Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
File: jZCoyIbumsQjhhb5JjHruLx243E.mft (raw, json)
Hash identifier: HMmF9034VZODvJMRVK4eyNINXpp/pqxqDLabpjbR8PQ=
Subject key identifier: A8:D1:AC:5E:04:E8:1F:98:B6:15:EC:58:17:F2:A8:C6:38:6B:72:1B
Authority key identifier: 8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
Certificate issuer: /CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Certificate serial: 019D2A04C34F18A024F6BC4DE8233168EDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
Manifest number: 0246
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: PwmzQDtdQKKkIkWKrZGRcmah5dQ.roa (hash: ITm5p27lwo8RsG8igl1Cc79jjfq+F5jXkYNhSwGUmmE=)
2: jZCoyIbumsQjhhb5JjHruLx243E.crl (hash: CwFVfDI/aDPv5KipT3BIpidcynNWUeHnnljcCb244KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c3:4f:18:a0:24:f6:bc:4d:e8:23:31:68:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=a8d1ac5e04e81f98b615ec5817f2a8c6386b721b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:bf:18:2f:31:c3:92:e4:51:38:48:b4:1f:
64:cd:c2:4e:69:ef:2b:6d:b6:fc:c9:d8:b7:ba:8e:
4f:4e:6e:2d:76:93:57:b7:0f:37:32:ec:52:37:f1:
91:78:da:aa:a7:4f:13:03:b6:8c:52:6c:6c:aa:90:
6f:f3:83:21:b4:13:9e:2f:03:21:28:57:5e:7f:f5:
a7:0c:25:3a:d2:3a:e1:2c:eb:a7:b3:fe:6a:0f:f2:
ea:8d:39:cc:2f:70:b6:bb:0e:17:e5:80:18:5f:8c:
a4:bf:33:32:b7:eb:2f:1e:45:5c:f1:cd:42:84:c2:
b8:0a:5f:8c:d8:06:6c:13:6b:64:77:1d:65:b9:9b:
9d:76:94:cd:f9:2a:f0:f1:78:57:88:08:35:26:76:
ac:2a:62:8c:f8:85:74:b0:d5:82:65:f3:f9:cf:9a:
b9:35:d1:a7:f3:b2:ea:ce:1c:8c:8d:e8:d7:38:81:
8a:73:c6:4a:95:30:56:1d:c7:49:2a:3b:16:51:c1:
fe:84:42:5c:1e:a6:70:0e:7a:20:11:5a:49:b1:e1:
a1:a1:23:42:ef:40:65:9c:41:20:1e:40:50:1a:8d:
2b:3a:18:57:5a:88:55:c0:2a:e5:db:3e:82:0d:c5:
3b:fa:33:3f:a9:33:0a:64:8e:23:ae:93:d4:3b:10:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:AC:5E:04:E8:1F:98:B6:15:EC:58:17:F2:A8:C6:38:6B:72:1B
X509v3 Authority Key Identifier:
keyid:8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:eb:60:7e:b2:d7:4a:85:27:58:ec:2b:dd:ba:3f:48:a6:db:
7d:19:63:0c:ae:59:31:48:23:00:5c:d6:c5:98:d3:38:69:a3:
5b:86:fb:a3:30:9a:ff:2b:c8:eb:56:c2:28:ff:56:5f:05:ff:
a3:01:64:95:03:62:e0:40:88:b5:94:8a:76:51:52:ca:8a:ca:
e8:0d:11:7e:a7:49:2b:c2:22:63:c6:90:4e:65:5c:0e:f3:54:
d5:af:3d:aa:44:d5:84:54:0e:e0:94:36:77:9e:bf:ef:0d:c1:
61:0f:1a:d6:63:22:4f:0c:58:cb:85:c8:95:58:01:be:03:02:
89:42:77:3a:6b:a7:66:b6:42:1c:6c:b6:24:b2:50:dd:c5:a5:
70:3b:dc:44:7f:48:39:9c:e6:dc:5c:e8:30:21:7a:de:3f:84:
80:e1:f9:56:72:d2:68:fb:9d:6a:85:50:11:b5:6b:39:d1:84:
70:25:e4:8a:cc:e0:63:66:75:18:82:77:50:c8:88:03:de:88:
f2:9d:56:d5:0c:99:0a:38:27:0d:9e:7a:41:98:5d:f4:3a:76:
5c:37:34:95:57:9c:5e:ee:2f:af:98:a1:31:95:d1:b8:bf:f7:
13:04:e8:9e:b9:54:41:1a:ee:3c:20:c8:b2:b5:0f:de:67:15:
0a:32:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:11 2026 by rpki-client