Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: b9f6EeAr3bhJDp6TWEiBCWD6g8YlVkVYmxbz/Ti7tv4=
Subject key identifier: 8D:F5:B5:D8:37:2D:9F:6A:1A:A3:DC:1E:1A:45:B1:DC:93:85:7F:8B
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 019D28844B31CF7EF8F220BBD35DCFDC6FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 0A38
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa (hash: 5JOSX/QZCccK/gUOeYHPT0U61k8N4LEoiccIN7jDjPo=)
2: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: Hrr79nwxMswJWM7QYBSlOTqTZ8JNJuDe04GDHDKpyJ4=)
3: nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa (hash: SjtdaWQXMJk13J5xCejsgWLSIcSxD709iSf13daT5JQ=)
4: yd8JpikDeAGL1RyToXLtaBhLXs0.roa (hash: WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4b:31:cf:7e:f8:f2:20:bb:d3:5d:cf:dc:6f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=8df5b5d8372d9f6a1aa3dc1e1a45b1dc93857f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:8a:8e:96:9b:8e:a7:83:3f:be:e1:a9:83:
36:24:c2:7c:4b:6c:24:09:f4:90:c7:5d:3b:65:48:
0e:25:46:11:c2:a1:2d:04:bb:1a:85:f1:90:ec:21:
49:08:f7:1a:6f:12:4a:4b:07:7b:ff:4d:e0:45:1a:
98:53:5d:35:4d:45:be:aa:2a:05:b2:8f:9b:d0:8b:
f7:42:2b:d9:37:0f:b4:fc:47:2c:34:dc:4a:04:5a:
cb:41:ef:1c:73:75:19:ec:26:81:a1:8b:0e:7c:b3:
41:75:73:73:c9:35:d2:9a:fa:e7:7f:34:fc:bd:9b:
08:b7:be:1a:61:1f:76:59:e7:b5:02:3f:9c:3f:3c:
53:4c:15:43:44:f6:4f:b5:bb:d2:d5:6f:7d:2e:34:
5f:79:f7:9b:c7:d5:f6:31:eb:24:a6:57:91:11:10:
8a:6a:f9:e7:8b:be:12:20:5c:7c:92:48:c2:b6:bd:
bb:6d:c9:b9:94:e8:d3:05:da:0c:70:61:22:9d:0a:
e2:78:e2:39:74:89:13:65:25:2a:70:5d:a5:a3:1b:
ea:5d:b5:dc:64:ea:b5:88:e8:56:1a:45:17:a7:58:
87:6f:25:8a:a1:03:a9:98:e8:95:64:bd:e5:46:5f:
c8:09:3c:4d:39:3d:9d:4b:78:bb:24:2d:08:91:8f:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:B5:D8:37:2D:9F:6A:1A:A3:DC:1E:1A:45:B1:DC:93:85:7F:8B
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a9:a0:3d:dc:70:55:0b:af:67:72:f7:b9:91:c8:95:a0:fc:
bf:0e:3b:39:38:69:4f:43:22:d9:ae:9c:30:ea:c1:38:16:a5:
98:95:10:ba:00:c9:44:c4:11:44:5a:f8:07:d3:19:04:c5:cc:
b5:75:14:de:15:86:e7:b7:4f:a3:50:dd:d0:f6:86:40:59:f2:
ea:4e:ec:e3:e8:61:49:79:27:a5:58:ef:2d:73:a8:16:41:07:
0d:42:81:16:bf:bc:99:01:a5:1c:ca:7e:9e:d2:3f:91:2a:a2:
ff:2e:51:2b:83:b6:f5:91:74:eb:bb:df:a3:ea:2d:0b:b8:57:
4e:81:1d:9d:b4:71:7c:d4:e2:cc:ca:d0:31:b4:ec:fc:48:66:
98:f1:37:fa:03:60:bd:95:8d:7f:ab:72:16:be:93:c0:5e:7d:
57:ad:b1:cd:69:ce:94:c3:75:41:0c:f3:db:20:41:c4:5a:aa:
87:88:27:32:e4:49:aa:64:82:d5:1f:85:04:93:4f:d0:f4:01:
38:0d:24:5e:44:5a:d5:bd:21:26:24:6c:3c:9c:17:49:3a:0f:
e4:c4:ec:9f:fe:80:6b:48:00:53:6b:1e:41:0f:ce:02:ab:c7:
ed:74:cb:c8:fa:1e:89:5f:ef:bb:1a:14:9a:3d:27:2a:4c:e7:
83:98:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:33 2026 by rpki-client