Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: cMD4rhBHWSC4cEiMjHzfRG92Tnp3zWpWrLFhD6wMsO4=
Subject key identifier: A8:EA:BE:65:8B:84:E1:B6:34:C2:13:23:5B:77:CA:DD:E0:AF:55:B5
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 019D265FA410E3E0933020647ECB4209F136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 0B77
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: W1shQuzbIRNZt1o1YiT8sFDTOJEflwo6RJ+VHsE5iN4=)
2: zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa (hash: Mr6zA1SBW1abbeTreFoPgkXQSAh5HCSCpxdgGGoFjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a4:10:e3:e0:93:30:20:64:7e:cb:42:09:f1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=a8eabe658b84e1b634c213235b77cadde0af55b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:cc:02:38:85:5d:62:43:99:75:7c:b0:8a:
97:c0:04:69:96:6b:9a:14:7b:6c:0f:60:94:6c:cc:
7d:f9:21:6f:36:dc:ac:40:47:91:18:82:87:19:65:
7f:a1:ef:28:05:de:19:80:8e:3a:61:36:aa:ba:5f:
ec:e5:d2:08:3e:70:87:c6:6a:e8:09:c4:2f:9d:22:
b9:38:45:72:76:72:7e:f3:04:6a:b8:1e:25:44:6f:
65:a7:e2:7b:27:28:f5:29:c8:ed:8c:bb:a5:cf:b0:
cf:10:0b:0c:3d:8b:1d:0b:84:7a:61:a9:4a:5d:29:
65:c6:1b:36:b7:63:2c:a4:b6:29:b0:fe:2c:b0:50:
fc:07:85:8c:3f:f4:52:f4:50:1d:95:cd:2a:89:28:
d9:8a:05:c0:5f:48:3d:e5:05:97:a1:44:cf:3e:2b:
1e:2f:90:01:6a:4c:42:52:7e:d7:d6:76:bf:0a:c0:
cf:c1:51:43:7c:03:9f:99:27:1c:c4:51:fa:02:74:
39:10:f8:79:96:74:57:68:ee:46:b1:69:f8:42:86:
96:8e:3d:af:28:4e:7b:b5:04:94:b8:1b:61:56:2b:
76:85:53:c9:82:e2:04:c5:ae:b4:07:f8:e8:29:18:
98:63:ea:3e:e4:54:62:eb:e1:b8:8f:47:a1:5e:28:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EA:BE:65:8B:84:E1:B6:34:C2:13:23:5B:77:CA:DD:E0:AF:55:B5
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:be:44:4c:02:b2:b4:a6:dc:ff:41:01:ab:f8:0c:4d:e1:49:
d7:25:78:ba:7b:dc:19:c2:c4:58:39:3f:f4:32:f3:aa:d2:72:
d5:b6:10:b5:02:aa:a1:11:de:c8:30:1f:01:f6:d9:69:91:bb:
a5:b0:ec:b1:a7:1f:26:ed:3d:dd:ed:39:cb:f7:a1:80:1f:1b:
e2:26:95:d4:97:b6:54:c2:a6:d0:fc:14:3c:22:bd:0d:35:f5:
ef:b7:e4:20:30:9f:4c:a2:37:d0:34:c9:a1:4e:5e:4a:7b:b6:
ea:38:32:7b:bb:e8:ac:6a:68:69:e9:15:07:8d:7a:c4:dd:56:
9c:6e:43:f1:ba:01:e8:f6:c1:f2:b3:61:9b:a2:ea:8f:5b:f1:
f5:e7:3a:88:0f:d6:c9:65:7f:de:e8:07:43:ed:27:05:7e:fd:
ce:d3:cf:bf:bc:ad:25:c6:29:69:7e:99:a6:f6:4d:a5:a0:75:
8f:9c:90:0f:66:65:89:33:6e:49:af:3a:e4:0b:33:b8:84:a9:
0c:fb:39:f1:ea:0d:3c:b1:51:91:19:63:0e:9c:51:db:ac:b6:
5b:7c:9c:2e:df:32:5e:76:c0:53:bb:55:ae:b1:49:e3:59:2f:
4a:47:5d:2d:ed:e7:1c:a3:f8:e3:27:5a:4a:5d:35:51:b4:4c:
e8:67:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:19 2026 by rpki-client