Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier: MgiBWsp++zscDCRxvZ+cHwM0k08QRhkP0kFL3tc7TAU=
Subject key identifier: 8D:CB:31:0F:8A:00:1D:55:5A:29:AF:83:35:9E:D6:2A:11:6B:0E:9D
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 019D27DFD07ECED339DC4D9C8F8F0F2AAF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: 1--5uI7-lFA1vLc5OGC-ol-YopyQ.roa (hash: oRVTaOt3U0YoXKj3+Sn3M9/Gmc3MrUZYmaGBPKb5vvw=)
2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: 0kQu9SKKqYpedelXCsxKM4zkUrdmSzvClolnNcUtIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d0:7e:ce:d3:39:dc:4d:9c:8f:8f:0f:2a:af:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=8dcb310f8a001d555a29af83359ed62a116b0e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:51:44:e4:88:a6:b4:0a:e0:c5:ed:1e:c8:
a7:0c:92:12:cf:9d:c2:28:01:7e:31:09:02:f5:0a:
ec:f6:7b:3d:04:3d:87:4b:a7:16:15:7e:99:25:36:
86:5e:d1:ec:de:dc:67:18:17:da:bf:9d:41:47:43:
61:3b:5b:19:6e:8c:ff:18:a2:16:83:84:84:96:30:
3a:85:7e:42:d9:86:4f:18:cc:a2:90:24:62:f2:53:
9d:cb:25:e0:20:2d:00:00:c6:61:77:f7:64:e2:38:
37:fd:87:e0:7e:d7:64:fd:66:5d:9a:82:56:8f:68:
06:63:9d:89:5d:2b:14:22:64:4e:a9:58:14:8b:7c:
77:a9:7c:ae:87:2c:9a:b3:a5:99:78:62:ac:b8:cb:
7b:d8:26:22:f0:fd:e9:53:a4:29:ea:23:27:a4:9b:
b2:d5:21:b8:7f:5d:b6:58:0c:95:05:ec:14:e6:50:
b8:5f:c5:7a:f3:45:61:7e:76:49:08:fc:24:eb:97:
38:14:b9:ef:e6:f2:0f:a1:6d:5f:65:8d:17:ae:0a:
90:1c:b3:c0:c7:28:7f:6a:6c:a8:f5:b9:de:6e:45:
e3:52:22:5d:8f:d9:7d:e1:9e:a6:4a:70:72:a6:13:
39:ca:1d:77:b5:a9:3d:96:e7:7f:a4:cc:f9:17:f6:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CB:31:0F:8A:00:1D:55:5A:29:AF:83:35:9E:D6:2A:11:6B:0E:9D
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fe:fe:d7:39:b5:5d:e2:9c:b2:ec:c7:83:15:49:62:6c:f7:
e9:a9:a5:db:14:10:1b:57:a7:19:24:39:e7:d9:29:aa:ef:83:
8b:c0:a9:5b:91:72:36:1c:4a:9e:bf:5b:7f:8f:7f:66:d1:a6:
f6:54:55:7b:b3:6c:bc:f4:72:2c:f7:f3:b4:d0:09:54:f4:4f:
37:0c:3b:32:10:b6:f0:9b:5d:19:7d:35:88:dd:f3:10:fe:48:
69:c7:a0:d2:c2:38:88:4a:d8:0e:cb:56:28:fb:83:56:07:c3:
67:1a:0d:86:b7:ea:67:d8:2b:bb:6f:80:c3:63:78:cd:e0:c1:
66:37:f9:ca:05:fe:0d:81:84:36:14:b9:5e:d8:5f:39:07:e7:
07:1d:69:5b:c5:21:b8:23:6f:46:a5:94:90:a4:86:a5:ec:9e:
8b:47:d5:d6:c7:a0:b1:a4:0a:dc:d9:25:fd:a6:7c:65:c2:ef:
91:6d:95:ea:c1:76:11:5f:47:d5:e0:cf:37:9f:4b:7d:21:f3:
88:70:ac:d7:71:2a:fe:f3:29:74:25:43:45:52:65:d9:53:cb:
83:70:bf:6f:f4:3e:81:c9:3f:e4:3a:09:e9:f5:bc:a3:52:92:
09:7e:1d:85:56:bc:68:2a:b4:db:20:0d:8f:6e:65:ee:f7:82:
bf:af:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:56 2026 by rpki-client