Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: iO2TcRyS/MktMzcH8A7VjhM+QwVhDflIrjhBvALaSNY=
Subject key identifier: 57:8A:4B:E7:81:22:F0:0C:DE:95:BD:2B:E8:F4:E5:FD:13:C1:76:E5
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 019CA9B4048767741A0D354F51351EDADAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0AAA
Signing time: Sun 01 Mar 2026 14:01:12 +0000
Manifest this update: Sun 01 Mar 2026 14:01:12 +0000
Manifest next update: Mon 02 Mar 2026 14:01:12 +0000
Files and hashes: 1: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: My1jPUtknhbHsi+WQlzG9xklIZkEcMir6545mgQxyhM=)
2: Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa (hash: COQQhfCQ5pueYBwG1/nepox+6Hyg8CKRyfOh9o2cEpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b4:04:87:67:74:1a:0d:35:4f:51:35:1e:da:da:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Mar 1 14:01:12 2026 GMT
Not After : Mar 2 14:01:12 2026 GMT
Subject: CN=578a4be78122f00cde95bd2be8f4e5fd13c176e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:e5:66:a1:ed:f6:53:dc:ec:65:73:09:10:
67:df:b3:8d:43:9a:b4:8b:d1:96:d0:35:95:27:eb:
e0:1a:80:fd:72:6a:85:ed:f3:86:2b:3d:56:b3:67:
27:c9:d9:ae:2e:4f:15:55:ca:74:cb:96:4d:87:4d:
9f:c6:fa:4c:8a:9c:96:8c:af:58:ae:33:7a:ef:90:
17:4d:4d:20:4e:a5:d0:e3:8a:fb:e8:05:08:89:1e:
0f:5a:8e:11:a0:48:b3:c8:1e:a6:ec:61:16:5e:db:
06:3f:e8:00:36:3c:43:7f:86:be:d5:d7:e4:a1:20:
f6:ba:b5:22:9a:28:17:e6:91:ff:c8:6a:d4:aa:e4:
7e:4b:e9:9d:37:a3:d2:c4:b9:0a:ff:67:6c:6b:43:
97:a9:fa:91:f3:a2:78:9e:6b:39:c6:58:f3:27:cf:
73:68:18:ac:8a:97:c0:48:ae:01:c3:0c:be:67:ef:
f4:85:18:0a:95:27:1d:94:eb:93:71:65:c6:51:fc:
e8:8c:e8:6c:17:83:68:50:e0:4b:50:7b:9e:c5:b5:
d3:93:9e:05:cd:07:47:6d:6b:8b:24:f5:07:f9:60:
fa:fb:71:b6:80:28:70:b2:b8:72:c5:e3:3b:19:7e:
ad:b6:8e:f0:e9:8f:a1:5e:3c:8d:e5:1b:7e:1c:97:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:4B:E7:81:22:F0:0C:DE:95:BD:2B:E8:F4:E5:FD:13:C1:76:E5
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c7:a3:fc:07:81:53:bc:cf:7c:84:6d:e3:99:99:0c:0c:4f:
1d:ce:08:2d:cf:54:00:b3:0e:85:d6:8e:d3:d1:1b:52:95:c5:
48:98:ac:0b:b6:84:8e:4c:bd:dd:86:d0:bc:98:32:af:18:3f:
1b:6e:32:58:d2:f5:86:66:2c:a6:18:79:9a:33:c2:bd:39:de:
06:f4:84:df:b2:31:04:c8:4f:1d:1b:6a:c8:28:0b:07:62:c0:
89:b0:20:e4:42:cd:37:fd:d6:90:61:2d:e9:58:ad:c4:29:8c:
61:af:83:7a:2f:b2:34:52:89:03:01:01:87:ce:b2:45:78:64:
70:1f:c3:d2:6a:d6:e6:79:dc:aa:bb:89:1a:7f:75:af:c6:ed:
62:c1:3e:07:f4:ac:a1:a5:32:45:20:1f:b0:77:26:a2:57:ac:
08:50:5e:c9:93:b6:79:1a:01:01:29:07:a3:70:ae:23:ef:a1:
ed:56:dd:21:6a:82:56:b6:fe:e7:fd:c8:1f:b8:ba:33:c7:eb:
30:5a:96:56:33:ea:fb:b1:a6:d0:46:ac:91:4d:d3:cc:d4:7b:
64:7c:a1:94:43:99:5a:f5:99:62:be:23:82:d5:5a:19:9e:d2:
49:19:14:1d:c6:1f:22:e0:73:66:48:3d:27:79:3e:92:2f:b8:
ee:e5:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:14 2026 by rpki-client