Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: M2h/EzHEExG/IoFHCr9/aylOQoPmaze4kudHuDoYFWs=
Subject key identifier: EF:FF:50:5D:D7:18:24:58:48:B4:6C:74:C6:AB:56:BE:00:BB:0C:89
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 019CACEBE4E9997FB9119AED4F4A853217B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 0570
Signing time: Mon 02 Mar 2026 05:01:06 +0000
Manifest this update: Mon 02 Mar 2026 05:01:06 +0000
Manifest next update: Tue 03 Mar 2026 05:01:06 +0000
Files and hashes: 1: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: trCCrqSVd21uNqQsJsbJ98Q5BuatrzyHolXZNx5thl4=)
2: NDuQ_OtavgDxJgqTGMxRkvnClUg.roa (hash: RwHWV50blJ9xPPPNp0Q0TSF1YnwX98auqS4GRNgN9sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e4:e9:99:7f:b9:11:9a:ed:4f:4a:85:32:17:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Mar 2 05:01:06 2026 GMT
Not After : Mar 3 05:01:06 2026 GMT
Subject: CN=efff505dd718245848b46c74c6ab56be00bb0c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:63:1f:9a:28:87:62:94:d5:99:03:33:c4:
2a:ac:48:81:3a:f1:30:4e:f9:47:dd:e6:85:a7:a0:
ad:1a:e2:1a:ac:2e:86:ff:fb:fb:7d:e5:64:4a:8a:
a6:da:ee:b7:b8:5e:e2:6d:16:2c:bd:05:88:a6:c4:
7e:fd:08:a8:79:7e:76:26:52:3e:52:70:d4:39:6c:
7f:2c:f7:ea:73:94:9d:a0:27:09:7d:d7:b8:64:21:
a2:a3:f9:57:18:35:d4:dd:5b:da:94:4f:22:ff:e2:
10:a2:09:6c:75:17:e5:56:ae:eb:bc:aa:b2:35:e2:
f6:8b:51:c6:11:ad:85:83:69:31:1e:35:b0:3d:a8:
a4:1a:55:46:0d:a1:ff:a8:5b:c3:f2:01:13:2a:08:
83:fe:36:ea:ab:09:b2:1b:eb:80:5c:2a:01:29:90:
16:f5:a2:3b:d1:07:14:ac:06:6c:1d:6d:64:6c:a0:
7c:50:cc:df:69:d5:56:c5:35:bb:77:a8:e5:72:e2:
52:05:19:bd:28:ae:17:77:b6:cc:30:cd:04:00:84:
c7:0c:d1:19:5b:83:ba:42:9f:b8:99:58:ff:31:28:
6d:76:df:8e:ab:f6:82:05:12:5e:05:4a:5e:90:d2:
0f:89:9c:76:a7:20:dc:ab:85:a1:44:2e:f0:c4:0b:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:50:5D:D7:18:24:58:48:B4:6C:74:C6:AB:56:BE:00:BB:0C:89
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6b:ef:c8:1c:64:62:dd:e1:ab:b0:b1:46:92:e5:57:0a:d2:
51:ec:4e:f7:5c:c0:c7:10:37:fe:3e:a6:ae:49:b7:50:2f:c6:
2c:9c:0d:a6:6a:c5:a3:a5:bf:aa:f8:11:57:d8:7d:07:d6:40:
72:e2:17:0a:8e:76:5e:63:7d:78:73:17:2a:6c:11:e5:79:92:
14:e7:1b:1a:e5:3f:08:3f:3f:bb:ca:a9:14:e7:29:51:65:b0:
14:b3:62:04:a9:aa:7d:49:4a:cc:31:15:f3:e1:d6:70:48:06:
ca:7b:9e:c3:24:39:fd:13:f2:82:9f:8c:18:9c:b6:57:52:9b:
e7:ed:8a:46:88:7f:33:04:e0:c2:98:f6:72:9d:51:b3:ee:10:
42:87:bd:c7:5d:27:2e:6e:98:40:eb:4e:17:17:50:65:aa:3e:
45:d1:c3:ba:a0:20:0c:bb:a3:7a:42:a9:94:0f:9c:17:74:18:
00:fb:99:dd:78:aa:f0:ec:02:05:b8:32:06:f3:f9:14:8a:08:
3c:cf:c0:75:10:0f:6e:21:2d:86:80:3c:ab:83:80:5c:0e:40:
0d:39:3a:a4:aa:6d:21:32:20:c7:d7:b3:d0:7c:e9:63:4f:d7:
28:39:ee:5f:34:fe:ba:8b:36:bf:32:62:76:a2:61:4b:1b:dd:
81:ec:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:55 2026 by rpki-client