Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File: jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier: eC7a8lK44nWxmNnkwdCpPDhUEI9W4hxJu97fTjTvezY=
Subject key identifier: 58:BB:95:CD:40:B8:1D:BA:9C:32:8D:AC:FB:EA:2A:F1:BD:63:C9:3D
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer: /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial: 019D2696242B1D04B22719FCC08E8C048446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number: 0153
Signing time: Wed 25 Mar 2026 20:01:07 +0000
Manifest this update: Wed 25 Mar 2026 20:01:07 +0000
Manifest next update: Thu 26 Mar 2026 20:01:07 +0000
Files and hashes: 1: 8sncQGN_dofXozDeejTadUl8wRs.roa (hash: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4=)
2: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (hash: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU=)
3: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: eKsuNkazfjoqtjXpp05sHLkYxDqbYmataukY5mXZ6AU=)
4: qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (hash: Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:24:2b:1d:04:b2:27:19:fc:c0:8e:8c:04:84:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Validity
Not Before: Mar 25 20:01:07 2026 GMT
Not After : Mar 26 20:01:07 2026 GMT
Subject: CN=58bb95cd40b81dba9c328dacfbea2af1bd63c93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:e3:b9:87:34:81:02:e4:2a:ab:0d:5b:c9:
25:06:89:41:ce:83:45:10:8e:60:e7:2e:fa:9a:c7:
66:56:da:16:c3:f4:8d:aa:f4:f3:d6:2f:e7:83:a9:
4c:e3:a5:f2:36:f0:30:f4:2f:62:a4:4b:9a:7f:5f:
80:e3:c2:3d:28:47:ce:d9:fc:87:66:21:e8:ee:a4:
47:b0:e1:2d:77:68:23:7b:9c:a6:aa:ee:46:db:a1:
3a:50:8a:8f:b0:b6:31:03:12:f1:34:95:b5:f2:73:
4f:41:94:34:c8:c2:46:6d:5e:de:e6:9f:07:d6:f1:
55:81:97:d1:4c:15:13:c5:51:ae:e2:d7:fa:a1:c9:
a6:d3:c8:d9:6a:18:e9:95:12:fc:83:ee:d5:80:5a:
0c:dd:ff:c3:43:e9:94:d1:c2:d6:c9:de:48:6f:bd:
d1:c2:31:5f:3d:d3:1a:3d:29:58:39:ba:fc:a0:9d:
4b:c0:5a:f4:4a:eb:b8:a4:f1:9f:99:80:61:f5:43:
7b:91:54:56:44:94:3f:c3:9c:21:e8:85:4c:bc:d2:
28:2e:76:ce:6b:fe:f1:77:60:94:b2:b4:fe:35:46:
5f:cf:c0:1d:33:02:68:0e:bd:7a:ef:bf:71:cc:f8:
b6:10:8e:9f:0b:37:a5:fb:a1:50:7c:9c:47:ce:47:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:95:CD:40:B8:1D:BA:9C:32:8D:AC:FB:EA:2A:F1:BD:63:C9:3D
X509v3 Authority Key Identifier:
keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b9:12:e4:ac:ac:93:b5:fa:a8:bf:22:b5:5d:8c:63:a6:e3:
aa:12:ec:48:0d:24:c4:33:e0:52:a6:91:b7:14:0b:38:c6:0e:
5a:c6:4e:96:0f:09:e5:65:49:c5:62:0f:6f:7a:5c:2e:28:b8:
61:47:47:c1:4d:91:d4:66:90:8a:b9:8f:e4:3e:8d:b3:d4:9a:
5e:74:41:2d:bd:ff:ae:53:7d:67:85:ba:77:92:ec:da:15:86:
33:94:5e:0c:f8:8f:12:d3:c1:45:1f:f5:50:2a:f5:64:18:1b:
46:8d:3a:50:4b:44:85:30:8a:32:2a:bd:9e:6b:b4:8a:4b:dd:
42:5b:aa:43:a1:ce:ca:3d:56:b9:cc:6a:ce:a8:51:cb:cf:df:
b4:a5:11:b1:25:c7:33:3c:e5:3c:dd:e8:45:5f:b0:68:5f:9f:
ed:97:72:86:1b:8d:6a:3a:50:2d:b1:a0:cd:1b:5f:b7:ec:01:
06:33:82:90:b5:e0:61:22:54:bf:55:d3:2d:9d:ec:b9:07:48:
d6:98:a2:89:87:0c:c5:54:6f:e1:50:a1:25:74:c1:9f:e6:d6:
86:04:47:ac:ba:64:65:f2:71:86:4c:a4:66:a1:f6:0c:23:52:
c0:0e:1b:1f:e8:21:c8:f8:a5:5e:31:56:f9:41:9b:74:d2:96:
6f:5e:76:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:08 2026 by rpki-client