Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier: D/rFgM2ETfC60hFWObkskGAqmZNQ2DJ3hF67FTj/Hog=
Subject key identifier: 76:58:A8:7B:22:10:9C:E2:46:EE:A4:5A:6B:FA:63:BB:70:BA:A0:C2
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial: 019D29291083FF65A4DEEE32D9054611BF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number: 0257
Signing time: Thu 26 Mar 2026 08:00:49 +0000
Manifest this update: Thu 26 Mar 2026 08:00:49 +0000
Manifest next update: Fri 27 Mar 2026 08:00:49 +0000
Files and hashes: 1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: NDRWBp4zsSb+qPYksc/DUvHPU44VmxBnMztz8OfYUbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:10:83:ff:65:a4:de:ee:32:d9:05:46:11:bf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
Validity
Not Before: Mar 26 08:00:49 2026 GMT
Not After : Mar 27 08:00:49 2026 GMT
Subject: CN=7658a87b22109ce246eea45a6bfa63bb70baa0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:65:89:d8:43:09:db:4f:c9:2b:c7:47:99:
12:75:6e:9d:79:77:00:4b:98:6c:9d:05:87:da:82:
1c:ca:8c:6f:97:98:83:ba:a3:b0:23:22:0a:8a:bd:
cf:e4:9d:e1:17:7e:fc:3a:87:61:05:0a:31:24:68:
5e:6c:59:97:fc:65:6d:0a:58:08:a3:61:46:1c:72:
44:56:23:4c:a0:e5:e3:90:b4:dd:26:5f:7b:2d:62:
05:d2:10:47:61:52:2d:2c:00:e8:22:31:d7:6c:c3:
ae:6b:52:39:08:f8:0b:cb:49:99:f4:46:72:d9:47:
70:be:c4:a4:2d:56:8d:63:c1:78:8b:17:fe:7d:b4:
bc:9d:6d:f1:80:9c:16:7c:d8:c8:ee:70:e3:5f:d6:
b9:b7:b8:62:e2:38:1d:e1:ee:4e:0d:4f:2d:74:6c:
a4:6a:c8:9d:54:94:10:17:58:72:41:7c:46:a0:e7:
58:f0:9f:6b:56:ec:2b:c7:6f:fa:fb:6d:4d:3e:72:
6f:1e:12:8a:ee:39:a8:af:1d:18:5a:4f:fb:5c:b1:
08:be:32:21:41:1c:e4:19:ac:e0:f3:18:7a:c8:79:
78:ad:3b:ea:e2:a0:5c:9c:75:87:b1:3b:cf:d3:e8:
03:87:32:80:18:93:bf:37:80:4c:17:05:f3:c2:f6:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:A8:7B:22:10:9C:E2:46:EE:A4:5A:6B:FA:63:BB:70:BA:A0:C2
X509v3 Authority Key Identifier:
keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8a:68:a0:94:ff:b5:79:a1:cf:99:24:8e:05:14:75:2c:88:
a5:8b:4f:91:e1:3a:b5:27:fe:16:8f:19:a7:f7:9b:16:38:59:
d4:a0:9b:e7:7e:c8:a1:1a:0b:21:52:f1:27:c8:5c:8f:a1:7c:
b3:43:6a:19:28:35:2e:cf:a8:27:36:2c:f8:73:98:bc:9b:2a:
9b:c4:7f:c9:d1:66:1b:ed:b5:9d:fc:e9:27:b5:32:27:65:2d:
d7:3c:a6:9e:4e:19:1d:58:87:d4:d1:3b:41:82:6b:57:0f:4a:
6a:6a:85:56:03:4e:d1:d1:a8:07:fd:be:ab:50:87:6b:9b:91:
1a:16:90:f8:40:9e:74:63:79:e6:ee:6d:2b:3c:76:ed:8a:7a:
d9:1b:db:13:67:fe:37:d9:5d:ac:15:37:9f:f8:ee:a9:63:03:
53:f0:05:ef:26:e1:89:4a:15:39:ec:d9:79:66:53:aa:a2:95:
55:86:ba:37:1e:b9:fb:37:3f:07:32:a4:b0:ed:ee:18:d8:37:
86:dc:71:7a:83:18:93:54:fb:24:79:a7:f9:2e:ed:22:4e:85:
db:6d:45:bf:e6:68:ed:ee:fc:c6:dd:67:72:a0:66:9f:be:db:
49:6b:1c:ef:28:44:2b:aa:80:e8:24:90:51:91:fd:56:fc:5a:
74:68:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:41:31 2026 by rpki-client