Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: JKTZkvvOCdQl4KeOhej+qB1cE1Q38Z0v84bMzTy4elU=
Subject key identifier: FB:BF:2E:11:C3:8F:68:60:51:37:AF:E1:71:FE:6E:E8:58:AF:41:BD
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019CAA591488B2853D8EC76B7D22F181FD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 1798
Signing time: Sun 01 Mar 2026 17:01:30 +0000
Manifest this update: Sun 01 Mar 2026 17:01:30 +0000
Manifest next update: Mon 02 Mar 2026 17:01:30 +0000
Files and hashes: 1: 8yYMhh0gMT6CiQOLVp2cTc5vVZ0.roa (hash: 7gaVBUF1/eBBpHyrZMX3iYaRP7VQvzONGdsKY6mhoPg=)
2: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: HxFQmiqzd1hUmPgcIWTeLMBjMQbvME3YXaksjmaInoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:14:88:b2:85:3d:8e:c7:6b:7d:22:f1:81:fd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Mar 1 17:01:30 2026 GMT
Not After : Mar 2 17:01:30 2026 GMT
Subject: CN=fbbf2e11c38f68605137afe171fe6ee858af41bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:bd:01:ea:0a:82:b0:f6:69:ec:84:de:7b:
e8:d1:99:83:4d:0b:5c:c0:2a:7b:5a:81:c9:2e:5e:
62:f5:a4:17:36:ea:eb:86:7a:bf:f4:9e:e3:a9:d4:
18:3c:10:90:17:1a:a2:ec:8f:cf:6f:40:c2:25:01:
fe:d5:9b:25:be:48:e6:87:cb:86:a1:97:12:54:c6:
9a:07:57:8d:a2:75:f0:c4:31:df:62:0b:59:e3:a2:
cb:00:82:1e:88:ac:4f:be:8a:c3:d7:65:43:53:0e:
70:8a:76:0d:26:68:63:9d:25:5c:69:b7:9c:6d:01:
65:d5:7f:a0:43:9e:08:f4:fa:0e:19:b6:d3:9e:0a:
7a:cb:83:5d:71:47:6b:80:1a:98:38:ad:73:f9:99:
5c:c4:46:fa:40:a3:0b:f8:79:2a:a4:5d:95:14:f9:
6d:dc:d2:fb:4d:02:fc:f5:46:c8:be:11:07:ad:17:
ff:20:cc:70:c1:f9:dc:b5:27:c9:13:a8:77:a5:6c:
2a:39:1b:4c:83:94:47:8a:cd:ba:f0:a0:0a:23:79:
eb:a1:0b:30:74:2e:28:79:db:f4:f7:92:b9:17:7b:
76:1a:5c:5b:cf:f6:3b:31:46:25:be:39:0b:fe:77:
4f:59:71:8d:18:f6:a7:28:b9:82:dd:87:a7:5d:f6:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BF:2E:11:C3:8F:68:60:51:37:AF:E1:71:FE:6E:E8:58:AF:41:BD
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:12:1c:e7:6c:0d:52:2e:91:fc:49:eb:0c:b3:ca:f7:99:c0:
09:f6:89:65:d2:30:26:2f:9a:ca:85:86:3d:ec:d0:7e:46:b2:
58:bf:90:dd:b2:23:40:39:20:d3:62:d8:f5:8d:0f:4d:88:0f:
28:67:9d:57:47:90:cc:03:8d:90:39:26:b0:d4:79:dd:66:0b:
78:78:44:6c:00:70:1c:8b:21:84:ee:2a:e9:d9:14:24:e6:c1:
f0:e7:a7:2c:a2:78:9f:14:fa:79:f1:09:51:9b:61:51:ad:53:
27:08:75:b7:8b:50:72:f8:a7:aa:9d:29:cb:61:75:20:f6:aa:
44:5c:ff:23:5d:43:3d:3b:d3:2a:56:47:5e:90:03:9f:d0:71:
8e:1e:93:f1:28:f7:ce:02:b8:96:eb:c9:2f:c7:45:bc:c6:8d:
ec:87:ec:92:27:0d:55:65:3e:7f:0e:ed:b6:67:8c:d7:cd:12:
e9:c4:93:62:2a:a3:1c:1c:1d:dc:38:07:94:d5:3b:f4:b5:d8:
58:23:36:b2:4e:40:0a:91:d8:60:80:f6:38:b3:b7:c4:88:d4:
97:ba:ce:82:47:90:63:5a:38:f2:11:d6:a3:dc:76:e1:3d:7d:
9b:7a:e3:e0:19:36:27:69:8f:52:73:d9:50:12:32:76:09:ae:
74:a8:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:17 2026 by rpki-client