Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File: jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier: NaTAM25JCun5qkbYCSFPxf64F1yWWt5eiGXa4EySIFk=
Subject key identifier: CD:A1:E4:1B:67:D2:EF:4C:45:9B:7C:0D:09:5E:0C:2A:E3:B6:20:01
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 019D2884823A4B6252DAF1FD238D8D72C7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number: 1473
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
2: 1-VHrB2ftFgG1R7rW9e965VrbOgs.roa (hash: e22B3XhTvj7ENfOUB059RvQemhyhAgeNVsH6G1GtXTY=)
3: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=)
4: 7YQDZucpbsxyTF1dG-WSopyYoD4.roa (hash: AZ+p2vdqGYxqTemz9H7WmkXG8urZ++JrwB5Ra4yemqo=)
5: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=)
6: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
7: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
8: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: tCXKBUcuTsAyXsQ/2/VNrcrW0pdIF7MUbbBxdyakkUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:82:3a:4b:62:52:da:f1:fd:23:8d:8d:72:c7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=cda1e41b67d2ef4c459b7c0d095e0c2ae3b62001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:91:2b:f3:1d:9f:87:68:a3:1a:38:29:6f:
51:eb:e2:48:48:fe:2c:e3:a5:2e:9e:f9:52:c9:f4:
2d:d7:44:ae:9d:03:ba:eb:3a:fd:82:ec:13:d4:14:
ff:9a:51:73:1e:12:eb:bb:de:d7:b0:5b:02:8d:b5:
b4:45:d3:e0:b6:20:91:03:80:13:8b:eb:5d:ba:db:
dd:55:b1:9f:a0:fc:27:df:87:cd:9b:36:d7:1d:65:
34:39:10:91:be:49:9a:a0:c3:57:8c:39:7c:ae:df:
f1:07:4c:57:20:d5:ee:c4:82:1b:d4:52:2f:6f:c0:
e7:3d:c4:4c:4b:e3:59:f6:e2:e8:ab:d8:ca:c1:5e:
d2:38:03:1e:8a:01:2f:75:2e:8d:75:c5:5f:38:bd:
f0:cb:85:1d:f9:28:02:38:69:ee:8a:96:73:6c:59:
2d:d4:74:5b:2e:ac:35:de:55:7f:4d:f7:5e:41:bd:
9e:a2:52:c4:db:2e:36:9a:69:59:27:a0:26:0c:df:
d0:4f:fd:80:dd:53:dd:1d:a3:59:e4:5b:a0:6c:4f:
5e:16:bf:b0:b6:17:50:65:69:87:5c:cb:13:d3:33:
f4:e7:22:7f:f0:05:6c:1b:70:9d:b1:e6:bc:4a:c8:
58:8e:9e:a1:f5:6b:fd:62:0e:dd:c4:6f:52:57:32:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:E4:1B:67:D2:EF:4C:45:9B:7C:0D:09:5E:0C:2A:E3:B6:20:01
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3c:1b:5e:bf:1e:5b:7e:72:62:77:a1:ee:49:dd:7c:a1:fb:
b9:4f:cf:d5:07:fd:45:76:74:87:a5:36:5b:58:6d:69:c0:ae:
83:f3:b8:89:d8:58:8b:2e:dc:35:d0:3b:32:67:8a:4d:bd:49:
f7:f7:dd:49:0f:3b:a2:1c:6a:81:e4:c9:8f:cc:eb:19:12:cc:
96:3d:8e:a0:93:d3:83:b0:8d:aa:11:a0:c0:c2:8f:f0:74:a0:
11:f1:38:e5:e3:b5:36:22:c2:b5:8c:27:e6:e5:06:41:64:a5:
bf:67:3b:3b:c6:b4:9c:41:3f:c0:b4:22:4f:b1:4c:f8:51:12:
ff:cd:dc:04:79:92:ed:39:b7:22:a4:8e:a0:bb:ef:1a:78:16:
62:e7:b0:c5:83:1b:3a:c0:d0:76:98:52:d2:0c:be:6d:78:82:
48:f7:18:ce:bd:8b:d4:48:48:7c:21:e3:5d:e4:01:77:34:c3:
60:65:78:1f:8b:cf:8c:6f:38:88:9e:86:19:cd:7f:87:6b:7d:
ba:9c:b4:e2:ed:58:1a:23:55:27:49:82:09:40:53:94:5d:93:
d3:39:2a:05:0d:ad:6c:a0:79:17:dd:ce:3e:5e:ea:d8:a3:fc:
4a:2e:a5:a6:d6:c7:54:e0:78:8d:d7:aa:c1:6a:a5:87:c3:23:
ce:4f:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:08 2026 by rpki-client