Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: DjJ6WTdzg5WeHjrssDuzZcfCyl0iKdsThZ5++RBWwOs=
Subject key identifier: CA:ED:7C:A4:26:8A:CD:38:B2:84:5F:A5:F5:7B:AB:56:28:8C:83:FC
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019D27DFB5F46AAF315A49377A4BF32307AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:05 +0000
Manifest this update: Thu 26 Mar 2026 02:01:05 +0000
Manifest next update: Fri 27 Mar 2026 02:01:05 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: 4ArDKXIM7ji6C/tD8QxEEn1thRHzPZbolEVYUClBsbI=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b5:f4:6a:af:31:5a:49:37:7a:4b:f3:23:07:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Mar 26 02:01:05 2026 GMT
Not After : Mar 27 02:01:05 2026 GMT
Subject: CN=caed7ca4268acd38b2845fa5f57bab56288c83fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:3e:dc:d2:10:5a:dc:e5:5f:ab:4c:1d:71:
54:80:3a:c2:a7:06:0d:b0:e3:fc:47:83:3e:ee:f9:
8a:6a:75:8c:81:e1:ea:24:21:ea:fa:cc:d0:8b:a3:
d7:3f:48:64:94:0d:c9:fa:b8:ee:a6:cd:a6:1d:df:
9e:3f:a9:67:15:2f:3a:03:2a:18:6a:76:44:c2:2c:
50:78:04:f5:cb:83:b8:f3:fb:ef:1a:3b:0b:d7:37:
b6:57:f0:4b:a1:55:19:ff:bc:d1:09:84:39:76:92:
3a:de:08:6b:ac:d4:5d:0e:ea:ec:9c:d1:9e:42:f4:
8a:9f:86:fc:1a:f6:0b:d1:0a:81:96:ee:f4:e9:f1:
51:5e:32:9e:a9:fe:6d:16:c0:49:47:93:9f:f7:13:
11:a8:69:6a:9d:39:b1:93:e0:9f:78:54:ee:76:92:
9b:b1:e9:c6:d9:d0:1d:c3:37:e3:88:19:58:e9:a6:
32:e7:da:b6:b1:21:d1:56:ac:34:8f:c8:d9:78:0e:
13:7d:66:66:fe:24:d9:97:48:c7:ac:a0:74:0e:3d:
b4:1e:f2:45:38:52:4e:f2:25:36:bf:e2:3a:d0:9a:
19:16:54:2f:f3:75:95:35:6d:33:16:79:eb:9f:86:
87:2c:72:27:5f:31:ff:89:62:05:a7:84:75:d2:43:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:ED:7C:A4:26:8A:CD:38:B2:84:5F:A5:F5:7B:AB:56:28:8C:83:FC
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:52:f4:d1:e8:1c:f1:e6:00:93:7b:55:47:a5:7c:00:80:19:
23:32:29:1d:65:7a:7b:e3:7d:dc:22:6b:37:c6:05:d3:df:f1:
4a:48:83:e6:5f:c1:51:2b:48:5a:5f:b4:3a:b2:29:19:aa:86:
70:28:f0:7f:10:45:b4:b4:43:2b:7a:62:db:d9:da:2d:95:a2:
c9:ee:c0:be:d1:b3:ec:9d:ed:54:b8:ec:a5:82:78:9c:2e:ad:
4b:78:fa:82:60:76:dc:d6:c1:82:c4:2a:88:57:fe:b0:28:a4:
13:0b:01:7a:99:cf:0a:29:4b:e2:ff:ae:27:93:67:9f:b2:9d:
08:34:3c:f0:06:9b:9f:16:f0:b1:9a:9b:bd:58:53:a7:17:10:
c3:8e:10:4c:bd:ed:fb:a8:c3:f6:f3:a4:ee:8f:7d:fa:1c:fd:
83:41:36:3f:f4:8f:fd:d0:1a:38:39:30:a7:28:5e:ed:4e:a6:
4c:fd:53:db:0b:5e:87:a6:68:f9:f0:69:d4:3a:28:a5:78:89:
06:30:1f:0f:cc:af:6a:ff:67:74:17:3d:63:70:b0:d2:f6:11:
99:d8:a9:95:8b:1a:be:d6:b0:81:57:84:1e:74:96:ec:05:c1:
f8:55:fc:74:d8:c5:3f:c6:fb:ed:da:46:7e:e0:8d:37:fd:51:
81:7b:33:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:56 2026 by rpki-client