Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: QuTG3jWyWnsOVj4Yb3YhlJieZgrGjEo1q2E7u51BCsM=
Subject key identifier: B0:C9:68:21:8B:B7:6F:1A:49:C8:B3:19:7F:E1:17:5D:04:F0:0B:B2
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 019D27E0654F8805D0F49E0183EEEF51F594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 15B8
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: LL_AxmtYZZoPVDJOgngQ3xheZAg.roa (hash: SlYQb5afBreMgIamUgnc8eCfbQSDhHvoVK81024PSGE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: Sp9p5GVWwUhnGdR6FAdgV/2q8KDBretvhqd1CIKmJz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:65:4f:88:05:d0:f4:9e:01:83:ee:ef:51:f5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=b0c968218bb76f1a49c8b3197fe1175d04f00bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:b4:64:d2:9f:af:25:c2:c1:aa:aa:a9:bb:
85:6a:a3:f9:0c:d8:d3:db:3f:36:a9:9f:53:64:0f:
72:e2:6b:de:f1:9b:09:6f:e4:d4:65:c6:29:fc:f6:
33:2d:52:77:d9:e6:52:48:5e:39:d8:b1:ac:06:1e:
80:75:cc:7f:00:2f:f5:6c:59:15:2e:a9:b1:7f:bb:
60:68:05:bf:e5:eb:c9:79:18:fb:fa:d9:34:85:58:
2c:b0:b2:09:b1:c6:f5:c5:36:b8:e1:f6:bd:8a:0a:
0f:5a:a0:4e:c1:66:45:d9:21:1a:ba:7d:ea:d1:b0:
9e:52:00:7e:a0:3f:68:bc:4b:44:4d:dd:a6:4d:9b:
f3:31:78:8e:d7:32:36:fa:81:ad:01:ad:68:f1:5a:
04:ea:44:cc:06:0a:75:d9:7c:56:29:33:f9:20:88:
3d:18:bf:77:35:6c:07:9f:e0:70:7f:45:d8:dc:cf:
96:5e:81:44:20:b9:95:16:8f:e1:cc:22:12:70:8e:
fd:b0:5c:04:4b:32:2a:a9:cd:00:90:32:aa:2d:00:
75:de:5a:c5:cb:16:34:f3:74:fe:e7:c5:60:a1:92:
d3:fc:b6:38:0b:51:fe:0c:e6:82:2e:84:51:3d:84:
23:05:71:7d:8e:f8:51:74:ee:a0:de:ef:6c:5f:61:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C9:68:21:8B:B7:6F:1A:49:C8:B3:19:7F:E1:17:5D:04:F0:0B:B2
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:04:a4:5e:5a:ff:47:e8:18:18:7e:b4:94:53:e4:8c:78:ba:
77:90:46:64:f0:32:8b:95:0b:47:63:7c:eb:30:7d:6c:c9:fd:
92:c0:a5:50:6b:05:e1:2d:9b:fc:7a:f8:96:88:55:51:2e:d5:
89:c4:b6:44:86:d8:9a:58:32:f0:0f:4c:d8:7c:d3:58:ef:56:
77:5b:ec:59:24:42:eb:b9:94:6b:81:b4:70:4e:e3:8d:88:9b:
d3:69:6e:76:b1:95:63:bd:41:bd:32:82:45:ed:7e:9e:8e:af:
d9:a0:33:67:55:46:ef:e8:c4:c3:1c:2a:d6:42:18:d9:db:00:
00:21:c7:3f:9c:b1:55:d8:62:d2:e1:94:2c:cf:33:27:75:ef:
d0:b3:54:c3:43:a9:e3:69:8c:3c:5e:68:a9:a9:57:68:bd:4f:
2f:37:1d:3c:2c:35:06:bc:f6:01:82:e9:fe:77:a0:b5:8a:b2:
6c:d3:7c:24:9d:63:96:ec:bf:25:5c:82:82:f7:dd:66:d1:a7:
af:c9:12:cf:53:d8:2f:6d:cc:1d:05:d8:c7:1b:42:5e:65:6b:
06:ad:c3:0a:63:1c:a3:28:21:64:b0:de:31:f8:5c:45:28:0b:
53:08:94:5d:53:29:7a:77:9c:22:21:7d:36:b6:bc:0a:c7:a7:
a0:87:9a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:37 2026 by rpki-client