Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: 9aMVHBiSuRSlvi9zzjhKzQMbgcJ5YEYJuWxK0RKnEtw=
Subject key identifier: D8:0B:08:90:E2:2B:D0:06:9F:1F:AF:BE:5D:48:BC:B3:E2:63:39:4B
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 019D273A9B85970031A9AADC8FD4081A7B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 0B3C
Signing time: Wed 25 Mar 2026 23:00:45 +0000
Manifest this update: Wed 25 Mar 2026 23:00:45 +0000
Manifest next update: Thu 26 Mar 2026 23:00:45 +0000
Files and hashes: 1: Fy0o8DcLjvyiXEkdH4nVpnIu0xk.roa (hash: X9h7PiPkXXLiZTwdUCr+/0DnytD+kDfLjARYK4Pdh9M=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: kXzOsmHlSY5JEuGSlRmkDKRkumCm+AfHGUPQjlaguMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9b:85:97:00:31:a9:aa:dc:8f:d4:08:1a:7b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Mar 25 23:00:45 2026 GMT
Not After : Mar 26 23:00:45 2026 GMT
Subject: CN=d80b0890e22bd0069f1fafbe5d48bcb3e263394b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:41:8d:02:2d:ad:c9:84:8b:4a:83:4c:d3:
1f:d9:6f:85:be:f0:3f:5f:ac:10:48:f8:cc:1f:9d:
67:2b:1a:b3:75:e3:c2:85:de:47:77:a8:36:f2:bd:
30:9c:11:27:dc:71:f8:8e:96:3a:72:92:76:aa:1a:
78:00:07:13:1b:6b:e1:fd:6a:11:9a:fe:30:6d:f1:
1e:8d:97:23:b5:9f:96:cd:68:07:35:3c:eb:90:11:
8a:0c:84:04:31:84:a0:b2:d6:27:05:2a:95:b0:ab:
d3:07:fa:70:6a:41:55:a2:9b:87:d3:72:aa:c6:67:
16:be:0c:f2:5f:b2:50:f4:b4:a7:63:d4:b4:6c:72:
3e:80:b1:c7:23:23:47:73:48:a8:ad:97:47:42:bd:
05:61:aa:4a:ab:fc:0c:55:f7:c7:5a:61:eb:cf:d2:
70:5d:1b:56:72:b1:cc:1a:a1:01:be:09:f6:cb:1e:
3c:70:ad:42:61:3b:39:4f:82:3e:9b:54:86:cd:d8:
fa:0d:57:10:d5:94:3c:cd:66:dc:53:fd:61:1e:e8:
ef:44:ae:f2:0b:7c:76:87:cb:b5:72:ea:95:8b:14:
0f:3a:6b:1a:b9:87:76:7a:c5:84:a2:9d:69:ef:39:
a3:05:0f:4c:85:ad:7e:3f:48:30:69:b4:32:b8:a8:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:08:90:E2:2B:D0:06:9F:1F:AF:BE:5D:48:BC:B3:E2:63:39:4B
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d0:d9:4b:7a:6c:c6:22:2d:7b:30:8e:39:d1:d5:4d:67:8c:
a6:5d:df:6d:45:66:09:34:ae:a2:3e:38:9a:09:13:4a:0c:80:
8b:17:46:5a:69:41:0c:32:61:a6:94:1a:29:3f:fd:96:ae:42:
7a:2c:e2:92:cc:54:8d:32:75:0e:ee:51:11:91:24:40:df:cc:
fc:cf:9d:97:df:d5:e3:22:cc:d7:3c:c8:62:f7:6f:79:10:e6:
88:70:86:59:7a:9a:a0:ab:4c:d1:86:bc:d8:f4:28:74:00:6f:
0e:75:24:51:b4:6b:ea:a5:a4:52:f2:93:8e:c8:5c:19:05:a0:
05:b6:46:d2:df:9b:12:f9:17:fc:73:50:52:f7:80:dc:8b:e1:
bf:d4:8a:d7:fc:02:6e:3b:f2:88:1b:7f:5e:fd:7b:48:70:58:
10:3b:0f:12:69:16:c0:d1:35:16:2a:3c:0f:cd:85:ad:b2:e1:
c8:b7:b8:3a:34:dc:49:63:c6:2a:85:73:71:3d:6d:56:47:79:
ad:60:12:06:0e:9b:81:f6:41:cd:fe:bf:aa:c7:d5:21:ef:07:
1e:b9:3b:ba:c9:a8:5a:b1:13:16:2d:75:65:1a:e5:d5:30:1e:
fe:fe:6d:3a:01:d2:51:d6:a0:dc:72:57:40:e0:8e:4c:33:39:
bc:9e:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:10 2026 by rpki-client