Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
File: jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json)
Hash identifier: 6DpUSMgtj7IqRf2YAzTsA5TOx0AFkbaT1QFyp4cgMU8=
Subject key identifier: 8B:21:79:38:A8:7F:B4:28:A1:38:5F:17:55:C4:23:1F:43:48:0A:F9
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 019D2771EECF7AF442F1D75C59158631B374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
Manifest number: 0E5F
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: Kc10yeIoDmvy5FAN52ZDIrPTUSQ.roa (hash: sSq1c3YG01sitT6gmqjgAgGtslbINf2ZUC2bCZbD3+g=)
2: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: obs3NkpER12d2GN2ebWeAlox2wQF3WOq8qLazsft0zU=)
3: osPeBc4knLAAONu4R4kr2x3GNNg.roa (hash: K1SKtfaoXH921JFKnYEFRpg4kdcXgbPJupJv9WRo+30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ee:cf:7a:f4:42:f1:d7:5c:59:15:86:31:b3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=8b217938a87fb428a1385f1755c4231f43480af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:c1:25:42:32:5d:16:5b:7e:df:8d:ee:08:
4a:f1:ec:c0:ca:10:16:6b:90:76:18:ca:b9:73:ae:
74:68:60:4f:fd:9e:f7:2a:0f:48:51:0b:89:20:a2:
ec:83:b5:ec:85:5b:52:de:cf:66:5b:a3:5f:e1:67:
aa:db:ef:8e:07:f3:6c:47:fc:26:90:8d:33:9d:0a:
d0:36:77:6f:39:c6:6d:2b:20:cf:ea:9e:e1:aa:0b:
97:86:db:c9:14:cc:40:38:8d:27:22:a1:93:19:54:
fa:aa:98:cb:31:16:b3:7f:24:63:f2:6a:a4:7d:2c:
5e:7e:50:27:ef:d8:2e:bc:da:e2:ab:96:a2:03:9f:
a4:61:84:80:56:72:67:63:be:00:d2:0d:53:9c:d8:
8b:70:1a:1f:55:61:49:8c:04:6f:6f:0e:7b:32:ea:
40:7e:4b:df:5d:07:df:4f:68:04:22:ac:5d:02:23:
a7:d2:65:67:62:bf:35:a5:af:79:d7:e4:e0:46:ab:
bb:86:f0:89:1e:11:eb:b3:b7:dc:c2:12:db:b1:36:
fa:66:f0:de:21:3e:61:dd:cb:e6:d4:b8:61:58:17:
6d:3b:b0:aa:d6:79:39:59:8b:4a:1b:12:5e:28:29:
a2:8f:12:f3:9d:87:28:ee:ce:5c:7a:81:98:f7:6f:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:21:79:38:A8:7F:B4:28:A1:38:5F:17:55:C4:23:1F:43:48:0A:F9
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6a:72:d3:28:6e:0d:1a:bf:51:39:31:0b:f9:3e:29:8a:e7:
cb:bc:49:5d:39:14:8b:c1:f1:c9:0d:d3:4b:e5:bf:da:54:c4:
14:f0:99:45:5a:3c:35:6f:ad:f5:b4:fa:01:32:28:f1:df:cc:
6a:de:8e:e5:2e:5d:3d:f5:bd:1f:91:d9:9a:e2:e1:b7:f4:08:
a8:f6:a9:ce:be:60:94:7b:63:25:3c:f0:fd:ca:9f:10:71:0e:
68:82:f6:bd:5b:22:5b:5b:e9:58:b8:35:bd:3c:21:ad:fa:81:
9d:bc:a7:34:a7:d4:30:bb:d0:82:56:1d:e2:b9:b1:15:b9:ec:
b6:c5:81:7f:b4:13:90:69:63:25:ac:e0:18:aa:2a:e1:20:54:
f3:b4:87:14:d5:ed:8a:dd:88:fa:97:65:75:24:e4:a7:22:9b:
15:b8:77:e4:35:f2:11:d1:8c:ec:a4:31:b6:79:b8:f5:cf:e3:
af:5a:b9:60:e7:ef:f1:5c:fc:dc:c1:1b:1b:5e:13:16:9d:f5:
9d:df:44:de:98:dc:bb:4f:33:93:0b:48:59:20:d3:15:02:7b:
50:88:86:02:13:f5:47:51:07:92:20:c4:28:22:5f:24:9a:f5:
72:23:bf:af:ac:ba:c1:c5:fd:c0:06:d9:e8:f3:47:da:b7:88:
64:b8:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:07 2026 by rpki-client