Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: 03LOyy1o2BAfTRl9mm5IdecVKGDaNQo7xY8tz7tBMYs=
Subject key identifier: C2:38:37:F9:E0:D8:CD:D1:E4:2D:52:5E:9B:0A:B4:4C:42:9F:50:60
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 019D2AA9C150EC0214E17AC6A1ADC415A07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 189D
Signing time: Thu 26 Mar 2026 15:01:01 +0000
Manifest this update: Thu 26 Mar 2026 15:01:01 +0000
Manifest next update: Fri 27 Mar 2026 15:01:01 +0000
Files and hashes: 1: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: d2KgHxbNCv2ZHQ8itkKJavLUmPyT4IZw/zSjyDB+aeA=)
2: O8TEWtCyCFFFeBDFSQav1ileZCc.roa (hash: ZRW28K9Lr27GeePq4xOpOm3t2INDbE7syD4cgpdmkwY=)
3: nD_ARS36tkYEaFa24POgKi0TB4U.roa (hash: H1vCO9eNS9BAqP3EHrciv1VmoLehzHokRpUI2dSkh+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:c1:50:ec:02:14:e1:7a:c6:a1:ad:c4:15:a0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Mar 26 15:01:01 2026 GMT
Not After : Mar 27 15:01:01 2026 GMT
Subject: CN=c23837f9e0d8cdd1e42d525e9b0ab44c429f5060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:42:ba:a8:be:d8:23:87:f0:58:26:c8:70:
7f:fc:1e:fb:3d:14:c4:8d:0d:cb:81:89:be:e8:66:
a2:0d:93:b9:5d:8a:81:a6:9a:72:b7:e7:6e:eb:14:
46:10:7f:a4:63:56:9d:35:9f:6b:55:a6:a7:6e:3f:
0b:34:00:cd:3d:f3:c4:67:33:15:d9:07:59:8c:1d:
bb:5f:01:95:22:95:48:c5:93:f1:79:f6:73:2a:f9:
70:3b:d5:e1:f1:0f:13:55:8d:66:98:f4:fd:21:20:
d7:42:ba:ca:25:83:1f:1e:f1:ef:0c:8e:40:c7:67:
a5:b5:0c:7a:59:de:0e:3e:43:a0:f4:2c:bf:ff:1d:
35:00:83:23:f2:31:26:1c:98:48:1e:ca:26:71:f6:
dc:1d:24:1c:fe:10:72:74:c9:b4:dd:9d:47:e7:e9:
e4:9e:c5:bc:a1:c9:42:ec:95:0d:54:42:30:72:94:
f0:10:88:de:c0:f5:49:66:d6:cb:d2:82:a7:a4:a3:
b9:56:35:6b:fd:01:0d:22:a1:74:58:6e:0c:59:17:
e2:42:60:fa:d5:5f:ed:77:43:da:43:de:1f:f8:bf:
cc:73:8c:ee:2e:b3:be:8d:8a:da:5c:b3:38:b2:ff:
e1:02:4f:a9:dd:f4:70:54:0f:e7:97:d8:5f:25:ea:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:37:F9:E0:D8:CD:D1:E4:2D:52:5E:9B:0A:B4:4C:42:9F:50:60
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fe:62:51:56:69:b6:bb:71:25:50:27:34:57:cd:72:b3:f8:
da:bb:6d:eb:96:dd:cd:5e:29:56:3f:d4:05:95:27:fa:9e:79:
8c:ea:78:da:9e:e1:4a:7f:42:e1:2b:1f:bc:fd:70:64:7b:05:
17:7c:c7:10:08:9a:2d:77:9c:35:4f:5b:c6:61:67:75:00:f4:
95:f4:57:67:48:f3:0f:87:a9:9a:89:44:66:a4:08:b3:e4:ba:
6b:1c:9c:bf:8e:de:fc:90:35:47:07:fd:d4:44:f2:84:1a:d4:
ce:65:c2:94:7a:ce:38:c1:70:a5:37:7a:0e:43:73:25:77:08:
db:c6:76:08:ac:9f:d8:13:8b:16:21:d3:39:75:97:14:3b:9e:
21:70:fb:b5:59:ea:ad:12:75:0d:a9:5e:1f:1d:4d:74:e9:1f:
ec:0b:e5:22:15:2e:63:c8:a7:ab:f0:c0:21:23:18:ab:99:d7:
7b:91:11:c9:98:63:97:7e:9a:15:cc:94:7d:60:16:64:2b:84:
81:57:95:74:6a:ef:90:b5:b9:45:de:5d:d7:28:64:38:48:7c:
8e:0c:eb:55:2e:11:c6:e9:40:d9:11:c4:f3:f0:6e:7a:d2:cc:
9f:9a:b4:b9:17:33:c8:1f:0c:aa:00:0d:d8:c1:42:5c:90:fc:
ee:a2:15:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:06 2026 by rpki-client