Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier: jDmndVq1DH/rnWqPXNY++RVRDC+V3gbAlEXqxHxVJFc=
Subject key identifier: 7B:5B:DD:44:EA:3F:BF:42:A4:6F:4F:F9:E4:6B:8A:00:4D:E4:21:70
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial: 019D28BB48505268BCB8068B49B82B647FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number: 0904
Signing time: Thu 26 Mar 2026 06:00:55 +0000
Manifest this update: Thu 26 Mar 2026 06:00:55 +0000
Manifest next update: Fri 27 Mar 2026 06:00:55 +0000
Files and hashes: 1: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: vZ80ErdA6X43zj/pzNSJi4Owc/rqlC2Dgsuq2g4tPgA=)
2: bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa (hash: mlGeYAkzIiaMQu2uNg0bx5zSdfDctbxIGGNO6WnD0zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:48:50:52:68:bc:b8:06:8b:49:b8:2b:64:7f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Validity
Not Before: Mar 26 06:00:55 2026 GMT
Not After : Mar 27 06:00:55 2026 GMT
Subject: CN=7b5bdd44ea3fbf42a46f4ff9e46b8a004de42170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:91:d7:c2:f4:85:0d:a6:0a:32:49:cf:75:
73:f7:12:a8:f1:48:ac:38:3d:6b:0e:36:48:38:ba:
ef:eb:8b:20:76:9b:6a:e6:83:a0:e4:2f:86:14:56:
30:4b:14:e4:ce:c8:bc:21:3b:d7:12:f5:c2:01:67:
c0:81:db:5b:e4:4b:56:ed:9f:c7:da:a7:42:10:6e:
ea:49:db:db:56:64:ee:53:8f:43:07:a1:af:07:34:
73:da:df:46:61:6c:f5:43:fd:cb:ca:09:fe:4d:5b:
65:be:34:bf:2f:db:cd:c4:e5:e3:d9:7c:4b:8f:ca:
3d:0b:e3:ac:07:f1:9e:a4:e9:64:be:0f:b2:6c:5f:
ea:cd:ad:f0:4c:7b:e5:2c:7a:ff:a9:6c:5b:b9:d7:
0c:f6:09:93:6f:6b:b6:a4:60:6c:9e:2c:3a:7e:cb:
bb:fe:0c:83:35:10:97:a1:a7:d6:4c:90:76:f3:79:
bc:ec:70:10:0d:eb:89:53:7c:aa:0f:01:03:57:19:
ff:64:77:d3:d2:93:f2:8b:01:f7:95:fb:b1:36:d5:
b7:43:15:3a:ff:92:6d:84:84:b7:d0:d6:04:63:86:
c3:6f:87:64:b8:8b:75:b6:36:bf:f7:b5:b4:2f:76:
61:b3:22:e6:50:71:13:47:19:40:73:7e:00:e9:21:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5B:DD:44:EA:3F:BF:42:A4:6F:4F:F9:E4:6B:8A:00:4D:E4:21:70
X509v3 Authority Key Identifier:
keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:e8:6e:e1:5d:a4:d8:ad:81:2e:09:9d:96:46:f2:da:92:
95:94:a3:19:97:2f:bf:92:0c:f7:9f:93:68:92:58:4d:ed:94:
65:9f:ad:5a:6c:13:1c:a1:99:90:49:a3:db:36:fc:d7:0f:53:
9a:74:fc:a0:d3:b8:44:b9:a8:73:bd:73:a5:bc:f0:9b:97:d4:
3d:62:0e:97:81:d1:fa:7b:2c:59:a4:65:d7:51:89:db:5a:64:
13:c5:5c:9b:26:a0:e0:3c:15:e0:38:71:d0:13:19:a1:17:81:
d4:41:3f:6d:bb:54:17:d5:b2:3a:d3:08:04:1d:b3:32:49:01:
05:57:54:a2:b8:d6:b1:ef:0e:8c:3d:ed:80:ce:9d:06:75:d2:
0b:19:9d:19:ad:13:3f:bd:68:3b:4f:37:92:93:e5:6c:d0:3b:
62:1e:ce:42:f0:94:06:2e:5a:87:0c:f9:f7:31:62:10:65:cc:
4d:4d:b9:a0:fe:2e:d1:33:1d:e9:ee:45:1c:dd:87:06:62:71:
9a:48:79:b6:c5:ab:a7:55:bb:31:a2:48:7e:a5:e3:74:ac:52:
17:ee:a1:05:50:65:ed:b5:2b:df:4b:c4:07:82:b6:34:ef:05:
3b:a3:29:da:f8:40:2e:35:a4:77:a0:09:b3:99:a9:8e:98:fc:
a8:b9:72:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:14 2026 by rpki-client