Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: PWLZJXC+KKJEV/D8vxkZarBW4JrbhNFhPd7FOzFP7Ag=
Subject key identifier: 58:6A:42:23:D4:D5:59:D6:6A:D2:AA:B6:59:8C:FD:2A:53:16:E3:39
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 019D284DBC2C75FB38FE21873DCA853859A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:16 +0000
Manifest this update: Thu 26 Mar 2026 04:01:16 +0000
Manifest next update: Fri 27 Mar 2026 04:01:16 +0000
Files and hashes: 1: UnTOjQEZ4O0L5YaWb-Giu8CUXKA.roa (hash: s7GA4eqf5DoRRiNJRrEX+zAJuNz9IR335s9XPM6efIU=)
2: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: Myw0M3ShhvTJByCTXHqET/L2MfTR5MslOt9yk2rdUt0=)
3: uh159NPLsutfBxTfVmBXo6jRKfI.roa (hash: cuRJ8cZbX6qurWVTG+A5l4bJsxobrXuPMyOmp4NalQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:bc:2c:75:fb:38:fe:21:87:3d:ca:85:38:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Mar 26 04:01:16 2026 GMT
Not After : Mar 27 04:01:16 2026 GMT
Subject: CN=586a4223d4d559d66ad2aab6598cfd2a5316e339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:aa:e7:2e:9f:f8:ca:2f:32:ae:20:cb:55:
c3:ce:a1:2b:24:00:44:97:a6:19:0a:7c:6e:20:1a:
28:1f:1e:74:20:5c:c3:fe:cb:53:2e:ed:0a:b9:85:
76:65:05:30:c4:80:a2:e0:d7:8d:c5:54:e3:ff:43:
fb:6b:d4:d0:65:c5:80:ef:d0:52:6f:7d:81:e7:0a:
18:ee:e1:61:9a:12:6c:8e:23:fa:2b:1a:a1:ad:a2:
7f:6c:23:a5:db:c1:a4:da:e1:bc:87:de:9b:69:ae:
62:fd:41:db:b7:75:f6:fc:7c:25:01:ec:bb:c8:ce:
e6:5d:83:4b:6a:46:15:49:3a:d5:c0:6f:03:ce:a8:
38:34:32:65:f0:ad:3d:d2:a0:5b:d6:b1:59:69:3c:
f5:40:10:51:e5:58:76:1d:11:78:22:62:87:77:3e:
7a:3e:a9:58:42:44:cc:3a:fd:07:5a:68:7d:fa:0f:
90:86:b6:f3:e9:88:10:17:eb:f1:7b:ad:e1:d3:03:
ad:ec:b6:4d:2f:13:67:78:4b:5b:62:10:b1:9d:6b:
17:5f:a7:6a:cb:d3:dd:64:e7:e9:76:7b:07:7e:5a:
2d:f0:e6:bf:63:b9:89:c3:e3:43:e5:45:dc:10:49:
6e:9b:19:2e:0d:ab:b3:9a:74:75:73:6c:52:60:b6:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:42:23:D4:D5:59:D6:6A:D2:AA:B6:59:8C:FD:2A:53:16:E3:39
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:69:b7:c1:e0:f1:53:5a:b3:1c:8e:d1:6f:94:c2:f7:2d:93:
11:2e:7d:93:6c:be:15:b2:94:61:41:4a:e4:e5:7f:33:5b:d7:
fd:3d:0e:91:b8:7d:ac:b9:45:b1:85:51:8a:53:96:16:10:d3:
f7:49:65:d1:3b:5e:38:02:45:8b:30:25:60:fd:39:6b:fc:20:
3f:2a:a5:47:91:bc:52:87:f6:af:89:52:40:20:9c:4a:47:1e:
6e:c0:25:a4:20:a8:9c:41:a9:ec:e7:94:63:6c:b8:06:85:02:
80:19:76:9f:aa:a9:80:cc:0c:e2:3c:a6:bb:54:a8:03:85:06:
16:c2:58:bc:65:f5:cf:1c:d8:26:a0:f8:bc:9a:5f:44:0e:5f:
e4:92:14:c0:6e:6d:11:40:4c:d3:0c:63:3b:6f:78:ce:7a:e1:
d3:76:f5:f7:4a:33:84:d7:0f:e1:be:ac:09:d3:49:44:bc:00:
65:33:11:34:b0:66:d9:ed:c0:4e:e3:e9:8f:8e:64:92:f5:90:
91:db:5e:aa:bb:0b:4e:fe:c4:ef:77:87:8f:d1:8b:65:69:5c:
8c:f1:95:87:38:27:cd:3c:3b:64:d8:4c:97:6a:fa:a4:ff:00:
a0:5c:9a:2e:c9:c2:1a:a5:50:5a:aa:5f:56:a9:1d:aa:de:4d:
72:de:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:18 2026 by rpki-client