Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: BEEcJrWffYCtQLH0gNRKzFuL63fbfkGeZQ0GuywBlq8=
Subject key identifier: DC:D7:D4:C5:BB:08:CD:33:7E:9F:B3:B0:61:59:9B:8A:0E:DC:2C:F5
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019D273A8E5C89B76155165B87B52B0E8C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 23:00:41 +0000
Manifest this update: Wed 25 Mar 2026 23:00:41 +0000
Manifest next update: Thu 26 Mar 2026 23:00:41 +0000
Files and hashes: 1: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (hash: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs=)
2: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (hash: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: as5JouvZCrVMgiOFTFPGCj/jC+zuLUoR9pxRtag4JXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8e:5c:89:b7:61:55:16:5b:87:b5:2b:0e:8c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Mar 25 23:00:41 2026 GMT
Not After : Mar 26 23:00:41 2026 GMT
Subject: CN=dcd7d4c5bb08cd337e9fb3b061599b8a0edc2cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:14:33:2c:18:e4:61:06:46:93:5b:b4:a3:
4d:7e:c0:e8:c6:fb:c4:75:d4:49:34:c6:00:35:b0:
5f:c2:77:b6:91:2a:14:1d:a2:48:49:91:ab:ca:0a:
98:00:0b:60:bd:94:b9:63:5c:f9:63:7b:06:bf:74:
d0:f3:4c:41:0c:1b:88:c0:70:b6:6a:e4:48:46:34:
8a:58:52:b0:13:32:00:1b:98:06:39:34:b2:0e:4a:
16:ab:d2:37:bc:71:87:ae:6e:8a:0f:b6:a1:af:41:
9b:d0:d1:1d:f1:d7:4c:15:a3:8a:f8:a9:7c:7b:ad:
a1:e1:98:30:32:5f:60:ac:31:9a:4a:7d:bb:17:f1:
b6:6e:a6:8e:ac:a3:c1:88:c9:2c:aa:b0:08:33:8d:
10:0f:ab:83:72:0b:26:c2:d9:8d:58:4d:3b:21:9d:
23:bf:b6:a1:94:d1:15:cf:88:80:c3:7e:6c:53:32:
77:5c:69:fd:6a:2b:75:0b:eb:ad:83:81:5c:be:5a:
df:57:db:9f:fb:43:f0:e8:7d:24:af:65:a4:5e:f4:
83:c4:a8:19:37:0a:21:89:72:72:be:31:d5:82:6a:
7b:68:f4:87:15:30:1b:b6:5a:85:c6:2c:bf:4a:8d:
91:26:ad:4a:5c:86:6b:be:27:0c:e6:1d:a1:ac:40:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:D4:C5:BB:08:CD:33:7E:9F:B3:B0:61:59:9B:8A:0E:DC:2C:F5
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:41:ca:bf:43:d6:b7:7c:aa:55:e8:76:aa:31:22:bf:cb:2b:
cb:5d:c6:08:dc:26:b1:98:61:60:5b:e2:b6:58:2c:13:4d:04:
02:e2:7b:25:9b:82:57:5f:5f:62:f4:41:57:7b:7f:c1:96:83:
e7:d4:bb:68:35:d4:43:d9:0d:a1:f3:3d:b2:df:84:6d:27:12:
7a:50:55:a8:01:f7:b0:4d:9d:3f:3d:63:d8:6d:e4:f9:9a:10:
98:ba:72:b4:97:56:55:59:eb:40:b7:aa:54:d5:a5:81:a3:15:
38:24:c9:a3:7c:23:02:a1:e1:f5:b9:14:20:62:ab:78:f4:89:
1b:90:38:2e:3a:bf:5c:0b:ff:bd:c9:dc:fc:0d:c8:27:cc:4e:
7c:de:eb:f2:23:89:d5:a7:6f:cd:60:d7:c9:e3:60:3d:f8:7f:
c3:46:90:6f:07:f1:a8:52:35:2c:e2:cc:26:d5:57:62:c8:fc:
86:5e:a3:98:9b:89:34:49:2f:dd:ae:e8:3b:36:c0:a4:1c:84:
03:ec:97:8e:10:af:24:3e:fb:2c:ac:32:d1:95:41:14:e9:2a:
c1:2b:68:03:b3:7b:5b:33:21:e5:61:83:d8:39:d1:14:1e:5e:
ee:1f:28:03:00:94:a2:c0:b0:f2:1a:2c:aa:34:18:12:8f:d1:
8d:e0:73:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:10 2026 by rpki-client