Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: 01pa+rWKXMF/v/bSWSlcKpy5RIYBwWTCMORxWT8W/5A=
Subject key identifier: 8B:52:8E:02:74:F9:D1:5D:A1:A9:29:EA:01:5E:FB:F1:D0:5E:B6:C6
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 019CAAC652617C86C7ECF8C2424B467BFE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:00:49 +0000
Manifest this update: Sun 01 Mar 2026 19:00:49 +0000
Manifest next update: Mon 02 Mar 2026 19:00:49 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: b0bvMOh7CUE8M3fX7FToGyFS01I/u2sE2mX9mZ0Z4qY=)
2: _n04tbHejANq8Ug_J-BPx0EeIOY.roa (hash: XtKxscitCuMv9T8d0VZ6njYDJbqu3csyAljLvKPr+l0=)
3: y_SBLUhzBtU72NxeeIak4RRDnEU.roa (hash: x10yvxp0EebXuA7j4nfdDlIV0rhNw6PWqLB8KW20YOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:52:61:7c:86:c7:ec:f8:c2:42:4b:46:7b:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Mar 1 19:00:49 2026 GMT
Not After : Mar 2 19:00:49 2026 GMT
Subject: CN=8b528e0274f9d15da1a929ea015efbf1d05eb6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8a:0e:d5:ff:96:ee:18:6d:20:e6:8f:81:1c:
b3:b7:b9:f8:0c:96:0d:e1:a5:42:9c:36:9e:f8:15:
9d:88:20:39:47:37:29:ca:c5:57:7b:4a:bb:7d:f3:
ec:14:3c:46:15:8e:73:de:ef:9e:8c:29:de:4d:3c:
67:29:95:5f:45:a0:c3:4f:ba:ef:10:83:1e:45:55:
e3:cb:f2:a2:2c:59:49:f6:5b:6c:a0:06:48:cd:58:
7a:d7:2a:38:4d:e9:3d:26:cb:02:db:50:44:c4:2b:
13:0e:42:66:0f:85:a7:27:07:e3:5c:d2:53:84:a0:
66:eb:e9:c3:96:7e:b4:cf:0a:ed:d4:18:fb:2a:a2:
dc:16:24:ee:e7:a1:06:d7:29:9b:66:a4:5b:47:5d:
0d:ba:f9:52:ac:fe:8d:c7:03:48:b9:96:f3:9c:2e:
0f:9b:03:73:af:8d:d1:81:65:94:ec:db:49:e9:37:
01:09:dc:90:f9:97:19:4c:db:6b:82:8e:9c:a3:6e:
c9:a8:94:c3:c8:b8:0a:55:27:b4:95:db:43:fb:45:
d7:6a:f9:71:9d:03:20:92:5f:bb:cb:36:c5:8f:b2:
5b:f7:6e:c4:45:08:02:bc:b0:15:bd:84:05:de:f8:
f6:89:29:c7:8d:5c:14:7d:fc:56:af:ef:bd:b6:44:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:8E:02:74:F9:D1:5D:A1:A9:29:EA:01:5E:FB:F1:D0:5E:B6:C6
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ca:54:f7:91:40:6d:cb:9e:b9:fa:43:13:da:c5:6f:4e:ea:
c3:cc:45:1d:ea:f1:a6:7a:a7:5f:f1:90:d1:72:91:fe:71:9e:
fa:b2:f0:ea:b5:08:1b:15:f1:bd:d7:1a:1d:54:ab:3f:87:fa:
4f:6e:0e:4a:ae:04:dc:f3:6c:f2:8f:16:ae:95:22:2a:be:c5:
44:f7:ee:d4:4f:58:b6:49:4b:7c:32:f5:85:48:b0:ac:d4:c6:
93:1f:38:a6:b1:4f:16:ac:c9:9e:3b:31:4e:88:ed:f5:26:c2:
ae:0e:0c:fd:81:03:1d:f4:8a:06:53:e4:5b:b0:24:8e:a0:42:
f2:2a:f6:2f:69:a5:60:51:c1:cf:79:21:ac:73:19:d9:f4:3a:
41:b7:a4:c8:ca:d2:c4:3d:30:c8:53:fc:d0:af:43:62:3a:cf:
a2:20:b3:97:21:e0:3d:af:55:50:82:18:13:0e:3a:61:0b:c2:
c3:94:89:3c:88:40:bd:51:2b:ab:16:59:e4:f7:5b:b5:ae:7b:
a8:d1:4e:9b:c1:3c:74:33:f7:c9:11:b5:30:9b:18:81:03:22:
21:c2:81:c9:17:93:71:41:3a:b3:b2:0d:1d:14:40:2e:4b:2e:
44:01:e0:f1:79:09:4c:be:8d:64:05:9c:20:df:2d:12:83:08:
45:82:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:58 2026 by rpki-client