Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier: xCYJB29bJD1jKveSrBZe06EsM1pOdJ5w9oJm+51uEdA=
Subject key identifier: E6:C3:D1:64:C8:33:A0:91:2C:D7:A9:9B:1A:2B:C9:1D:B5:0F:76:D4
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 019D27E072267F8ECC18133EF0041F60B34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number: 11DA
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: 7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa (hash: Z91Be9fMnlCk9EcCA8UjSbIMFHHE/PnW3Mwi2btNcCM=)
2: jIeFhJZd4hnKN5qOPFYJyLelG2U.roa (hash: FLT9m7JPrJS5aMnwU7tXsALsvI1wqlNumVY/Ni2QnbM=)
3: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: QRvZH84MwN8CT6TCYUTllDMAWdM3vwqFN1ebe4kCqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:72:26:7f:8e:cc:18:13:3e:f0:04:1f:60:b3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=e6c3d164c833a0912cd7a99b1a2bc91db50f76d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:3d:a9:53:30:bc:c4:97:12:f9:f3:a0:94:
bd:f6:7b:15:a3:9a:81:4e:37:d6:d5:7c:c0:f1:1c:
79:81:ee:3c:03:f9:be:41:ab:2d:b9:c3:c7:44:8a:
7f:da:85:39:6e:98:ba:68:6a:48:3b:fd:b5:9e:63:
6b:7d:71:fb:39:b7:ab:ae:e1:e8:df:47:a4:7f:61:
d4:b7:1c:87:af:61:7a:80:8e:06:4d:22:de:3c:5c:
92:aa:dc:94:9d:60:c5:22:63:53:71:18:84:55:84:
c9:f1:0a:be:31:c2:a5:ad:91:01:69:de:2e:0c:d5:
04:78:8a:d2:2c:94:74:77:6a:2e:1e:81:c3:26:28:
53:41:1e:d6:04:bd:e3:38:8b:3d:cd:46:1c:39:8f:
9a:32:59:a1:a3:42:27:76:48:9a:1f:5e:d3:66:39:
37:0f:57:1f:41:4c:c8:b1:81:2e:9f:3f:5c:93:ed:
6a:03:7d:7c:cc:37:a8:69:d7:0e:df:81:75:54:1c:
a5:a8:33:df:6e:d6:72:f2:68:75:dd:a1:94:d1:88:
e2:8d:46:e7:8e:e0:d6:af:41:a1:6d:f4:db:13:94:
5f:b5:f1:e2:e4:da:fe:15:e8:aa:e5:3f:c6:5d:9b:
d0:d6:9a:66:dd:b9:fc:b0:d6:de:9a:c9:9c:b7:fa:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C3:D1:64:C8:33:A0:91:2C:D7:A9:9B:1A:2B:C9:1D:B5:0F:76:D4
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:16:d2:5c:61:6c:61:84:fd:8d:4f:f5:18:07:cc:40:1d:
21:dc:14:f6:b3:48:22:73:8a:25:3e:73:78:71:43:db:ff:24:
27:c8:35:51:ea:00:4e:c5:89:2c:76:68:32:dd:26:63:e3:17:
6b:09:cc:3a:f2:42:d9:1c:95:c7:9b:53:cf:30:5a:f3:77:6f:
8a:24:01:c8:66:74:12:2e:e8:d8:ba:06:c1:29:14:b3:9f:7d:
ac:a5:0c:bf:ab:9d:67:77:43:5b:40:06:14:ae:15:b1:13:d9:
72:b6:29:2d:05:af:dd:a3:4d:cd:e3:ab:94:9b:96:87:f1:4d:
a1:dd:82:4f:c6:d7:e0:3b:97:cb:fd:7a:92:6f:07:21:c8:4d:
f0:d0:72:85:9a:27:6a:d0:1b:bf:61:43:cc:77:c4:05:b4:fd:
ba:40:87:33:1b:2e:0a:57:f0:48:13:2e:9f:f0:22:a1:a7:db:
ae:fd:b0:b4:bc:32:5a:0c:1b:11:a7:e3:64:53:e3:6c:a8:ca:
51:d1:f5:f5:00:02:31:45:1c:65:9f:22:2c:bb:7a:75:4c:a0:
10:c6:a7:e4:33:94:ac:73:e8:72:fd:bf:e7:0e:ac:18:11:ff:
a0:3d:e9:85:5b:96:0b:ae:fa:a5:a3:af:5d:1b:ad:61:b0:39:
9d:d1:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:20 2026 by rpki-client