Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: HwLPy6GQgdYc3Udbs6/t+LgBAJY0A5spjAN4yUNbWfs=
Subject key identifier: 91:B6:66:53:EB:3F:65:98:5D:57:8B:15:7D:F3:52:44:2E:72:BC:7B
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 019CAA58F9327495867BD137FA0400D90813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:23 +0000
Manifest this update: Sun 01 Mar 2026 17:01:23 +0000
Manifest next update: Mon 02 Mar 2026 17:01:23 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: aV5B71bA+zpPi1MTc6EOr4fm+bTy+CXJTGOd0JNWsIE=)
2: tjRP9kgE-QrIUhZyUs_wp0qikRA.roa (hash: 6nBakq9VtgLHGkO/ABZkQH63HrmGP7X+agXAFxco298=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f9:32:74:95:86:7b:d1:37:fa:04:00:d9:08:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Mar 1 17:01:23 2026 GMT
Not After : Mar 2 17:01:23 2026 GMT
Subject: CN=91b66653eb3f65985d578b157df352442e72bc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:94:34:7b:8c:c0:36:b6:20:b3:8e:6d:1d:
53:29:c4:33:ca:60:3c:71:8f:7f:39:49:1f:70:7f:
d9:66:7c:40:69:e1:8b:82:62:44:ed:ce:2b:62:e1:
fd:fa:71:6d:73:13:0a:b1:88:47:d5:8d:e3:cd:3e:
c3:83:07:9d:57:68:d5:73:d7:c8:95:59:71:9e:bd:
ca:da:40:d0:f8:d1:39:99:68:a0:8d:11:d9:8f:7e:
4c:b0:79:04:45:02:af:44:cf:b8:c8:b7:c6:de:47:
a2:cc:02:d9:87:d9:c6:57:95:29:16:99:fd:68:e9:
c9:a7:6c:4d:93:65:b5:1d:40:a0:69:03:f4:be:e4:
dd:2a:d0:d4:ce:3d:60:87:0b:4c:c3:a3:eb:11:cf:
cc:09:54:82:2d:ba:52:19:db:31:fb:4e:3c:4b:62:
cb:7a:b1:98:3b:13:15:60:80:40:83:fe:29:67:10:
ca:f8:83:4d:47:67:8d:4a:53:87:d5:d8:0a:3f:38:
2a:ed:00:8b:77:36:fe:51:fe:c0:00:05:e8:35:4e:
9c:46:31:87:b8:34:d1:96:0c:59:e9:fc:61:2d:a1:
95:f6:c7:72:5d:b6:3a:75:9e:50:5d:bf:27:87:7b:
27:65:1f:b5:80:20:77:1a:d4:da:60:54:ec:c8:ac:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B6:66:53:EB:3F:65:98:5D:57:8B:15:7D:F3:52:44:2E:72:BC:7B
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7e:00:7a:d7:fc:9f:81:43:75:57:30:2f:30:28:b0:2f:07:
1f:ad:d9:d3:c4:2c:9f:6d:2d:ed:b3:ce:b7:55:bf:f5:b9:ec:
ae:e3:ca:bf:f1:12:7e:e4:ee:61:87:62:78:0b:5f:8a:00:e8:
8c:c6:bc:48:9d:34:84:3f:30:12:3b:79:09:37:5e:96:5f:82:
39:dd:40:b7:4e:1b:ef:26:e2:85:c4:6c:fc:a9:49:52:3f:b7:
b9:09:3e:23:2d:33:3f:09:e4:fb:47:9d:2d:4e:da:e6:8d:2e:
c8:f3:60:8f:60:52:a3:7e:c5:18:52:a6:3d:c8:9e:f2:23:49:
33:2c:e1:be:0a:f7:d3:7a:3b:ae:07:ee:58:25:a9:3b:ed:37:
a9:e8:df:5a:1d:99:11:ed:26:9b:f9:a2:f8:89:f2:c0:5d:64:
b8:5f:98:ce:20:04:a9:c1:0f:8f:c4:35:ae:13:12:50:6d:95:
00:17:4c:b8:2a:39:eb:33:26:59:41:f9:32:4a:b4:a3:4a:d8:
ca:74:41:05:e0:46:b8:1b:b9:16:3f:f2:55:4b:9d:33:6c:4f:
24:ba:53:c1:84:f0:12:35:77:6c:4c:cc:a3:4d:ab:e7:c7:56:
6a:3b:ea:9e:9e:7d:e1:04:77:07:9a:86:12:4b:1e:35:68:ab:
0f:97:83:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:54 2026 by rpki-client