Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier: oTOWMmb7mFj15x46Jdi65bmbxmLHS2erbDVTy1DLuSo=
Subject key identifier: 3B:E6:13:37:B8:A5:6A:0F:0B:35:0A:FA:13:8D:4D:99:EF:65:0A:79
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial: 019D27A88B15FAFAF743481677F6511D978B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number: 07D5
Signing time: Thu 26 Mar 2026 01:00:50 +0000
Manifest this update: Thu 26 Mar 2026 01:00:50 +0000
Manifest next update: Fri 27 Mar 2026 01:00:50 +0000
Files and hashes: 1: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: gHFbxYunFMVD4s1qsaNF59wN3ExEbJIEuKAa58NYWE4=)
2: qK0Mrs6KenO_aRFhW0teITHdeuo.roa (hash: 4G9MkNxMVnSOflcsOcuB/8IbmHM1MZ+IOen97Qx/3A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8b:15:fa:fa:f7:43:48:16:77:f6:51:1d:97:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Validity
Not Before: Mar 26 01:00:50 2026 GMT
Not After : Mar 27 01:00:50 2026 GMT
Subject: CN=3be61337b8a56a0f0b350afa138d4d99ef650a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:ee:f5:c4:9c:43:dc:d7:a5:bf:7a:73:b5:
d0:69:b9:40:86:f8:85:86:55:e1:09:52:5d:32:d4:
d3:62:04:2e:36:39:2a:83:4b:28:b5:22:56:e2:ad:
eb:9f:09:9e:e7:d0:ff:47:32:da:fb:32:40:30:bd:
36:d7:ac:ec:d5:9d:f5:f7:8a:94:f6:6d:52:d2:90:
98:87:7d:ad:9d:16:39:a8:c0:f1:80:72:d0:7b:64:
1b:9b:0d:e9:f0:b5:57:88:f9:62:d2:d3:26:9f:d4:
ea:49:d0:08:b8:fb:69:e8:b0:9d:f4:fd:d7:79:ab:
b2:bc:52:1b:68:78:6d:23:c6:52:2d:5b:0f:96:2f:
8f:ce:c0:55:d7:ca:e8:f4:32:c7:31:8a:47:14:af:
97:bb:4e:89:f0:a3:8b:8a:6b:db:a4:46:72:80:50:
2d:b0:46:c2:33:7d:5c:cd:d1:3f:94:3c:d5:15:34:
bb:38:79:b7:e3:59:b2:f9:77:ef:08:c7:33:20:75:
0d:99:fc:9d:31:0a:1d:90:a4:64:a4:32:6e:4e:db:
96:5f:98:90:12:b5:db:b0:6a:2f:c5:65:25:4a:0a:
13:db:d4:32:7e:e7:41:3f:c9:7a:88:55:ba:7b:b7:
8f:b2:de:8d:7f:4d:f2:1b:6f:e4:d5:54:5c:ff:2e:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:13:37:B8:A5:6A:0F:0B:35:0A:FA:13:8D:4D:99:EF:65:0A:79
X509v3 Authority Key Identifier:
keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0a:de:65:11:27:7f:60:f0:29:cf:7f:79:39:93:31:61:45:
34:7c:28:aa:3f:45:2a:8e:61:60:5b:52:c8:ee:49:c2:a7:8c:
2d:80:1a:d2:b4:c0:8f:aa:1e:2f:09:b9:75:36:82:f8:86:e8:
c1:5d:3e:bd:fd:44:16:00:d9:f3:a6:24:89:e5:01:3c:73:d4:
70:57:9a:0d:63:b6:d7:fd:42:f6:d1:0c:07:a0:3e:03:6f:db:
e4:a3:ee:e4:b2:07:e2:75:3b:d3:d8:3d:34:1c:63:93:3f:bd:
14:ff:dc:95:f4:43:0e:ba:61:2c:8e:3b:84:32:85:15:bb:b5:
a5:f3:2d:a1:44:1e:df:77:2a:a7:67:66:68:3f:20:44:b0:e4:
0a:31:a8:fa:99:f9:8e:d1:23:ea:6b:12:92:e0:3c:38:bc:ec:
f8:ed:f9:0f:ad:f5:93:54:75:77:bf:a9:f7:16:a5:9e:d6:9a:
a2:88:ef:45:04:e0:fb:d8:22:fb:33:7e:51:1d:57:e6:b5:00:
72:7a:17:06:89:5d:a4:61:ee:06:23:62:d2:6a:ef:66:a8:39:
b6:35:f1:27:07:5f:7f:00:68:3f:33:2d:87:a3:22:63:71:39:
46:07:85:c2:23:66:83:1b:d3:71:cc:4b:ee:68:23:05:f4:4f:
25:6a:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:41 2026 by rpki-client