Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File: JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier: dLAhBs6ZS+AYHHuaIKplzoNwvThn9QUTCU1uv/4JA8M=
Subject key identifier: 35:4B:EF:A6:06:30:4E:9D:EC:59:DA:2C:EB:99:11:04:40:57:A7:E5
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 019CABD9684310ACED8FB939CF600F493A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: 5zbBjKYDbKWTcUfQy2LjlEpGD3U.roa (hash: fUQj6/FKT/tHdExtCdO4GHSNm5JnTAgrwRSXAti5fnU=)
2: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: dPX2cNwgssVPRqQtxpqwFcrLISRpCfo+vARquLCZais=)
3: ty_yNfxELwDwdu1g8yk5XzB3xJk.roa (hash: Fx2p1X7kKIHJBVO5IpebjJHxMfg/mSJSoKNyxpeMDjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:68:43:10:ac:ed:8f:b9:39:cf:60:0f:49:3a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=354befa606304e9dec59da2ceb9911044057a7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:58:a9:84:c2:d9:8f:c0:82:a9:b7:65:3f:
18:17:b0:67:dd:99:dd:ff:87:91:88:f2:39:7a:78:
b9:15:c0:27:ac:dd:73:6c:1b:43:43:50:01:08:85:
8c:85:52:bb:f8:26:17:61:48:ed:16:26:a3:5c:aa:
ce:df:58:4a:f7:7c:a5:f9:8b:9e:db:d8:79:47:8b:
4e:83:82:a1:bf:58:c9:ea:44:8c:41:8d:01:ee:10:
9a:64:60:06:5e:24:90:26:75:0c:de:94:5e:bd:e7:
9b:bc:cf:1d:98:56:bd:5e:4a:27:b4:92:c4:9d:d8:
23:e9:6e:57:82:e9:6a:e3:9b:bc:ef:de:60:81:27:
01:60:f9:a1:39:8d:ed:7a:1f:82:a3:bf:e7:24:46:
78:b1:bb:63:16:f5:ce:ea:6b:55:fb:8f:af:75:e1:
28:dc:b7:71:3b:9b:88:4e:1d:c6:be:2f:66:fe:b3:
e8:eb:93:60:78:a3:ab:ab:63:80:1a:77:11:2d:33:
d8:06:62:04:d0:18:6d:4c:26:ea:35:3d:80:a5:0d:
b3:46:44:91:79:57:9c:40:fe:ff:c2:10:fa:a9:de:
fc:cf:29:50:d5:5f:53:52:25:8c:6a:f1:a7:e5:86:
ae:05:c3:40:3d:29:f9:1d:65:07:70:f8:f5:ea:a6:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:EF:A6:06:30:4E:9D:EC:59:DA:2C:EB:99:11:04:40:57:A7:E5
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:d2:ce:f7:09:3f:51:9f:9d:96:65:c7:65:b8:df:85:f4:
cc:b0:a9:0a:85:59:5d:f7:96:d5:d3:95:cf:2d:78:85:33:5b:
67:1d:39:5b:1f:4e:6e:76:d2:ce:a7:39:9a:89:f5:d8:9b:8d:
c8:19:d6:b8:b8:94:1a:d7:39:85:0e:6a:b2:0f:d2:af:fb:90:
ec:1b:fa:e4:e0:d5:93:02:08:86:f9:4d:34:63:8c:e0:24:a3:
4a:8b:13:1e:5a:3b:0c:03:57:b7:59:3a:61:cf:71:f2:2f:0d:
cf:4d:1a:4f:ac:38:37:4a:7b:cd:3b:e6:81:0a:14:2a:52:b5:
0c:83:e8:e6:5e:28:a4:e7:65:a1:eb:03:cc:47:9f:89:55:32:
12:d9:96:e1:f9:8f:c0:a4:4b:9e:4c:19:83:bd:06:c5:26:04:
a2:28:64:16:9d:89:79:49:a5:48:c9:38:af:28:87:c1:f3:ce:
23:d3:6a:0c:a1:59:9f:09:4e:59:01:31:1b:80:98:ea:14:b9:
c0:45:b1:9d:48:ff:bd:d2:71:8c:ca:87:98:b8:d3:af:96:4d:
67:8f:86:14:e5:58:5f:1e:db:71:be:0a:1c:34:d7:f8:f1:2f:
df:83:3b:83:01:7d:2c:45:91:c6:45:c9:92:ff:d0:0a:4e:77:
36:0b:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:16 2026 by rpki-client