Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier: 2X0+EgynKkaZiiMVnnssKRBkZ+D8FwHPmlNUZEV/loQ=
Subject key identifier: 8A:72:B2:16:C2:00:13:E3:63:A0:57:D9:62:2A:A1:93:52:A2:59:2D
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 019D254C7A24B944D32C5CF91FF6E010C9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 14:01:02 +0000
Manifest this update: Wed 25 Mar 2026 14:01:02 +0000
Manifest next update: Thu 26 Mar 2026 14:01:02 +0000
Files and hashes: 1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: tZAhmk2QBANsZtsQUHDsz1os6ubvYLre7F2YGxeVd9M=)
4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:7a:24:b9:44:d3:2c:5c:f9:1f:f6:e0:10:c9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Mar 25 14:01:02 2026 GMT
Not After : Mar 26 14:01:02 2026 GMT
Subject: CN=8a72b216c20013e363a057d9622aa19352a2592d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:f7:65:c1:e4:a4:db:75:d3:f4:71:3c:46:
ea:ae:cd:9e:a9:65:e0:17:b6:10:52:bb:11:09:5f:
b7:0c:85:78:b9:80:d2:80:85:79:a0:af:6f:ca:23:
e1:d0:38:34:87:b3:e7:56:53:55:17:b5:5f:10:63:
c9:1b:62:d4:6e:d0:51:5c:1d:a4:ef:c9:12:7e:a5:
3c:ec:1a:16:f5:bf:ef:1b:8a:1f:8d:0e:7d:35:a2:
82:fa:ae:81:9b:1e:3b:ef:3b:21:fa:1f:0b:b5:ad:
44:17:aa:d2:6f:f4:22:2f:ee:59:fa:3e:4a:86:ef:
fd:85:80:e3:91:c8:96:f1:9c:7e:f4:05:c7:6f:bd:
e4:b1:fc:64:85:06:fa:8d:82:4e:23:64:12:ed:e8:
7e:85:54:2e:2f:28:51:cc:15:c2:bc:f9:15:1c:2c:
c3:43:db:7a:ed:6e:24:d4:94:a2:a8:a1:c2:09:7c:
32:f3:75:3d:98:6d:e4:a4:87:1a:19:ad:2f:66:ac:
1a:3c:0e:1f:30:30:9f:ae:0a:85:f6:45:c9:aa:91:
a7:43:82:aa:6a:50:ac:cd:6b:69:70:8e:67:ed:27:
f9:14:95:71:a8:87:08:4d:6a:2c:a3:1e:b1:d0:30:
05:ae:b3:3b:77:e2:d9:a2:15:d6:31:9d:de:c5:7b:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:B2:16:C2:00:13:E3:63:A0:57:D9:62:2A:A1:93:52:A2:59:2D
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:ed:59:d3:09:91:51:4c:b9:8f:43:5e:44:b7:37:38:fc:
34:64:35:ca:fb:1c:e2:f4:d7:b2:b7:76:23:da:a1:8f:98:63:
15:19:71:28:8f:05:d8:08:4d:ff:62:8f:a9:bb:d3:1f:45:79:
21:e9:03:17:9d:0f:dd:10:bf:45:b5:36:86:f4:46:bb:03:fc:
16:21:24:e1:73:08:12:b3:93:5e:7c:b1:f5:79:32:57:a8:e7:
bc:79:f9:8f:b4:a0:ab:9f:50:88:ac:61:68:41:2d:ef:87:f7:
2e:76:64:df:cc:73:2c:80:e3:a7:28:4e:c4:87:97:44:8b:7d:
13:bb:3e:b3:b2:97:e4:66:0e:bf:f3:47:54:9c:26:6c:13:9e:
3e:21:7a:51:c8:e5:2b:17:a2:94:7a:69:b2:3f:40:8c:fa:85:
ca:8b:2c:83:e0:0f:28:83:c8:96:9f:af:92:1d:9d:47:63:60:
92:c5:41:04:b3:09:09:4d:90:f3:a7:f5:eb:fa:8e:57:3e:34:
e5:52:e6:cb:4b:5a:99:04:85:18:ef:94:e2:5f:13:bb:a1:b5:
81:72:e0:ea:7b:ec:94:2e:88:a5:3e:77:4d:64:8a:0d:c3:b9:
b7:e8:e6:a5:2a:ff:cf:e7:7d:71:f6:94:c5:af:99:46:89:94:
71:00:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:13:08 2026 by rpki-client