Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: XxtDyVGQBFtZSy6boehyBH1Ofgpp1PVIBrMJqkd9EHI=
Subject key identifier: 20:7E:55:A6:BC:76:2E:4D:D1:C1:38:4A:71:0A:2B:1E:10:DB:BC:B0
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 019D284E3F4DB408F820B10E90B18DD6F6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 137B
Signing time: Thu 26 Mar 2026 04:01:49 +0000
Manifest this update: Thu 26 Mar 2026 04:01:49 +0000
Manifest next update: Fri 27 Mar 2026 04:01:49 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: 0fj0hOP+SeikfCa17C2WKU0WJcx+LvTkchbTIavTlsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3f:4d:b4:08:f8:20:b1:0e:90:b1:8d:d6:f6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Mar 26 04:01:49 2026 GMT
Not After : Mar 27 04:01:49 2026 GMT
Subject: CN=207e55a6bc762e4dd1c1384a710a2b1e10dbbcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:7d:8d:63:f9:d4:8b:83:54:2c:63:a2:aa:
e0:5c:e8:ea:0f:30:04:a7:82:1e:a4:df:88:1c:26:
4d:71:f3:97:96:54:ec:21:a0:1a:77:39:d5:cb:45:
81:db:a9:dc:73:46:be:f0:dd:07:a0:2b:95:bd:60:
82:52:b7:0c:bb:03:b7:c8:94:13:60:a1:00:c3:d8:
f6:dc:9f:91:b8:fe:36:b0:d4:35:d5:dd:89:57:4f:
98:71:e1:c7:b8:01:8a:c7:f1:d5:95:a9:8d:a3:f4:
54:c2:72:b4:14:21:02:c3:17:96:4b:31:21:8e:3c:
81:10:b4:6e:62:5a:d3:1e:6a:18:f9:e2:32:7b:0f:
25:c7:b4:8c:c1:86:ff:79:9a:94:2e:f3:13:80:89:
32:99:1c:fc:95:3b:f8:ce:cc:e9:da:a4:a9:59:f1:
cd:63:b0:37:2f:4d:ae:16:a0:00:ca:8a:da:2f:50:
6c:c8:11:a4:e4:fa:42:8b:f8:f5:03:a1:e0:c1:a2:
a2:44:46:b4:ac:f7:91:8c:b8:92:d5:82:93:c6:34:
a1:29:d7:ff:a3:32:15:f2:79:c7:9e:56:76:c9:3c:
ed:c5:9a:81:ab:07:e9:fd:b5:bc:7e:08:96:bb:dd:
9d:3e:cd:df:a8:0a:0e:63:b5:05:95:ae:fb:85:d4:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:55:A6:BC:76:2E:4D:D1:C1:38:4A:71:0A:2B:1E:10:DB:BC:B0
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:41:8c:72:f8:d6:90:07:53:8b:8a:b7:09:79:7d:b9:f0:cb:
3d:6a:b5:6d:fc:b8:6d:53:e3:05:09:79:cd:24:71:1b:94:d7:
5f:ef:45:d3:06:43:1d:13:a6:ec:eb:4d:94:03:c7:8c:7d:f0:
90:f7:d0:e1:2e:7e:f0:49:cb:18:b5:6c:22:00:90:19:6b:14:
ba:03:74:8e:38:bb:56:55:69:e5:39:bf:a7:d7:2b:fe:ea:45:
ae:b4:66:f1:ab:96:bc:62:b9:cc:bc:75:1b:91:4c:69:3c:4c:
56:18:8c:ec:96:7f:0f:2d:5e:d8:1b:2d:6d:f5:f1:84:d2:00:
fe:be:c6:1f:34:1a:38:cb:1f:18:87:43:18:0d:b3:96:ff:6b:
39:57:8d:d2:d2:e8:13:ae:57:ce:f8:f1:55:0c:7c:28:e0:ff:
6e:c7:4b:78:22:bb:e0:18:d0:0b:bc:5a:47:67:c3:35:4b:61:
de:c5:f1:9f:8f:5a:77:8d:d2:de:56:6d:05:62:96:85:ec:17:
be:11:47:48:6e:ae:dc:fb:cd:22:47:5a:71:f1:77:e5:18:c7:
b8:e0:1e:d3:b5:bc:3a:80:62:12:ce:ce:fd:ff:04:c2:83:55:
3f:2c:15:d7:3c:10:b6:ff:79:30:0c:8a:3e:3e:09:23:a9:c1:
6d:66:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:48 2026 by rpki-client