Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier: tHClsfTr1tzx6N99JWmT38GX7mujOt5ZoxDeDnxVI7Q=
Subject key identifier: 00:F5:67:2F:36:03:41:B5:90:99:08:25:9B:84:E0:D9:CC:1E:2F:DC
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial: 019D27A8A3EF692440372F286AB5E2989C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number: 07E3
Signing time: Thu 26 Mar 2026 01:00:56 +0000
Manifest this update: Thu 26 Mar 2026 01:00:56 +0000
Manifest next update: Fri 27 Mar 2026 01:00:56 +0000
Files and hashes: 1: AN3xpl22PaRyPEelcwTSWgg5W5A.roa (hash: re4tuXpQRY9PMdfHT4O4lemkMyHNhEqfGaE5zniD/ZM=)
2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: KUl3Ra/HlxBbTJhcSaZk5+tsp8hWVVE3DuX8/RK6HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a3:ef:69:24:40:37:2f:28:6a:b5:e2:98:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Validity
Not Before: Mar 26 01:00:56 2026 GMT
Not After : Mar 27 01:00:56 2026 GMT
Subject: CN=00f5672f360341b5909908259b84e0d9cc1e2fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:a1:0c:a2:0a:5c:61:7b:e6:a8:d7:d8:d2:
b0:73:84:48:9b:bb:8f:49:db:15:18:e6:9d:a2:b3:
01:43:a5:be:51:6b:88:30:e2:f7:5a:2b:34:a9:6a:
4e:20:55:f8:9b:7f:a6:c6:ed:26:c2:11:d9:b7:b2:
d9:c0:fd:d7:ba:08:b4:65:c7:e6:ee:25:d6:ec:34:
75:65:ef:dc:1d:66:1d:a8:6a:cc:17:ce:f7:df:31:
60:5a:a8:30:5a:0f:d5:ca:cb:89:10:5a:8d:b0:96:
fd:a5:72:6b:7f:67:5b:68:79:e2:a5:8a:10:16:e8:
9d:aa:c9:de:c0:f0:51:9f:bd:bf:02:c1:25:4c:3b:
92:7e:d9:c5:10:57:37:63:c0:ae:3e:33:7f:67:f1:
a8:c2:19:3e:3c:ff:d3:b9:c6:2f:53:07:29:9a:13:
40:03:27:fd:e3:20:f3:58:04:91:03:36:53:50:14:
f3:39:06:bb:ef:4a:24:06:dd:1b:f8:dc:01:35:88:
e5:df:6d:e1:c2:de:14:9d:4f:a6:27:7c:1d:fc:3a:
7e:d4:f4:22:b4:59:1a:cc:7f:be:35:c0:9d:5e:41:
7f:48:88:77:b9:c2:e5:2d:04:e7:a8:7e:19:23:c9:
be:90:ef:63:1f:1d:c5:8a:1c:f6:af:6c:75:f6:8e:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F5:67:2F:36:03:41:B5:90:99:08:25:9B:84:E0:D9:CC:1E:2F:DC
X509v3 Authority Key Identifier:
keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2f:12:0f:8d:d0:aa:8b:bb:61:fc:30:09:2d:26:e0:3a:ba:
0e:a9:6b:e5:19:8b:a9:cd:be:dd:39:26:8e:af:0f:5a:f4:20:
5a:34:6d:d8:1e:31:af:12:cb:90:8c:58:c5:5a:76:2d:63:9b:
37:5c:0b:e1:cc:71:23:55:1c:18:74:64:14:b6:41:1b:1a:53:
e4:c0:ff:80:26:f1:82:24:57:78:37:ec:5f:f8:e9:29:33:a2:
ae:ce:0f:35:3f:ca:25:95:4b:6e:b4:8d:ce:ff:09:b0:2c:f3:
fe:d1:3a:7b:9c:08:70:b1:4a:44:79:09:f8:cb:72:29:3b:f3:
8b:82:62:53:7d:59:d7:35:07:ca:fb:32:06:80:68:ae:ac:76:
f9:45:a2:cd:5e:99:90:bf:d2:11:0a:b9:2d:6a:88:88:0c:ed:
30:83:85:3d:5c:6f:b9:4b:2c:e9:f8:ef:60:cf:72:b5:24:f2:
9f:ff:6e:ca:bb:b2:54:00:aa:25:2c:60:15:5b:10:8a:56:ff:
4b:3a:ce:8d:3d:92:ad:b4:13:9e:f7:6f:52:ab:af:d8:06:73:
a1:6d:c4:e2:59:33:64:a4:ca:9a:dc:14:57:f2:2a:05:43:58:
50:ee:99:4a:99:c0:84:be:c9:49:6d:36:88:a1:cc:8f:b3:c0:
2e:85:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:33:21 2026 by rpki-client