Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: +GlIqHpwOTo2B0+O9fjpMfoYA+bBACHQ9aj415Yq9Qc=
Subject key identifier: 86:D4:89:F9:F2:E9:8D:36:83:27:FA:8A:28:A4:6C:BA:DC:06:69:3F
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019D277273BCF349A656A1D0CE4F9485DE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 1434
Signing time: Thu 26 Mar 2026 00:01:45 +0000
Manifest this update: Thu 26 Mar 2026 00:01:45 +0000
Manifest next update: Fri 27 Mar 2026 00:01:45 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: KtqmAIXZKyPDBWf/YLALppDGQE2Cp5hTlz1JuTaCX7A=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:73:bc:f3:49:a6:56:a1:d0:ce:4f:94:85:de:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Mar 26 00:01:45 2026 GMT
Not After : Mar 27 00:01:45 2026 GMT
Subject: CN=86d489f9f2e98d368327fa8a28a46cbadc06693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:12:79:b9:90:ad:fb:8f:6e:e4:d4:0e:50:
7f:cf:25:f8:47:bc:a9:68:0f:ad:5b:c2:dc:6a:95:
32:30:89:9d:bf:9c:d1:05:6b:17:51:c3:1c:c2:6f:
64:f2:2c:c5:3c:91:cb:95:50:c3:8e:cf:4e:51:99:
c6:00:39:ec:38:99:92:ee:a6:a3:48:a0:9e:63:0e:
f8:59:75:61:20:ed:6c:f9:89:00:81:a1:2b:17:da:
d5:3e:a6:69:76:c3:c7:5c:c1:8f:05:46:1c:21:fd:
55:3a:81:cb:c6:91:54:88:70:31:37:23:f9:e9:f1:
98:1a:89:43:d3:e6:68:be:93:6a:18:f8:7e:c8:c0:
8b:e4:ef:47:be:d3:59:01:fe:d1:05:ad:c2:69:fc:
10:1d:b1:71:95:8e:9c:dd:8d:0c:33:ab:68:64:19:
98:88:4e:dc:42:1a:63:75:1e:39:10:bf:b8:76:b3:
c3:56:05:f9:9e:5f:86:db:a9:e2:73:31:33:08:03:
9d:66:91:7a:1d:09:8e:bc:3e:40:79:96:c4:3d:3c:
a4:ea:41:a4:9e:8d:b5:46:2b:2f:7b:52:87:bb:c3:
c6:37:ec:9f:59:46:31:a2:1f:8d:52:50:f9:b7:81:
28:ea:3b:c7:b8:32:45:cf:2a:d5:9e:99:02:4e:6b:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D4:89:F9:F2:E9:8D:36:83:27:FA:8A:28:A4:6C:BA:DC:06:69:3F
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:db:a4:e7:ee:4e:ad:d4:e4:ef:8c:a1:1c:dc:da:1a:c5:
e5:64:f7:02:6f:1c:bd:d6:03:ae:af:77:e1:dd:54:e4:a7:f2:
69:76:2b:27:05:b1:2d:78:4a:26:7b:8f:2e:6d:28:bd:5c:f8:
a8:6f:62:47:61:c6:d6:13:f8:d0:51:c5:02:c1:97:b8:27:11:
e0:48:35:b0:82:26:08:42:64:e1:89:dd:02:db:d0:3f:16:14:
aa:a0:69:0b:6c:e8:82:9b:00:9b:cb:81:b6:73:f9:42:4b:6d:
48:c9:df:63:93:78:f3:df:d7:fa:bc:c5:65:2b:f4:57:9b:cb:
0e:7c:b0:05:4d:a4:e3:6d:01:ac:c6:df:bf:d6:50:3c:6b:fa:
59:10:d5:a1:cc:17:83:73:b8:34:31:ac:18:6b:99:d0:4c:05:
e7:49:e9:c9:6c:2a:2a:d8:45:51:78:82:6e:cb:d9:2b:81:bd:
6e:ce:84:91:46:2a:ef:36:46:3a:f6:2c:24:81:3d:f0:fe:ed:
39:81:20:37:d1:cd:2d:d2:f8:59:b0:4b:e3:76:ed:bd:26:78:
1d:62:d3:b7:80:46:c1:cb:11:30:cc:09:67:c7:15:e5:a4:d3:
03:f5:6f:68:f7:89:cd:94:e9:7f:e4:25:0a:ac:aa:1e:83:b5:
4e:53:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:12 2026 by rpki-client