Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier: QBqXZMSneEhCrEKdQ3Lv/XZVseISa/TMSvoYhVL5L7c=
Subject key identifier: 11:E3:01:05:90:B1:5D:A2:82:97:97:48:86:E9:0D:F4:52:19:FF:40
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 019D3307B9169B594E23660A3B1A24B9433E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number: 1894
Signing time: Sat 28 Mar 2026 06:00:37 +0000
Manifest this update: Sat 28 Mar 2026 06:00:37 +0000
Manifest next update: Sun 29 Mar 2026 06:00:37 +0000
Files and hashes: 1: 3L4WcN7gzhBNpVVNiXU_dlpvE-U.roa (hash: fWfFsGbI8ZEJSeb49tnQpRdHMLtKv9wl/8H4rcMy248=)
2: OLnzxAlUC3QhNrKWLOgcy2U30To.roa (hash: lX5neqnKug6Y4cQTPSta0w75qmPdh3MW8Tx/neXnEbc=)
3: XjQJl2a4wVJ5vbGz2VtG7fUNbWk.roa (hash: T4dfrQILAEkH/eyRrkFYsCcye4GAdljvbKUoaz/5NDg=)
4: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: hvPjBqm2HeTL0k5376dstLLWnwteGFesj2MCZZq5c1k=)
5: nFEK6z-jx-S0HOWYHzz-ynE7Bmc.roa (hash: SlfRBt8iF6tZBTeqrGVg/w4P8tgE7MMFKcNAFRdvA84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:b9:16:9b:59:4e:23:66:0a:3b:1a:24:b9:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Mar 28 06:00:37 2026 GMT
Not After : Mar 29 06:00:37 2026 GMT
Subject: CN=11e3010590b15da28297974886e90df45219ff40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:0a:43:c8:7c:c5:1c:c9:4b:88:f6:37:1b:
d2:6c:04:45:07:a9:43:6f:25:27:f9:f0:07:d6:f8:
f7:07:36:75:4c:d8:be:6e:49:3c:db:a1:ae:8e:2e:
48:5f:f1:ca:93:4a:94:04:df:78:5a:cf:c7:2b:11:
61:13:84:70:6a:cd:68:e1:0d:25:60:c7:a9:7e:76:
33:dc:c6:b9:3d:a8:7e:31:4b:50:2f:d5:ea:ed:d7:
11:0f:d4:81:db:68:19:3c:b1:c5:e9:dd:cb:6c:d7:
a6:29:e1:89:6e:b7:96:fe:4b:be:ca:26:c3:54:98:
47:53:f6:07:91:92:81:07:85:aa:56:61:a7:38:6f:
e2:98:f4:12:00:bb:9e:5c:97:8c:1f:06:4c:d9:39:
77:0b:f4:0b:28:ed:2f:0c:60:14:8e:a8:db:18:6d:
84:69:aa:02:e2:28:91:e4:60:f7:85:72:25:23:e5:
d3:18:1a:7e:72:5a:04:37:b1:cc:45:0f:a4:77:41:
e0:4e:96:4d:26:05:b5:e2:07:09:f5:d2:c5:4f:44:
ba:78:97:d1:0a:84:ac:bd:8e:65:08:05:a8:a0:94:
d6:1f:0c:13:f6:4e:e9:18:7e:1a:35:9a:d7:b8:2a:
84:92:1b:d3:9a:71:a1:fb:73:c7:3d:63:6c:af:a6:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:01:05:90:B1:5D:A2:82:97:97:48:86:E9:0D:F4:52:19:FF:40
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:82:7d:43:85:81:dc:16:83:d7:8e:1d:4a:4f:1e:c6:93:de:
e5:cb:cb:a4:39:26:65:6d:ff:06:b3:b4:b8:85:ed:c8:b7:b5:
d4:30:d6:19:80:96:c9:d6:7c:ca:a4:ad:9d:9c:ab:38:79:28:
b3:d3:a9:45:48:3d:da:2f:74:1f:57:45:89:2e:17:9c:d2:64:
6d:dc:97:b8:da:f9:b8:f1:80:20:27:7f:67:97:16:3a:16:ba:
bd:fd:22:f9:58:40:d2:1a:c7:e1:6f:f2:51:7a:a7:cd:de:bb:
6e:37:d8:27:33:bb:a3:69:ef:09:1c:bd:f2:66:53:b3:37:53:
92:c8:d7:e8:c0:d8:ab:60:4d:65:93:19:64:ec:fa:b7:81:ce:
7b:9d:a9:b8:02:a0:43:4d:ac:3e:cf:6f:9c:f2:72:d4:c9:f4:
cd:01:d1:45:e1:4d:e3:1c:9e:ad:fa:f8:a6:bb:e1:9a:8f:a4:
ce:6a:c4:af:62:0b:b2:38:2f:22:bf:55:ab:28:f6:14:9b:63:
ed:d4:e5:e3:17:89:fb:54:eb:99:5f:30:41:21:1c:e1:bf:c0:
b4:2a:f2:a4:c3:e9:b0:81:7e:97:a0:e7:ec:d0:f2:5d:45:73:
d3:00:5e:4c:83:b3:54:2f:51:f7:86:8e:12:d7:4b:3f:d2:c0:
7d:01:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:21 2026 by rpki-client