Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
File: jSO9EjEKkSMxYPAReGphEDDw-l8.mft (raw, json)
Hash identifier: armiBXyD8d6FeOi20nsda/wMY8IOznvuvd3fM7zCbhM=
Subject key identifier: 2E:6E:AF:9C:C3:EA:1D:CB:B9:55:74:41:A6:F9:EF:E9:77:11:76:E1
Authority key identifier: 8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
Certificate issuer: /CN=8d23bd12310a91233160f011786a611030f0fa5f
Certificate serial: 019D2996CAFAC5E9062822FB5EC6C84630FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
Manifest number: 018C
Signing time: Thu 26 Mar 2026 10:00:41 +0000
Manifest this update: Thu 26 Mar 2026 10:00:41 +0000
Manifest next update: Fri 27 Mar 2026 10:00:41 +0000
Files and hashes: 1: jSO9EjEKkSMxYPAReGphEDDw-l8.crl (hash: 1VBZF9mkUfRdhDskNA44FWhwxtkg5QTubh5BxtOiobE=)
2: qN669ymg8nK0FcenUzEimvS6bD0.roa (hash: BwVKGc9Um4MKhEVa9QsPEHNNx57h0Tvo1ZPD7iZnTWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ca:fa:c5:e9:06:28:22:fb:5e:c6:c8:46:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d23bd12310a91233160f011786a611030f0fa5f
Validity
Not Before: Mar 26 10:00:41 2026 GMT
Not After : Mar 27 10:00:41 2026 GMT
Subject: CN=2e6eaf9cc3ea1dcbb9557441a6f9efe9771176e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:e2:af:f8:f3:4d:e6:77:26:e4:97:f1:5c:
9c:d5:37:4e:d2:91:17:81:48:ac:22:1c:d2:83:29:
ac:f0:1d:e3:ef:a9:39:9a:a5:10:23:74:11:98:76:
17:1d:43:17:37:70:56:87:0b:42:6b:ce:a3:54:1b:
b7:8f:01:13:00:a0:df:5e:9d:0c:40:ef:66:9e:20:
1d:b1:fb:1b:34:3f:8d:c9:85:6d:67:5b:d9:fd:58:
1e:73:88:de:ba:0e:10:9f:09:79:11:e3:9c:ef:f9:
96:ac:d7:b1:12:01:49:bf:81:f6:bc:0c:29:0d:01:
32:6a:81:9b:fa:f1:f8:1d:e1:83:87:eb:9d:c1:07:
e8:14:c3:6a:08:8f:69:8c:e4:5d:1f:11:42:01:ba:
73:5d:06:ab:f3:83:5c:51:9f:25:dc:56:53:92:2b:
06:da:4c:e1:7d:50:31:04:ea:7e:4a:a2:c4:64:99:
de:18:2d:c5:d6:9c:05:2f:9f:03:40:02:a9:3b:d3:
ec:d6:2b:0d:94:48:f8:eb:82:99:b1:7f:07:ea:ed:
28:9c:73:4f:ad:f0:ee:9f:f8:02:a5:9c:9c:c2:a6:
3a:69:32:be:bb:a3:88:ac:85:7e:a1:05:e0:68:ce:
91:b9:48:6c:2c:7b:cc:ee:9e:80:19:df:b5:57:04:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:AF:9C:C3:EA:1D:CB:B9:55:74:41:A6:F9:EF:E9:77:11:76:E1
X509v3 Authority Key Identifier:
keyid:8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:56:9a:8e:64:5f:5b:eb:f7:b4:39:ca:1a:3f:1f:b2:4e:d2:
59:67:6a:a9:99:d2:40:aa:59:be:18:3e:7e:6d:b8:32:b3:fa:
c9:bf:bd:3e:dd:a7:92:d3:1b:4a:77:96:77:b6:35:75:5c:4e:
ae:96:57:0b:15:29:57:f2:5f:ee:72:74:59:77:ad:14:f3:44:
66:77:1e:07:6b:f6:87:a3:3a:3e:87:5e:f1:4f:6a:8d:1c:74:
1e:30:c8:e4:36:b9:76:b1:2a:f1:37:54:61:48:6f:63:44:53:
0e:5f:0b:ae:c8:d5:ea:5a:20:db:3e:d7:24:23:50:e0:a1:15:
d8:d4:73:9a:5d:fe:63:c7:b0:ac:01:4c:0b:e2:dc:ee:22:e3:
6a:6a:c3:79:ba:66:a4:d9:c7:f3:c9:20:d6:b4:e9:88:af:53:
12:5a:fe:ff:f6:79:d3:81:ff:c0:27:18:a2:7c:eb:f3:90:e1:
8a:80:34:bb:50:b6:6b:a7:dd:d8:fb:be:82:ff:5f:8d:a3:84:
e0:68:bf:59:af:a1:06:9c:3e:34:2e:a3:62:d3:64:36:8a:f2:
5c:c9:de:2e:76:06:49:e8:53:af:6f:18:fd:31:0f:95:e5:37:
6a:d0:85:f3:0a:37:83:a0:46:24:7a:d1:a9:8f:57:f5:1e:c3:
fd:75:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:53 2026 by rpki-client