Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File: jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier: 01oGcTcwUewsvLse+3Lt/ezSQLh/XAHfe+HwwygPCto=
Subject key identifier: 8E:B4:A3:63:EA:55:16:BC:54:CC:BE:61:30:FB:CD:72:7C:78:D6:6F
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 019D29297CE13B317DF193B58257366B7A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: 0DnLoCEjuk9LA09NU-Pj6xztVUg.roa (hash: eavdDhCPv5oKejhQ3E73neB1uw2GLpbCsVavoHAgMTA=)
2: 6kx7RSGU2eDdKnON8ulnwP0DoEM.roa (hash: mBB9XF7/IVEobcs0wBYP2r9M7bnVaTZmf6dDGW+5sqI=)
3: S79Gb1Wgs93M_TFXtKZ_MxtZ8rY.roa (hash: iXSwMrT+vGCWBRxTBdKA3OOmkhNM967qgIOHYI7fwnY=)
4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: QwEDjeykLeqC8iuw70VRtCcab25TT4fW3/XA9Ou2t68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7c:e1:3b:31:7d:f1:93:b5:82:57:36:6b:7a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=8eb4a363ea5516bc54ccbe6130fbcd727c78d66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:b0:52:20:ff:7d:58:70:4b:3f:26:c8:78:
35:75:6e:9a:5c:80:2b:d2:7b:3f:b9:90:0d:90:4f:
b0:34:ca:55:a3:80:23:81:77:2c:c1:f5:d4:e7:97:
38:d9:b1:ab:8a:0d:78:c9:da:ef:34:c9:c8:48:d5:
0f:7b:b1:ed:98:af:8a:da:02:79:fb:98:f7:c7:4f:
18:c1:f5:cd:29:cc:8f:1e:e7:64:19:49:c2:97:f6:
d4:0f:f8:21:9b:cd:71:fd:8d:41:b5:64:57:ec:9f:
82:55:cb:c8:b8:59:c7:ae:40:22:8e:af:77:53:a8:
8d:44:90:9d:a8:6c:8c:a9:51:e1:81:6a:82:d5:6d:
79:75:ae:a9:9b:53:e8:50:5b:93:36:d6:5c:0f:da:
52:ba:5c:6b:10:54:eb:19:5f:08:c6:cc:dd:f0:1e:
5a:3c:29:79:17:75:b9:13:b2:8c:6f:5f:64:5f:ad:
0b:cc:83:4b:53:48:3a:f9:ed:81:c5:1a:0d:56:56:
2c:14:8f:69:94:4f:21:c7:6a:de:21:f6:67:df:aa:
bb:d6:73:92:3d:d8:a3:d3:44:b4:9d:a4:a7:13:b7:
b4:7d:55:7d:36:0d:d0:d0:68:9c:1a:9d:91:01:17:
71:e7:47:1f:32:8d:f7:11:88:32:f1:58:a4:cf:4f:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:A3:63:EA:55:16:BC:54:CC:BE:61:30:FB:CD:72:7C:78:D6:6F
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:35:9b:9e:e6:e7:2d:d3:f0:cc:7f:f1:33:e0:07:0d:21:33:
4f:28:11:02:82:63:ff:88:94:80:a3:b3:56:a1:8c:ef:be:3d:
cb:96:08:4e:ec:1e:45:09:ec:fb:3c:29:6d:43:d5:d3:9c:be:
e9:22:1f:ef:fa:3d:24:8e:4b:f9:dd:db:ef:f8:a3:19:12:0f:
4c:35:14:5a:0f:9e:f5:a1:54:bf:71:4d:f3:59:b7:94:33:95:
17:7f:ab:db:a6:d7:70:d1:7f:1c:d2:c7:56:b6:63:dd:37:ab:
b6:b9:69:c9:19:f2:ac:7b:32:28:20:88:bd:7b:5f:22:b5:52:
8f:70:ba:94:a6:60:c8:44:3a:d7:30:25:29:6f:33:84:83:4b:
a0:f8:2d:e0:ba:df:82:36:3f:d5:35:0c:55:c0:f8:af:37:84:
21:41:ce:97:30:75:e5:8d:d4:16:23:84:48:1c:8f:18:82:92:
fe:1c:63:19:dd:ee:1a:5b:79:94:61:cb:e3:4d:d9:12:e3:41:
ef:2f:27:50:89:11:99:d6:b8:e6:96:77:7a:c9:ba:f2:03:e8:
eb:3c:1b:40:d4:3a:dd:c4:a2:d2:56:de:33:c6:c4:50:ef:70:
ac:f1:ac:6a:65:92:8a:28:1b:81:a5:0c:81:98:1a:f9:bb:51:
e0:b9:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:58 2026 by rpki-client