:1f:26:13:c2:73:e2:71:
82:9c:bd:8c:38:52:41:57:18:e0:c2:a0:28:e6:a5:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:AA:9A:26:08:96:CF:7D:82:C0:82:DD:F0:10:73:56:4D:BA:E4
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:c7:d4:ea:15:f8:99:5f:41:2a:f8:59:cb:0e:93:ff:a0:
64:97:17:64:fc:9a:0b:70:01:fb:23:39:9f:68:1c:52:78:52:
5e:89:dd:da:f0:59:dd:21:3f:01:a6:f4:01:9f:cc:57:7f:a1:
ba:05:2d:76:cb:83:e2:fb:d8:e5:6f:e7:45:82:8b:9e:62:fc:
ac:cf:92:d3:d2:6b:1d:ee:43:43:21:89:05:e9:de:cd:9b:be:
7e:3c:2b:ce:5c:76:3a:ed:db:44:a4:46:1e:a7:b5:d2:53:c1:
14:04:6c:ac:20:61:bf:ec:eb:85:b8:dd:fa:0f:68:8d:bd:bb:
42:37:1b:72:0e:af:2b:cb:14:d9:55:34:d6:c1:b9:45:96:23:
67:3e:e1:28:e9:37:ea:a4:b1:e7:54:b5:93:f4:2a:0f:7d:4f:
76:b8:b0:e7:67:1f:04:64:1e:18:a9:5a:a7:41:94:81:03:d2:
d8:45:2c:38:af:93:21:51:ef:59:00:bc:e7:98:cb:3b:91:17:
3d:44:c0:f1:a0:62:28:15:13:c1:ed:d7:9f:dd:46:a1:99:cf:
94:31:17:73:39:fc:a8:c6:17:46:08:0f:31:db:1b:06:77:35:
54:d6:62:71:13:51:d3:71:23:fe:d5:74:04:e6:75:75:fc:d3:
6e:2a:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:33 2026 by rpki-client