Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json)
Hash identifier: PdO0+/1gste1lHoLf2UunjjJD1PJJAI0iInlqsmBk/M=
Subject key identifier: 70:4A:DC:76:BD:FB:D8:C6:F1:02:E5:6A:86:A7:4E:C8:3D:DC:5B:2A
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial: 019D27DF927C03051D417D805C86B0368D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
Manifest number: 1202
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: 2Kmu0cLG-L1kMQzDBhEI947wC7k.roa (hash: bDHuJC+CusB1PkTp9s9X+HAoLv5WHt/aI7X+YlNDFLc=)
2: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: 11CMFJUBTLvdDwm376FJVbX23p5aTBfVLp+m5WG4tgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:92:7c:03:05:1d:41:7d:80:5c:86:b0:36:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=704adc76bdfbd8c6f102e56a86a74ec83ddc5b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:ab:28:95:3d:85:a7:04:f2:b5:42:4b:aa:
5e:c6:9c:b2:17:f4:74:ac:a7:90:bc:6f:48:92:5b:
6f:2c:89:d0:db:3d:a6:c9:a8:d0:0b:d2:be:26:49:
e4:a1:fb:74:3e:09:0b:f1:96:e7:9e:ac:22:97:dc:
b3:e3:f7:71:44:6e:e4:e0:64:f6:53:6f:0c:b7:01:
40:b6:32:e1:ba:0a:a6:35:0e:07:f4:bf:c7:b1:3c:
8c:00:52:7d:57:26:4a:56:0e:50:0f:d2:f1:bd:99:
d0:b1:df:27:33:1b:1f:9a:ab:f6:c5:bb:bb:38:3b:
ea:99:89:be:95:d9:71:c5:fb:a4:d4:9b:53:a7:44:
87:3c:91:6d:47:d9:82:be:ee:20:2f:c2:c5:41:6a:
f5:b0:66:06:97:98:c3:72:a8:16:91:ed:3d:c9:3c:
54:2a:06:c1:e8:12:ac:37:1c:44:f6:9b:f6:71:cc:
1c:55:e6:f4:34:0b:e6:c3:f2:bd:d2:9d:15:08:2d:
e5:89:86:64:6c:75:61:eb:95:7e:5e:a5:27:3c:53:
bd:ad:0e:50:01:3e:37:ba:9c:3f:de:5f:2e:67:5d:
8b:66:9d:ae:26:65:be:88:ce:3c:8b:6c:51:f0:51:
65:f8:c9:92:ee:72:7e:d0:82:18:92:89:a2:ed:f8:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:DC:76:BD:FB:D8:C6:F1:02:E5:6A:86:A7:4E:C8:3D:DC:5B:2A
X509v3 Authority Key Identifier:
keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:08:e0:d9:bd:ed:01:22:5a:45:8d:20:b3:f7:2d:29:bf:d6:
63:95:9d:0e:a9:1f:2e:ba:cc:27:84:2a:92:3a:e0:06:14:ee:
bb:50:ae:ff:84:51:20:dc:fd:fa:64:ec:1d:0d:09:72:59:06:
5f:71:3e:a2:98:c1:69:b1:25:cb:90:11:a6:e2:0f:e8:3d:42:
c5:a0:0a:f1:09:3d:95:be:e1:53:5a:dd:23:52:58:01:bc:43:
c5:19:1f:da:22:e1:0c:40:15:86:a0:6a:9a:ad:17:fc:41:4e:
a4:e1:2c:64:7c:ea:92:a5:12:22:f8:a0:a4:9f:ef:9f:43:15:
1b:78:4a:c9:ac:11:3d:d7:48:f8:e0:c0:ce:d9:73:95:9b:d7:
37:8e:3f:68:6a:06:18:ba:0a:7d:74:20:25:1d:a7:32:94:54:
cc:25:30:fb:70:1a:e9:64:a2:93:91:bd:4a:cd:82:d3:dc:d7:
41:ce:df:87:a5:5f:22:59:a2:e4:85:0c:a1:b1:7a:42:f8:17:
78:a1:4b:8e:c4:f3:f9:7d:cf:ec:f3:dc:94:6a:29:1c:91:d4:
2b:42:3a:4e:18:cc:28:2e:94:05:53:88:ae:95:60:f0:78:45:
ac:0c:0d:df:55:53:3c:e8:d8:3b:18:db:5f:e6:5f:06:75:cf:
76:9d:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:50 2026 by rpki-client