Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier: FaxX1zaP9rupX1Ysyo52H9kS2D0EHBYtktwiWmoeKUg=
Subject key identifier: DD:31:50:EA:2E:70:98:D0:16:CE:A2:F4:F1:90:C8:12:3C:82:34:CF
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 019CAE350C2870D0B281775306A5463D4DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:00:37 +0000
Manifest this update: Mon 02 Mar 2026 11:00:37 +0000
Manifest next update: Tue 03 Mar 2026 11:00:37 +0000
Files and hashes: 1: ICJIK-g6HB3Mvhi2jgqIV8IZOhM.roa (hash: 9Ixv1QcElvaUvLVayAC5q1i8Ay2oyoQHQj5D6wnH7iU=)
2: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: Cxnq0z78Nil0Fgp30oXA0TnomhITeZ3dzwGPNjHioWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:0c:28:70:d0:b2:81:77:53:06:a5:46:3d:4d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Mar 2 11:00:37 2026 GMT
Not After : Mar 3 11:00:37 2026 GMT
Subject: CN=dd3150ea2e7098d016cea2f4f190c8123c8234cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:dc:63:52:69:a3:2a:5c:de:9b:6a:b4:e3:
26:27:85:76:5a:99:ee:4c:c7:b4:1a:b9:a8:47:37:
66:47:bc:29:51:b3:b7:aa:8e:dd:f7:68:d1:84:e2:
98:47:33:2e:9f:3f:af:34:23:23:f8:0a:28:16:c7:
67:2a:67:7c:94:0d:0d:88:e3:8e:f3:88:7b:09:bd:
de:61:52:fb:85:d7:23:7e:ba:6b:69:cc:af:79:d5:
35:18:7a:f4:01:b5:0c:23:b4:fd:b7:d8:30:77:95:
6a:2b:7c:50:27:a8:17:4c:dd:4c:0d:04:fe:b5:b7:
f1:a6:6c:4e:9e:19:bf:c0:1d:8b:ba:dd:4c:eb:c8:
9a:71:89:cf:28:94:e4:c8:c6:1b:2f:d6:84:90:aa:
6b:f1:8c:80:e0:71:8d:73:27:2b:84:3f:e2:a5:80:
a1:a8:78:20:5e:db:2b:74:52:c0:3f:5f:6a:d4:32:
61:9a:e8:1c:0b:b4:8f:0b:b3:bb:9b:d4:6b:24:0b:
46:a7:5d:28:35:19:05:cc:d3:76:fa:9c:20:2f:80:
43:cf:6d:88:c3:97:0c:ad:25:71:6a:12:60:cf:38:
a6:6d:92:f0:e6:db:c0:d0:0a:bd:ae:75:e4:f9:0a:
3d:b2:75:a2:f4:b9:9e:14:6f:20:9b:8a:fa:c1:04:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:50:EA:2E:70:98:D0:16:CE:A2:F4:F1:90:C8:12:3C:82:34:CF
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a5:c6:81:b8:be:b6:ad:e0:d1:62:37:0a:6b:dc:54:76:5f:
23:9f:c3:ef:4b:0d:ab:b2:e4:ef:98:ec:6b:20:00:27:90:ef:
24:d8:65:40:6c:d8:8e:79:a8:cb:65:b6:96:99:96:bc:b6:17:
b0:c7:27:3b:46:8c:fe:c7:d8:2b:92:df:d8:c3:76:c6:09:71:
19:9a:7f:1f:6a:f5:9b:14:13:16:ca:59:ec:4b:0e:b5:95:46:
2f:22:59:ff:d7:b4:d2:6e:3e:c4:02:83:32:58:f2:48:4b:70:
ce:f9:0e:c0:b9:bd:d6:57:8f:4c:e9:9a:dd:7e:56:30:6c:8d:
89:11:8f:f2:24:17:64:77:fa:25:43:f5:6f:73:3b:ca:9a:2c:
d3:86:27:f3:ce:ca:a2:4e:00:76:25:39:18:01:18:cf:7c:58:
80:93:23:eb:29:55:dd:9b:7e:51:88:c8:fe:c6:c3:53:08:f4:
1a:bb:fd:c9:75:36:55:88:b4:02:e4:ab:fe:d9:b7:5a:f8:ca:
6f:d5:42:a8:81:b1:c4:65:f6:c4:9c:12:10:ce:fc:b2:c8:83:
36:29:3b:25:ce:ee:f0:38:02:77:45:f5:02:93:32:96:4d:cc:
87:2c:bd:0f:d7:e8:f3:c2:bf:a5:ea:42:b8:f7:bc:9d:28:57:
5c:74:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:39 2026 by rpki-client