Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: /Js53pl6xVt+xcoS1oFVpxr6DUmPXv9ynRbN6AoF1Rk=
Subject key identifier: F5:02:36:2B:C1:77:C5:3B:2F:E0:3F:0F:FE:B2:65:DF:0E:7D:46:FD
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019CAAC6237901EAD314D54242E94FF969A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 070C
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: 7fCgboleseTPrCfanLB9DLL2fqEqd4jLlP8+D7b5AEs=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:23:79:01:ea:d3:14:d5:42:42:e9:4f:f9:69:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=f502362bc177c53b2fe03f0ffeb265df0e7d46fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:87:a9:b3:29:b7:a3:8b:93:3f:cb:15:34:
96:7d:28:91:f6:39:66:27:f8:f3:5a:ba:66:df:9e:
3a:6a:29:7c:3d:e4:54:47:15:96:4f:b1:e9:14:8f:
cc:aa:aa:88:51:40:da:89:8e:51:df:61:62:05:4e:
26:0d:4e:38:fc:0d:c6:b3:27:68:f4:01:36:ff:18:
22:d5:1e:d7:31:b5:dd:d2:5c:6e:28:17:03:08:a5:
5c:aa:5f:10:68:27:b2:8c:60:12:24:e8:18:3d:d8:
01:90:da:5d:38:b8:29:33:6e:3b:00:35:14:5e:08:
d6:3a:8b:e2:6e:93:f7:37:74:3a:e0:5f:23:85:ac:
63:b8:3b:0e:8c:ea:86:3a:47:7d:fa:14:a4:86:23:
6a:ac:54:ea:54:4e:47:3b:e0:c9:fc:3a:4e:a2:b3:
08:aa:fa:6c:54:55:5d:59:b2:20:4d:51:61:0f:82:
e4:fd:11:65:d6:82:b3:ba:3a:df:e0:69:3c:b1:ec:
14:20:99:69:82:69:8b:bb:9c:81:05:24:64:ff:41:
07:14:96:d8:6f:3e:be:e3:f5:92:b2:24:a4:bd:7f:
9d:b8:d7:18:fb:9c:ba:f6:9c:92:56:2e:cc:00:04:
ba:3e:18:c3:0d:f6:3f:4f:0f:d6:f8:3c:e2:c4:a8:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:36:2B:C1:77:C5:3B:2F:E0:3F:0F:FE:B2:65:DF:0E:7D:46:FD
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c6:0f:c9:e9:91:26:64:b5:c1:ec:bb:aa:02:55:ff:79:9e:
86:0d:15:23:33:98:a5:bb:34:5a:29:09:34:32:31:3d:c8:d1:
34:dc:7e:3f:5d:56:b1:cd:d5:62:01:4e:d1:f4:6c:91:01:9d:
c9:a1:e6:c5:13:9f:2a:0e:35:33:5b:db:79:12:6b:9b:e3:e1:
fa:76:79:76:3a:78:3a:b5:ee:b8:d1:1c:06:dc:c4:4e:c4:c9:
35:eb:d6:9f:2f:46:70:14:2c:aa:97:26:a5:dc:18:d3:22:90:
0a:30:c1:06:ac:8c:5f:fb:ad:17:f1:d2:c6:43:09:8c:45:d8:
2a:0e:35:10:54:01:e0:76:ad:9f:75:6b:b6:cf:64:76:a9:88:
76:09:90:20:fd:ee:36:9e:04:28:2a:8c:c9:a7:2f:a3:2a:39:
92:ad:22:d7:bb:44:d1:54:d6:53:e9:b9:6c:fe:c0:10:18:3a:
a3:df:76:4c:8e:b5:36:b9:0d:ab:32:34:5e:7b:5f:71:ff:ee:
fd:a4:96:ff:0f:29:1d:f5:fc:f7:c3:b1:bf:eb:eb:ed:87:c3:
86:7d:ef:80:e2:d4:74:c3:2f:a4:79:a5:3d:cb:35:62:0b:c7:
c5:2f:6d:df:66:75:d9:bb:cf:2d:ff:ad:48:d7:d1:9c:f0:41:
9d:8f:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:07 2026 by rpki-client