Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: Gh90CW74xZqIw6Q9zgVCLv4t5/UKONk07t7SU0K8drg=
Subject key identifier: 65:D1:50:1B:09:F5:9B:8E:46:84:BD:15:9D:68:1D:4A:01:B4:8B:D6
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 019D27E046D343A3253EE028920F696F4259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:42 +0000
Manifest this update: Thu 26 Mar 2026 02:01:42 +0000
Manifest next update: Fri 27 Mar 2026 02:01:42 +0000
Files and hashes: 1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: 3vn3m0CMxwB7WuIK6IuLb1e050tQuM0D8EGYtIyzBWk=)
2: jrzLdp-DroztQ5yesperw0S2sxI.roa (hash: fM5zeQtq1zhKIrIjHXbNjUQhcEhAHLAsHH7/oZggY6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:46:d3:43:a3:25:3e:e0:28:92:0f:69:6f:42:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Mar 26 02:01:42 2026 GMT
Not After : Mar 27 02:01:42 2026 GMT
Subject: CN=65d1501b09f59b8e4684bd159d681d4a01b48bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:c2:f2:6e:53:4a:6e:4b:9d:5b:83:e1:c7:
a6:d1:78:b7:7b:25:e8:d2:01:81:66:8f:95:9c:85:
dd:e1:da:3f:5b:0d:fa:5f:24:37:2a:76:e8:d4:09:
d0:91:7f:77:d7:90:52:f3:6a:45:11:ec:04:57:e9:
ab:a6:26:18:f7:0c:4c:f6:3e:87:3c:e7:a3:60:bb:
e1:d0:59:1d:db:fc:78:d7:c0:38:2f:4e:d0:ef:67:
7f:ca:b3:93:11:30:27:bf:1b:9e:c9:ad:c3:1a:33:
14:ae:36:d6:11:ff:74:19:b6:51:f8:78:a5:eb:a7:
42:bd:91:61:9b:bd:02:61:e3:06:6c:af:11:2d:1e:
4c:61:80:34:eb:8c:17:cb:d3:f5:4d:4a:f0:c8:38:
1a:34:66:dc:2f:e3:41:a3:5d:84:af:de:15:b5:f1:
77:04:3e:87:4f:f7:d5:e1:a3:b4:e7:25:28:80:ee:
3d:cb:fd:87:5a:bd:6a:fb:a2:3d:9c:7c:df:bc:bf:
46:77:be:46:35:4f:14:3c:f7:7e:d3:9b:42:aa:3a:
21:e2:69:87:5f:1d:ba:fd:4a:a4:e9:a7:7f:38:71:
fd:d2:02:58:b6:84:de:7a:f0:32:e5:95:f9:ec:cd:
19:98:3b:74:ef:36:96:eb:42:ad:26:0d:a4:9f:c8:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:50:1B:09:F5:9B:8E:46:84:BD:15:9D:68:1D:4A:01:B4:8B:D6
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fd:90:82:0d:5d:7a:1a:ef:31:d2:db:15:e0:8c:00:9d:62:
14:b8:4b:a3:c2:61:63:fc:04:be:38:c0:64:b9:30:5e:e1:24:
c0:46:2f:3f:96:9d:a4:52:4e:90:92:bc:84:d5:0f:38:d9:e5:
cb:05:62:c5:ae:d2:2a:09:ab:51:5b:c0:bf:4d:4f:86:53:0f:
7d:c6:a1:a9:24:8a:6d:c8:5c:2d:a2:54:e8:ad:54:d0:bd:ed:
aa:ff:aa:76:f7:f8:07:12:33:33:ab:8f:19:dd:c2:4a:80:bd:
fe:08:82:b1:14:b0:ba:4c:57:4c:d4:4f:2c:ac:d2:b9:5f:5b:
c3:1c:30:10:e9:b7:5f:6a:3a:ab:6e:fa:3a:e0:fe:fc:a6:c3:
6c:39:70:eb:49:d0:81:e7:d0:ea:b9:ea:1b:a2:66:97:54:91:
cb:b2:4e:5c:ec:5d:e0:36:71:a1:92:91:d3:c1:6f:25:86:0b:
40:77:9f:5c:d8:8c:e5:1d:ae:e8:7d:b2:60:5c:d7:30:6d:ba:
2d:9a:2a:bc:77:fa:9b:4c:1d:df:a4:66:7e:bb:54:1f:ca:72:
b3:23:81:37:3b:bf:b5:29:33:e9:99:d5:a5:1f:da:bb:d6:11:
05:bb:88:ee:7f:1a:cd:ad:44:0c:a1:46:1f:8e:c2:34:3e:23:
1c:0c:70:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:00 2026 by rpki-client