Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: Qsfi70YYmar+V2NVvcTkFssJWFPjFx4B2oZCctD97SM=
Subject key identifier: 5A:04:6C:F1:5A:C9:C6:EB:66:3A:3E:76:8A:E0:C5:94:98:D1:F5:50
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019D25F187E20E8A3CB61234371145C4D4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0B52
Signing time: Wed 25 Mar 2026 17:01:19 +0000
Manifest this update: Wed 25 Mar 2026 17:01:19 +0000
Manifest next update: Thu 26 Mar 2026 17:01:19 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: WGmo_mU3SAa7xrV4ZnvE-M0GlaY.roa (hash: pAqCFCdg2/as0581Q0MGLjKUIL2u1WKZ22qGZB9i2AA=)
3: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: 3ZhsHcBmKVuwbntNwlxCS0JllDGDLTsomb77yoZhIwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:87:e2:0e:8a:3c:b6:12:34:37:11:45:c4:d4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Mar 25 17:01:19 2026 GMT
Not After : Mar 26 17:01:19 2026 GMT
Subject: CN=5a046cf15ac9c6eb663a3e768ae0c59498d1f550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:8b:27:cf:7b:e0:e1:67:91:ca:0a:b0:0f:
fb:26:6f:fd:b5:86:42:64:0b:30:0b:62:5d:5b:54:
18:c0:3a:7b:95:4b:75:40:c2:49:31:10:e5:4e:71:
9b:12:7e:6d:5a:ec:7a:4f:59:6f:ef:02:c1:79:5b:
1a:50:f7:f6:be:1e:07:18:98:4d:ed:f2:e4:e3:90:
ff:f8:7d:40:2d:04:79:b3:36:fe:9d:46:c8:4d:6a:
c5:0f:52:2e:68:10:ba:09:f5:28:bd:6d:75:b5:d0:
7f:1b:63:82:40:40:5a:69:83:76:83:49:c0:fa:54:
8c:d5:fe:07:37:1e:59:7b:05:28:3c:28:0f:a6:13:
8e:be:42:71:bb:f7:b8:15:fc:e0:c3:eb:93:6e:3d:
8d:59:b1:18:ce:d6:fc:21:58:84:45:c7:a5:85:9d:
af:0a:7a:06:a9:34:c3:16:d2:2f:8f:c9:67:90:2f:
33:d0:c0:76:ce:c1:d1:5d:53:ed:f8:8a:6d:aa:de:
8e:8f:80:60:0c:c0:cd:11:e2:f4:c0:0a:c1:73:df:
33:16:52:ea:54:e4:89:2f:2b:ad:cd:6a:d4:d8:28:
59:04:24:ec:dc:7e:af:cc:dd:8a:12:8e:40:ac:dc:
9e:d6:57:eb:fd:0e:da:f0:c1:1b:8f:82:1f:43:70:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:6C:F1:5A:C9:C6:EB:66:3A:3E:76:8A:E0:C5:94:98:D1:F5:50
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dd:9a:c9:5e:ce:a2:bb:9b:6d:73:44:bc:7e:82:73:cc:18:
b8:44:31:92:18:ce:7a:5c:fd:68:12:20:a3:78:0a:ee:19:ca:
fb:25:0d:c9:1a:7d:31:60:d1:6b:31:fe:e8:f5:86:4c:56:ef:
1c:a5:09:a6:b6:0f:8d:07:89:26:c0:ab:2e:47:3d:57:ec:11:
55:0f:9e:ce:1b:03:ba:72:aa:57:cb:2f:84:74:b2:95:1f:ad:
92:22:de:ba:f5:a4:44:63:9e:a3:67:b3:06:89:80:cd:be:07:
ee:92:e8:c3:7a:e4:70:e9:d7:cc:7d:8b:1d:04:4c:10:ed:c0:
fd:c0:6b:b3:42:29:1e:f2:0b:14:cc:3d:8d:ff:63:ed:1d:88:
9e:f2:0c:11:da:ed:5a:b5:85:b8:ce:cb:49:21:f2:36:0b:78:
f2:6b:f7:7c:5e:90:12:b3:fb:09:92:48:7e:af:09:6a:18:a8:
8a:9e:4a:cc:0e:9d:53:cc:1d:72:41:1c:74:23:e7:60:8a:73:
86:aa:d1:4c:6c:e5:6b:dd:86:e2:2e:8d:13:40:0d:89:bc:e9:
31:11:24:6c:ab:52:c7:7f:77:1d:c1:e2:4f:65:32:0e:29:18:
83:8c:8a:fb:f8:3a:c9:b2:62:a3:07:2c:12:a8:dd:da:42:a4:
9a:92:e4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:45 2026 by rpki-client