Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: jOatmynp5fxhEzmzwFnrmBew1XlfZFpZ78GO8LfmqsI=
Subject key identifier: 9E:48:58:C6:60:17:A4:90:56:AF:26:91:CE:C4:E7:2D:2D:F1:EF:85
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 019D2BBCECA9403633FCB2284BA89B27C536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 20:01:34 +0000
Manifest this update: Thu 26 Mar 2026 20:01:34 +0000
Manifest next update: Fri 27 Mar 2026 20:01:34 +0000
Files and hashes: 1: GfudqaXCGAnzf5UM4tjEaiMqpTg.roa (hash: ++grS5tBSYFsZ6VlpAvw9mKJW4WJ4ROEzneK+4J3ekU=)
2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: 7+pOdExa1AwLBBpkxIh6D8LQBNZ5Z+P3jqp1USiOI1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:ec:a9:40:36:33:fc:b2:28:4b:a8:9b:27:c5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Mar 26 20:01:34 2026 GMT
Not After : Mar 27 20:01:34 2026 GMT
Subject: CN=9e4858c66017a49056af2691cec4e72d2df1ef85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:61:6e:3d:6d:c1:47:8b:88:75:74:8b:98:
8d:5f:1e:8c:44:c8:8b:ba:5a:c4:c2:20:77:9e:eb:
b4:55:d7:1c:06:34:69:1e:4e:86:25:79:6a:32:84:
73:3c:fc:ff:71:5b:c9:e6:b3:5b:cb:69:3b:c5:82:
d9:5d:6e:32:2f:d7:86:e1:00:c2:d4:80:5f:93:72:
9d:60:a5:8f:3a:50:c9:59:74:52:4e:fc:36:d8:9d:
a7:f0:94:ba:43:30:ac:f3:2e:4a:31:dd:b4:7f:d1:
8c:70:07:18:fc:0c:77:e9:a4:2a:c0:17:f5:59:fd:
c1:cc:43:dc:df:97:00:d9:84:c3:66:07:17:b3:eb:
4d:43:af:5c:93:a3:36:4b:d4:ea:55:e5:f4:a6:2d:
a2:e2:1d:53:1a:8c:88:2a:5e:4d:4f:46:5c:70:65:
bf:29:4b:82:5f:8e:be:35:4b:6c:4c:59:94:8e:0d:
49:bc:98:90:e0:a7:b8:48:41:f1:21:77:ab:1b:03:
51:24:7f:84:74:65:d3:87:0c:f3:8d:8a:79:30:13:
64:e7:75:0c:08:c0:d1:11:21:10:f2:59:80:1e:f3:
07:1e:50:ea:36:a5:7b:fa:d0:e0:b2:f7:df:4e:71:
5a:dc:b8:a9:04:69:30:7c:28:19:8d:7c:06:a5:5e:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:48:58:C6:60:17:A4:90:56:AF:26:91:CE:C4:E7:2D:2D:F1:EF:85
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f4:0a:a7:14:ab:0e:d7:57:8f:07:5f:4d:48:b9:cd:6a:c2:
96:d3:18:93:a5:af:41:b2:57:08:44:6d:0a:83:7a:2d:94:1c:
2f:c8:ea:b5:5c:c2:5a:e7:ac:58:39:1b:30:28:6b:35:a8:8f:
5f:b3:1a:b2:05:b9:8e:cc:82:46:c5:22:86:0a:36:be:9a:f5:
ce:25:87:c5:4a:f8:c8:a6:f0:cc:8e:4b:e3:ab:3c:34:6a:77:
89:7f:a7:fb:a7:63:7e:40:4a:15:05:04:cc:6e:4a:a6:58:3f:
7e:d8:38:96:13:31:91:fe:2d:9a:8c:59:78:50:76:86:e4:d6:
ed:50:48:70:8a:01:3c:2c:02:cf:71:45:f2:5a:0e:d0:ad:10:
3c:b8:6c:24:fc:43:2a:16:03:dd:dd:70:34:d9:60:f7:bb:35:
bc:28:49:77:22:38:f3:b9:35:44:eb:6f:9f:a0:3f:b3:3b:ef:
f4:92:e0:2a:40:29:13:8f:b0:5a:f5:7b:0b:8e:8d:89:4a:96:
25:a4:f9:bf:f2:ea:7c:09:b8:33:cc:01:c0:b7:84:aa:94:93:
18:27:32:84:c1:b8:d4:de:13:37:3e:6d:20:e0:12:e1:cd:d8:
e1:94:a3:7a:50:de:7d:0a:10:1b:ce:93:ca:fb:f0:a1:7c:9c:
d4:59:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:29:50 2026 by rpki-client