Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: EuLyNvhMHQmN68p4BlUGFOKNxybnmkjcX4COQnyHBSg=
Subject key identifier: 38:D2:40:71:12:E2:35:8E:DB:07:A2:C9:3F:CC:26:72:46:1C:07:6B
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019D26961B88954FDCF3A7164312B50BED1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: jfIS1vmbt+MkGCOLZYFcJQ2BIMzLo4MPaKX6F6Zon+8=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:1b:88:95:4f:dc:f3:a7:16:43:12:b5:0b:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=38d2407112e2358edb07a2c93fcc2672461c076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:8c:e1:02:11:24:f8:2a:8e:1a:40:3a:1d:
ff:c1:c0:4c:80:65:ca:0e:f9:1f:6a:41:1a:8f:07:
1e:2f:8c:1b:cd:78:15:8e:8b:57:c5:81:b3:4a:40:
e0:fa:1e:c6:63:2a:67:ec:8b:81:db:1b:08:10:a0:
28:32:37:80:a0:3a:4c:18:35:19:45:fd:4c:82:1e:
ee:78:33:41:9e:5c:63:51:ea:20:bc:59:95:29:70:
61:78:0a:ae:b7:62:2d:ca:74:fc:a3:65:39:28:60:
88:8e:ea:61:30:06:c3:4c:84:1f:85:d3:5e:c2:91:
42:8f:40:58:12:7e:2a:4c:08:bc:b5:65:a6:92:08:
a7:33:50:ae:39:2d:cc:81:13:a1:ba:3f:33:b6:e2:
d2:4e:15:a0:7b:0f:76:0f:cf:a9:28:54:eb:84:4e:
84:65:f7:ac:50:29:38:3c:d4:ab:44:18:43:bd:f7:
d6:60:ed:c8:3c:76:75:5e:8b:c9:5e:c2:f7:25:51:
7d:d7:ea:7e:9c:cc:7d:ef:5c:88:9e:4c:3b:86:29:
0b:0f:15:56:89:28:64:4f:68:1c:89:11:b9:7b:45:
de:f2:70:b4:31:bf:c8:d0:74:6a:16:f6:84:22:02:
5b:e3:43:1c:1f:6b:7c:5e:19:72:6a:6d:e3:a5:4d:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:40:71:12:E2:35:8E:DB:07:A2:C9:3F:CC:26:72:46:1C:07:6B
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c2:ae:ff:cf:a9:9f:49:6c:71:72:1c:81:f9:34:69:8d:5a:
bb:a9:c4:e3:b9:14:fd:59:34:4a:44:9e:98:96:aa:d9:e4:19:
12:a5:08:a1:0e:d1:a3:95:cc:26:91:8a:0e:14:94:7e:e3:09:
04:00:0e:40:13:8b:ae:76:07:8f:7c:20:7a:a9:6c:63:47:8e:
73:e0:ba:85:17:82:f9:5a:c9:d8:63:eb:91:c1:8d:8b:fb:3a:
f5:bf:89:bf:4c:cf:dd:08:3a:dc:1d:27:48:d4:58:8b:80:c1:
37:b2:45:44:8c:ce:ed:ad:d3:5d:88:33:06:5d:5a:48:05:bf:
e4:69:da:df:3c:e7:d1:93:a5:de:15:57:dc:fb:ec:e4:95:ba:
e5:5d:89:24:69:6d:c9:a9:60:cb:b5:ee:ab:66:e4:a3:b5:8d:
f7:1b:f9:a2:b3:36:69:02:7a:bd:b0:90:96:80:94:4d:de:32:
df:e3:57:72:7d:0f:dd:00:f2:3e:0e:4b:0a:08:2a:6b:cd:f3:
c1:5b:27:5a:cc:e3:7d:20:62:12:4e:54:aa:0b:c0:af:08:7d:
c5:6b:e4:5c:97:d5:c9:94:60:fe:33:b4:ba:13:ad:ba:3b:cd:
e5:97:45:b4:ef:a5:ff:a8:80:74:b6:50:60:42:56:3d:b3:8e:
87:72:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:20 2026 by rpki-client