Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: jhbvf2UsIlP+a8OcReVTnwn3KDxHnkvDn0JvoWpLGTI=
Subject key identifier: 7B:6D:60:B3:5B:D2:6B:2D:99:28:AC:86:A0:0E:1E:C1:5F:10:30:BC
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 019D2695DB8791793254869DBD1357446FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 060D
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: Ev84dzr99BkEprLlsKv-9iCyhPY.asa (hash: A4Hylllyzq6B6OAjJOwRb/t7tAR+6RCdPmT8bW5GCjg=)
2: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: xp9kD1EOmmnal7Pek2lRA6M/G6HbASAGellGwFNePRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:db:87:91:79:32:54:86:9d:bd:13:57:44:6f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=7b6d60b35bd26b2d9928ac86a00e1ec15f1030bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:ab:67:9b:66:a6:fb:11:8a:a3:37:39:ab:
de:d3:27:d3:05:0d:c2:bd:10:a2:3c:78:b7:0e:bc:
93:6a:aa:ea:42:af:c4:84:c5:49:7e:a9:84:fb:54:
16:c1:11:b5:74:88:ff:97:84:6d:58:42:59:da:53:
0b:0f:dd:37:84:2c:cb:f2:cd:8c:21:2c:51:d9:b1:
10:73:f0:ee:a3:ab:5f:a4:1b:48:8b:30:70:68:89:
83:59:20:01:cd:fc:f7:65:69:8e:05:9e:5b:82:8c:
6e:22:5c:6b:97:d9:91:d2:fc:3b:a8:16:54:2a:0e:
0d:de:eb:87:5a:4d:7f:d6:d3:6b:d8:2e:3b:d7:96:
b1:12:77:78:42:59:17:0b:50:7f:43:02:44:f9:ad:
49:7c:bc:82:0b:60:f5:41:db:f0:47:91:f6:46:b4:
d7:c2:3a:ac:11:5f:8a:66:53:c2:70:ce:d0:89:d2:
d9:4f:45:e0:a9:8f:2e:54:a4:ff:8c:1a:bd:ee:32:
53:23:15:18:9c:4a:a0:10:b0:af:ce:04:7d:7d:e7:
6b:a1:a4:b0:17:f1:37:53:3f:69:a0:f4:94:25:84:
c3:5e:08:45:f0:ce:3b:4f:e2:eb:f0:8e:69:ec:4a:
df:0e:b0:aa:f8:16:eb:a7:5c:9a:58:82:74:09:3b:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:60:B3:5B:D2:6B:2D:99:28:AC:86:A0:0E:1E:C1:5F:10:30:BC
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ed:f3:dc:8d:36:b1:a9:96:d0:92:67:76:78:b1:be:39:32:
92:9e:63:73:4a:02:c4:2b:e4:77:16:d0:89:d5:eb:fe:08:8c:
26:d2:0c:3e:92:09:5a:35:2f:51:ad:28:6c:e8:7d:b4:c2:68:
c7:5a:e9:a9:82:e1:14:bc:00:73:91:b0:bc:fc:bb:b0:16:94:
93:a0:e2:f8:5a:ef:87:0e:76:68:5a:55:ac:4d:66:0f:3b:f2:
f2:85:44:a3:f1:4f:79:e6:b4:e9:a2:be:68:9d:a1:c6:28:23:
fa:d5:4b:a3:ef:a0:ab:a9:3b:8a:be:1a:4c:2c:43:ec:66:b8:
01:dd:c4:4e:fe:a5:5f:e3:29:b5:b9:09:bd:1b:f3:ce:64:22:
93:5f:22:35:0f:43:25:50:1c:b2:f9:85:87:7d:9b:9c:f9:23:
3e:4d:e8:5e:5c:9d:c9:c6:64:99:f6:26:a6:0f:e3:8a:e8:f1:
a9:1d:5d:d6:64:6e:cd:84:3e:de:49:1e:d7:c0:cc:5a:cc:c4:
a9:c1:fe:0f:82:44:d0:01:b7:f3:d0:7e:29:d9:be:ef:28:5e:
ec:f1:6e:f7:dc:7a:53:c5:52:f5:7a:fd:98:a4:be:46:23:f1:
b5:01:e3:e0:9b:88:c6:36:16:5a:87:3d:68:66:48:af:0c:0e:
0a:93:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:14 2026 by rpki-client