Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: /JeKwJf2UXC7+S/VdYU7gTirdcv6Xk8FIaudlq/ncSk=
Subject key identifier: E7:38:0E:E7:24:6A:FA:98:13:67:8C:90:30:F7:43:79:B9:B5:EF:E4
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 019D265ECE48AA3D5000F8F74E0415F8EAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 09F2
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: O9jTuaIwSklnvAfhZBN0WWcgZXE.roa (hash: TZQoxFlSub9NUs3bu775AFUShxwX/KmkPryQTWD+vU4=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: 4fu1pR3PuHr3rI2Y5/HuFQWCRsqudCLVi28jhAB4zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ce:48:aa:3d:50:00:f8:f7:4e:04:15:f8:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=e7380ee7246afa9813678c9030f74379b9b5efe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e6:b1:d8:31:ba:d5:5b:07:f5:44:34:2f:87:
14:f9:42:8d:4f:95:a8:ae:97:5b:f3:eb:a7:d3:53:
12:09:44:87:cc:55:bd:bb:84:e0:7f:a5:00:d7:0d:
13:7f:88:bc:7d:8d:ef:95:51:60:f1:a2:b2:40:2f:
9d:d0:77:0c:b3:d3:7d:5a:c5:61:c7:ed:6c:7c:26:
41:ef:30:ac:0a:a8:a6:3a:0c:fa:af:17:5d:54:a5:
77:a3:3c:4b:f8:be:60:79:35:d4:fb:90:ea:9a:5a:
73:c5:6b:40:04:c0:b9:69:07:bc:b4:8a:e7:f5:73:
f6:e4:64:73:ee:ee:82:c3:50:76:68:84:b4:5f:f9:
c1:93:e9:4b:db:ef:de:36:7a:c4:b1:89:a9:d9:9d:
d8:71:3b:71:c6:45:fb:9c:88:e4:88:35:6c:a9:4c:
5e:a4:59:6f:ad:fe:d0:e7:60:7c:36:27:5e:be:b3:
4c:38:a7:62:41:02:a3:0e:66:d4:a2:ab:f0:74:9a:
b9:ca:7d:e1:98:9c:04:e4:94:78:4f:6c:3a:30:3a:
78:a9:9e:d6:cf:b3:9a:7c:e9:28:ca:14:60:33:e9:
b4:1a:46:a0:ac:d9:74:2d:4a:58:e6:c6:a9:ca:02:
56:de:a0:a0:58:99:63:da:95:b8:60:6c:4b:0e:7d:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:38:0E:E7:24:6A:FA:98:13:67:8C:90:30:F7:43:79:B9:B5:EF:E4
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5b:1e:45:d9:c3:df:50:23:c0:79:43:d9:c3:ed:d5:d1:a3:
4b:e2:28:e9:23:db:56:07:f9:51:47:52:0e:22:18:f4:df:3f:
1d:7c:02:ec:fc:93:5f:cc:54:4d:48:ef:21:1d:ec:8e:66:ba:
91:dd:b7:e4:6b:d5:8b:ed:b4:6d:ae:71:95:9c:61:27:b4:4d:
85:89:37:c6:24:61:ed:5b:da:96:42:dd:5e:22:94:6a:10:5e:
fa:20:07:05:bb:a5:1b:62:40:8c:cd:8f:73:3f:9f:96:2a:cd:
7f:09:f4:04:a2:9b:ec:e2:e4:56:ad:fa:05:ce:21:19:81:49:
a8:f1:ce:dc:24:4b:cf:cd:cb:6a:2e:fd:b2:46:ee:13:35:f2:
cd:26:81:01:ca:a7:9b:38:1f:e2:0b:e2:f1:4a:80:fd:1e:06:
70:bf:12:13:f0:48:1e:5a:fb:e2:83:21:02:e4:1a:bc:70:56:
66:10:63:61:ca:59:8c:77:b3:bc:56:24:15:3c:e9:a3:88:d7:
e7:79:3a:99:cb:66:eb:1c:c3:29:80:43:cc:e2:a9:77:7a:b8:
cf:df:3b:bc:eb:78:57:fd:4a:df:8d:2c:b1:b3:50:91:9f:25:
c0:9d:d5:f2:0a:85:42:a0:ba:bf:4d:e1:6b:64:3f:47:0d:9d:
e0:a1:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:58:20 2026 by rpki-client