Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: cksnFNY4eowiGOBBaBfihrb32ylCJyWo6Payn5zuJOI=
Subject key identifier: 51:92:4A:84:CC:F3:31:9F:DC:9B:14:25:6F:AE:5D:D1:61:F1:13:50
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019D2772F51CD6EAD2E5A6FB81E6F60189D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0D84
Signing time: Thu 26 Mar 2026 00:02:18 +0000
Manifest this update: Thu 26 Mar 2026 00:02:18 +0000
Manifest next update: Fri 27 Mar 2026 00:02:18 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: vtzIhROOztvOFoNIscdKaP5GCjo0b0GT78xgfNFK4RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:f5:1c:d6:ea:d2:e5:a6:fb:81:e6:f6:01:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Mar 26 00:02:18 2026 GMT
Not After : Mar 27 00:02:18 2026 GMT
Subject: CN=51924a84ccf3319fdc9b14256fae5dd161f11350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:c5:30:c2:74:88:58:2d:78:d8:bf:c7:66:
6a:48:9c:b6:60:f4:82:bc:e2:3b:be:ba:5f:d1:7b:
bc:ed:c3:90:6e:f3:0b:40:f4:bb:7c:50:3a:62:6b:
cf:e5:1c:a7:8b:a2:a0:a9:10:03:7c:64:1e:96:12:
68:02:e1:f1:da:31:d6:99:d7:3b:62:38:66:0b:3a:
58:5d:4f:45:98:bb:ee:4b:9d:97:ef:2f:e1:a2:50:
fa:b6:7e:ec:59:88:ac:2f:be:2a:e5:23:ed:ff:04:
6e:34:3e:ae:f5:70:3a:e3:14:7d:46:42:d1:06:6b:
c5:29:f5:cb:c6:49:36:68:b1:db:db:24:58:06:66:
48:8d:7c:b1:8b:b4:82:25:d9:c8:c5:b9:60:fd:af:
af:ad:cd:60:5e:13:5c:26:92:a0:ed:e0:6d:a5:c5:
fa:74:a3:18:1f:f2:97:9f:2c:7a:79:4d:66:6a:cc:
c9:50:7c:66:6f:38:9c:a3:99:92:70:15:6d:98:63:
1b:01:a1:87:3a:90:4d:72:a6:d8:5c:6e:09:b8:56:
4b:9e:17:c7:67:e1:db:9f:a0:a3:91:7c:4d:69:be:
4e:4a:9f:8f:aa:05:38:9d:17:55:67:a0:14:40:60:
99:3b:9d:79:d7:58:0d:0e:d5:a6:f4:76:cf:d7:48:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:92:4A:84:CC:F3:31:9F:DC:9B:14:25:6F:AE:5D:D1:61:F1:13:50
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:e0:55:0e:85:53:ca:8f:5f:5e:dd:d0:9d:6b:9e:13:9c:
9b:7a:d1:b3:14:6f:39:0e:32:cd:8b:f4:cd:52:81:14:22:0f:
c5:e1:a0:5f:56:87:f5:85:e7:75:6e:3e:56:6e:df:2f:55:f2:
a2:7d:89:3b:e6:fb:36:99:bb:d0:8a:2d:8f:f2:bd:e9:53:c8:
3d:9c:37:61:99:7c:5f:e4:32:fe:0c:27:5e:37:87:8a:69:3d:
1b:56:25:65:d5:51:bb:8f:f1:84:c8:bd:54:0e:95:17:02:d1:
d5:e2:c5:c1:08:2a:f0:07:27:7e:8b:34:c2:98:96:32:5c:a7:
51:94:5d:e0:d8:72:b8:5b:78:b4:ac:81:4e:29:f4:cf:3d:a6:
d5:0d:40:74:9c:d5:96:1b:36:58:9b:6b:9d:6b:37:8b:36:be:
e2:06:82:3e:05:13:ce:af:2c:92:ff:71:96:d9:5b:39:c6:9d:
df:b8:7d:d3:66:3b:b6:1f:81:2b:64:79:a9:7f:3a:6e:c7:25:
b5:6d:c7:49:a9:99:fb:85:b9:f3:1a:df:ba:f8:6c:7e:f4:58:
41:2a:80:1d:cb:7e:b7:ac:25:80:da:9a:b4:3c:cf:df:fa:b7:
f9:1c:6b:15:2c:b7:b9:df:af:f2:9e:20:a6:9c:d6:d5:82:a6:
70:11:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:26:07 2026 by rpki-client