Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: 1TRRKQX9lKTlOHbfKa7/ct89/9hQcSEBzsNgchS6oLU=
Subject key identifier: 1B:77:15:6C:9B:E1:B8:4C:0E:22:C9:80:62:48:83:66:50:C7:CE:D7
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019D2703EF235E04ED17C2DD9EDB03189A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 15F4
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: 7wWPY42PaectahDBIHNmB11sPA2XtNEu+sJPlWKgmSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ef:23:5e:04:ed:17:c2:dd:9e:db:03:18:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=1b77156c9be1b84c0e22c9806248836650c7ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:7b:62:9c:4c:2d:4f:cb:39:8b:f3:b1:d3:
63:a3:e8:37:47:d0:1a:05:97:1a:f5:6a:b1:14:76:
03:5e:52:9d:3c:43:c6:20:b9:5a:8f:49:02:b1:f3:
80:03:59:a7:33:43:b0:3a:bb:5f:36:1b:bc:83:be:
cf:f8:78:07:9a:74:b8:bf:6d:7a:c8:74:e2:45:15:
0b:86:68:40:35:b0:0c:48:64:45:ab:5b:d7:2c:03:
48:51:67:0f:a4:07:cc:55:15:57:c9:63:a7:5a:bf:
6e:f5:b5:53:c3:b1:cd:50:67:b3:90:cd:ee:28:c6:
dc:1a:8c:4b:d2:e0:1f:35:bf:33:0d:58:a0:12:92:
c1:de:f8:fc:0c:7e:67:f1:ca:65:02:9f:71:5d:16:
da:af:90:bd:7f:01:3f:14:37:0d:b4:bb:4f:bc:01:
fb:2f:e4:be:ab:2a:fe:12:9b:84:f8:ca:3c:cd:e3:
bc:76:00:45:b7:78:31:b4:38:e9:0c:07:bf:90:d3:
0a:60:db:cd:36:0e:f3:7f:b3:7f:a9:cc:75:84:ff:
e1:6d:94:f5:6a:f7:df:57:97:c1:e7:ed:e8:c2:ad:
2e:c5:ee:e3:3a:74:bd:26:f6:29:c8:ad:18:86:3b:
95:43:6e:88:7f:05:56:6a:44:42:16:1a:9b:12:6b:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:15:6C:9B:E1:B8:4C:0E:22:C9:80:62:48:83:66:50:C7:CE:D7
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a5:f8:16:92:3d:cb:94:27:c2:d3:e6:f9:70:09:9e:66:79:
3b:49:09:b9:23:b0:51:92:64:8c:d0:e8:e5:cf:e6:c6:f6:41:
ad:8c:c0:7f:3c:41:f9:45:29:5c:ce:e4:32:c1:64:a5:ed:02:
f6:13:9c:ab:a4:59:c0:75:f3:03:3e:b3:03:5a:8a:3f:c6:c3:
d5:9d:fa:54:6e:95:00:da:60:cc:6e:be:80:05:0c:9a:b8:93:
f1:89:cb:6c:a5:b2:d7:79:4c:fc:71:a3:50:88:30:a4:ff:dd:
57:24:b0:ee:74:d6:e2:ad:db:42:19:27:8f:e8:0f:8d:85:eb:
6a:d6:ec:68:4b:89:f0:34:3b:65:54:15:7a:8c:08:c8:47:90:
ce:22:ff:41:35:35:a9:0f:93:7b:1a:32:16:3a:05:f6:d0:30:
0d:c8:56:54:53:fa:87:06:9c:7a:c7:9d:16:dd:8f:ed:be:f5:
a4:76:af:38:a8:08:1a:07:c0:b0:52:91:c4:6e:84:13:4c:32:
56:d2:ca:bf:3d:64:23:7a:83:95:d6:6e:07:e0:9a:8c:d4:0a:
64:7b:ea:98:69:76:27:87:b8:28:87:83:ba:84:73:ae:b3:59:
2e:c4:e2:62:e4:49:50:b8:ee:da:31:57:99:a4:ba:20:b5:4a:
60:20:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:07 2026 by rpki-client