Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: Vi2wk9jnycGdGwN5GuxnqxhYYpo+SZiqBuOU+ujm0nU=
Subject key identifier: 6B:94:7D:EC:C6:C1:CC:5C:16:2D:D8:6F:C1:97:B3:AF:0F:01:27:A4
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 019D2703EBB0557148C22921FF0CCE571752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 18EB
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: FnwKQW5UnLQMReNyfTHKRcvd6kk.roa (hash: UCeEtQwba/ftT20tzo08vD+65NQ/1VW7etax1BQEDTI=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: 3ov0OOGd0oYjof6pM12BIsS/GGMMwzFzwXoXzHMeGK8=)
3: N9eJQft8E_Vlm9-92c34l9oVaOE.roa (hash: STJ3sDAbNVIFBy9HmVpY5X7TsamKj7xapU3f0YN1wC0=)
4: YMqk5erxqcBl_rQ1UMg8ywZDz0M.roa (hash: n9uoqKCqG6Ob4UlpegclYiabrSTMSzoqIVhaQf1T96Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:eb:b0:55:71:48:c2:29:21:ff:0c:ce:57:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=6b947decc6c1cc5c162dd86fc197b3af0f0127a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:1a:7c:8b:7a:dd:0d:75:3c:26:34:39:c5:
4c:1c:d8:df:16:00:01:ff:4e:28:cb:8a:fd:94:13:
cc:a3:85:ca:11:30:4e:73:25:38:c0:87:6b:2f:fc:
81:ab:b2:48:ff:d9:29:af:fa:f3:15:35:20:73:00:
0d:8a:ee:80:c0:3e:b2:04:56:f6:44:3f:85:d0:24:
e9:3a:e7:49:10:c3:67:9f:b9:0f:54:f2:b3:e8:1e:
a5:37:a2:1b:1b:74:49:2d:d4:cf:15:ad:7f:74:5e:
5a:90:6c:1a:e3:cb:35:e0:45:f6:9d:b7:1a:3d:5e:
05:97:14:64:59:e0:1f:d3:13:83:cc:44:c3:df:8d:
66:5b:aa:43:33:d4:d3:79:a1:20:43:5c:73:27:3e:
5a:4a:08:4c:4f:f8:55:0d:32:f4:f8:0f:88:7f:d8:
8c:8d:98:38:88:17:0f:10:b5:73:79:4a:da:96:d8:
cb:51:80:c6:2b:66:a6:2f:f8:c9:06:a6:8d:14:79:
5b:6c:79:38:cc:be:fc:bc:d1:1b:c2:03:1b:6f:e0:
7b:30:27:cb:c2:8a:51:5f:1f:60:3c:96:97:f7:0f:
6a:0d:0c:e9:8f:71:98:f9:10:79:be:83:33:d3:87:
b5:dd:57:a8:d2:fc:5e:ad:21:f2:b9:71:a8:18:51:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:94:7D:EC:C6:C1:CC:5C:16:2D:D8:6F:C1:97:B3:AF:0F:01:27:A4
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4a:5c:75:a2:1f:6f:d1:68:51:2f:70:ff:e3:60:3a:e2:d9:
31:ba:0f:93:86:72:21:52:e2:48:09:cd:4f:3a:8e:e5:42:5e:
c3:ee:a5:4f:52:bb:49:72:c9:9c:90:fc:6c:22:e2:96:47:a1:
2d:92:7f:18:7a:7b:2f:cb:d1:eb:6b:01:38:15:13:e7:e1:2e:
95:1a:3b:54:41:9d:e0:34:4c:37:28:7e:8c:bb:1b:d9:10:13:
a3:45:29:31:1c:ef:ff:d7:07:89:73:fa:41:c4:56:73:04:62:
36:1f:d9:06:1a:db:9b:f3:f0:bd:1b:b1:56:dc:fa:00:42:81:
1d:7d:c6:d9:fd:6b:97:23:b7:54:0c:44:d9:4b:8c:74:31:5b:
12:59:ed:a2:91:f4:c3:79:2f:bb:fd:48:9c:fe:73:93:21:36:
a1:3d:fe:e1:cf:6c:3f:77:e2:71:b5:00:22:f6:2f:4e:76:73:
50:37:5f:d5:0e:b7:71:3e:57:4f:14:a0:56:16:b6:42:73:72:
ed:19:25:b3:ac:e4:b7:f9:bd:ba:1e:4e:77:13:68:19:53:7d:
c0:f7:99:70:6f:95:19:65:37:13:be:df:90:3e:96:60:03:73:
54:20:d2:ae:4a:e1:ff:a7:ad:37:b3:57:d7:ad:09:9e:36:13:
46:ee:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:22 2026 by rpki-client