Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: s4ftTlj1Q3Im6nYKMjYTRyXg2pupy4ywu2mJvtiSJ+4=
Subject key identifier: DA:8B:5D:34:2E:0A:21:5D:BC:85:61:45:CB:C9:6B:80:6F:E0:45:29
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 019D26285BE178909CC322132A194FD83E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 18:01:12 +0000
Manifest this update: Wed 25 Mar 2026 18:01:12 +0000
Manifest next update: Thu 26 Mar 2026 18:01:12 +0000
Files and hashes: 1: albAVH6lwfzmwVJzDmkpKh655KQ.roa (hash: BpL6bwg3t5pCu5LLatPQum4u8725IbG+PO63ipkITdM=)
2: i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa (hash: gL8PqoF8vFY4ZSfQKB1yxJH42nNfNmgI+ETePYwGBJ0=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: 7BbheQDNRQYjZXu3EyEEJlOYB+mfCjo3hEnBJ+2ycb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5b:e1:78:90:9c:c3:22:13:2a:19:4f:d8:3e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Mar 25 18:01:12 2026 GMT
Not After : Mar 26 18:01:12 2026 GMT
Subject: CN=da8b5d342e0a215dbc856145cbc96b806fe04529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:5e:bb:38:17:5a:f5:3a:35:65:fc:23:bd:
13:0e:04:e3:4f:d6:79:3f:c2:f4:a9:2f:3b:0d:ba:
2c:a7:fb:da:73:c4:2a:cb:76:62:17:5b:b5:26:23:
cc:ba:87:49:d0:ec:a6:bb:3e:e4:85:6b:e0:97:a8:
c6:43:aa:eb:6f:71:c8:f0:6d:3b:d6:4f:c8:29:19:
c0:ef:88:06:c4:79:60:6c:08:62:53:a2:42:85:36:
0f:e1:b5:db:60:d2:08:e0:64:b0:ac:e8:b4:3c:e5:
60:69:64:d9:aa:0f:ef:4f:cf:c7:73:71:ee:10:d9:
18:ec:79:1d:22:0d:af:9a:ac:c3:c8:d6:46:85:0d:
3f:e7:44:ee:31:bb:3b:22:60:1a:fb:d3:34:a4:7e:
5e:f3:c7:fa:fc:03:b5:70:a8:1b:28:05:ad:e5:1a:
90:c3:d0:d4:f8:0b:96:d3:3d:ae:c4:ae:7f:e4:0c:
00:b3:62:c3:08:01:f2:a6:f5:a8:63:3c:2a:c0:b9:
2f:e6:d7:df:58:38:ad:cc:d3:93:44:53:00:b6:07:
00:79:a5:08:54:12:ff:57:f7:f1:9a:a7:28:f3:56:
26:27:fb:10:36:09:cf:a9:b4:b1:db:62:f6:7c:ca:
a7:99:1c:e6:48:ac:d5:60:5b:11:26:8c:58:71:bb:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:5D:34:2E:0A:21:5D:BC:85:61:45:CB:C9:6B:80:6F:E0:45:29
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:68:a8:0c:c2:22:29:b7:67:bb:09:91:89:18:74:a7:89:
ab:8b:86:c0:d2:e9:0e:f5:3e:16:64:53:6e:b5:ff:a6:0c:55:
65:6e:d6:77:63:2f:13:3c:11:4f:33:97:07:03:ba:6e:61:7b:
d7:9e:c2:76:70:a6:e3:2b:5a:b4:1a:65:02:02:84:ac:2c:b5:
bc:8b:69:49:a9:dd:ef:5b:2b:c8:10:58:ab:03:b8:16:20:ed:
d5:21:38:28:a4:ee:a9:fe:57:7b:64:bc:57:71:ff:4d:84:b0:
32:05:e7:92:4d:61:a6:95:b8:39:3f:80:87:b0:d5:5f:be:fb:
b7:3d:59:59:20:38:d5:33:c0:e8:fa:8e:49:47:c7:49:9f:0a:
c8:e7:2f:17:16:ba:1a:2b:a6:82:61:d3:8d:cd:47:7f:3e:ce:
43:ea:9d:ea:ad:b0:34:3c:ce:8e:5c:7a:17:cb:c6:43:a1:b0:
cc:8d:01:73:af:6a:13:b3:98:5f:c0:35:d7:71:dd:d2:25:7a:
c2:33:47:e4:a1:7f:f5:14:0d:1d:96:5b:6e:d2:ab:9a:b0:71:
49:e6:91:f3:9c:52:14:82:fe:4c:e5:8e:ee:21:d8:05:c2:c0:
1d:96:9d:f4:88:74:55:7c:db:cb:a1:be:72:38:f6:25:9f:e1:
af:29:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:37 2026 by rpki-client