Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: Qd3aaOeBv63Ff0CyVykXp0VnxCSrWavJfxEcto2p8W0=
Subject key identifier: FA:72:ED:31:DC:80:CE:69:38:76:E0:42:9F:41:CF:33:C1:5B:31:75
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 019D28165F89AE6C0286DA4F10E3205599A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: OQ9Hd0aNbo2NqKQaJbOywBhZIsI.roa (hash: 2qz4jxI2YE3EpG4tgKD3UnEwvItdboMyeyLo8EjTciU=)
2: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: 0rjwdLe9LlCKj7JFa8d8E9odSNkk21z30+aViOZMS/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5f:89:ae:6c:02:86:da:4f:10:e3:20:55:99:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=fa72ed31dc80ce693876e0429f41cf33c15b3175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:1e:87:3f:d2:74:17:5d:e3:6c:db:3a:e0:
a3:c1:42:b5:37:fe:e5:b7:0d:d6:82:36:7f:92:61:
d3:dd:9a:02:6b:65:ac:8f:8d:72:ee:07:5d:24:cb:
97:83:c4:0d:04:41:60:1e:96:ad:93:f0:e0:45:8c:
af:a7:51:20:d2:af:a1:78:a1:0b:59:30:43:ca:bb:
af:ae:d6:1e:96:c9:c8:b3:90:81:13:09:12:02:a7:
ca:7e:07:b6:04:1c:f5:69:3d:eb:1a:6a:60:be:38:
b2:34:d4:2a:01:55:58:52:db:10:21:31:a2:e6:9e:
01:2a:72:af:71:9c:3a:6f:c9:37:6e:4b:a4:f4:80:
84:81:b3:49:d1:9b:9c:60:65:7e:c4:05:a7:8c:40:
5e:b8:18:7e:f3:01:5a:eb:35:04:c5:f6:da:7d:8f:
bf:81:de:72:7d:b6:f7:35:ba:7c:ca:da:11:a1:cd:
c2:21:d6:b6:98:4c:7b:a3:12:6b:84:d2:4b:ea:bc:
60:92:9e:e1:34:ab:07:c3:6e:54:d4:ee:a2:5c:50:
40:b7:40:6f:8e:63:f6:6f:3f:8f:f7:28:24:a0:7f:
a3:06:e3:25:ce:5e:c6:d3:b0:39:cd:3f:f4:cf:de:
61:9c:7a:e9:45:40:6b:c0:f1:2c:9a:c9:6e:1f:ab:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:ED:31:DC:80:CE:69:38:76:E0:42:9F:41:CF:33:C1:5B:31:75
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:e0:2f:d6:d5:c6:ae:52:18:50:17:7a:01:0a:77:55:d3:
7b:2c:fe:97:48:72:8f:d5:cf:94:f6:de:9c:2f:52:10:fc:37:
7d:83:25:a4:b8:10:de:c5:3e:21:39:99:75:f9:d0:c6:dd:5d:
7b:7d:7b:8e:10:d5:27:ee:47:25:8b:58:0e:4c:0e:3f:a9:8c:
bb:02:e3:04:e6:14:58:01:6d:53:a6:58:bb:59:a5:f5:e5:92:
e7:42:0d:5b:61:29:66:4a:b3:31:9a:a2:00:4b:a2:99:62:88:
46:4b:ed:19:6f:c7:e0:dc:fe:42:a2:98:41:bd:93:8f:e8:a0:
79:01:b5:dd:f3:06:e9:00:f9:d9:c7:d2:fa:dd:93:27:f7:6c:
13:ec:41:c5:cc:74:da:0e:49:d9:42:3a:93:a2:53:63:0d:6f:
8d:86:76:2b:90:a2:89:c7:75:84:d7:5a:ca:6e:68:ae:7c:f6:
72:a0:6f:42:59:7a:d4:6d:52:27:75:b4:c5:fb:2b:a0:cf:16:
a3:68:9c:8b:e2:5a:ce:e0:17:31:21:f4:1f:dc:75:bb:7b:77:
c5:2a:96:4e:b0:31:65:1c:a6:63:0f:45:a2:dc:77:7e:c4:c2:
f3:12:48:6c:e0:5e:9f:2f:69:87:da:53:40:c5:f5:ad:cf:1d:
05:49:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client