Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier: GMpEac3DRNtHqBrir2zxwmnOdLGKnExKnmQNl+euMmM=
Subject key identifier: F3:5C:4A:94:84:F8:15:41:EF:79:04:68:97:E7:7F:45:14:2C:15:74
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial: 019D29CE14E6B0F15D77ACA3D8CEC8F7B8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number: 02FF
Signing time: Thu 26 Mar 2026 11:01:04 +0000
Manifest this update: Thu 26 Mar 2026 11:01:04 +0000
Manifest next update: Fri 27 Mar 2026 11:01:04 +0000
Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: D+ApOl46VgFry4ZlAVWNGHKhjvJquT6grn+JDL7HGN8=)
2: YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa (hash: H49ZMq3qndN5kJWaRAax7kiG0pAT3uE2jIvdrAJiUlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:14:e6:b0:f1:5d:77:ac:a3:d8:ce:c8:f7:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Validity
Not Before: Mar 26 11:01:04 2026 GMT
Not After : Mar 27 11:01:04 2026 GMT
Subject: CN=f35c4a9484f81541ef79046897e77f45142c1574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4b:95:7d:0b:22:3e:60:eb:8f:c2:29:6e:58:
6e:02:21:65:58:71:1e:43:8f:d5:c7:27:f8:20:e0:
8d:df:6c:9c:d9:a4:0b:72:5e:a4:57:5c:66:54:9d:
92:98:7d:2e:97:e5:7e:1e:e3:06:1d:bb:d4:85:bf:
50:48:8d:df:ac:cb:13:53:98:c1:b3:3f:8c:85:87:
04:51:8b:d3:d2:90:44:d0:65:b3:62:5e:d0:a4:94:
28:60:6e:59:45:3d:45:e5:fd:ee:90:0f:87:c0:39:
a5:75:01:39:2b:08:f1:4b:f8:27:c8:03:04:f6:f2:
63:1f:41:a7:64:99:c6:db:c1:46:b1:ca:a8:96:37:
f1:f5:a7:aa:00:69:5a:c6:77:97:bf:ce:ae:38:03:
38:51:2c:ac:26:5e:84:0d:f0:13:84:f5:d0:13:4a:
41:0b:9e:46:2f:6b:3c:ae:74:b3:0a:d3:e4:47:81:
24:a8:10:3a:05:bf:df:30:29:a7:71:01:d1:41:e2:
5d:d5:de:be:8a:6c:8e:5d:ef:83:08:65:db:d4:af:
2b:9d:32:39:39:7e:b0:62:59:b3:b6:b9:f2:29:d5:
ea:04:36:3a:86:1d:d4:09:83:43:23:03:cb:e7:fd:
ec:9d:e2:30:9f:c8:a8:5f:66:af:37:d2:6d:20:6e:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:4A:94:84:F8:15:41:EF:79:04:68:97:E7:7F:45:14:2C:15:74
X509v3 Authority Key Identifier:
keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:fa:ed:26:47:91:b0:98:98:f4:4d:bd:1e:f3:8c:dc:24:
28:f0:8f:5f:2d:f6:17:3f:b8:e4:32:96:92:73:6a:e1:9e:c8:
3e:a4:09:5a:20:fc:6b:fc:d6:bd:11:4d:01:d0:fc:25:64:ac:
98:00:fd:21:97:27:24:1e:c4:79:42:42:4c:17:77:5d:07:f0:
c8:b4:bf:90:69:e3:5a:fa:4e:2d:c0:fd:12:ef:9c:e4:11:8f:
79:56:a2:37:b8:3d:ab:96:94:9a:4a:e5:d5:20:29:7f:b3:c5:
b1:ec:f5:97:1c:a1:63:63:f9:3a:f1:1b:bc:b5:ad:e2:7c:d0:
72:89:32:61:98:aa:6a:53:e0:31:87:51:55:f6:06:d1:fb:44:
ea:88:9a:cf:45:e3:05:ea:35:cf:bf:cd:ea:b7:f3:bd:ab:30:
fa:ca:48:77:07:9f:ed:9e:2a:b3:08:a4:ae:af:36:d5:fe:f7:
37:a6:98:55:e4:ee:01:df:76:17:1d:99:e6:51:4e:f9:06:3e:
bd:c2:96:02:9d:b3:95:10:f4:fa:c8:06:36:57:a3:81:0f:3a:
a3:3d:a6:84:34:c2:3a:d2:a2:70:6a:27:d5:d9:26:48:a9:a9:
1a:a0:b5:be:28:52:97:de:a7:da:96:1d:39:99:dd:4f:de:97:
1d:dc:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:47 2026 by rpki-client