Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File: jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier: uDX3Ir8vnyDktrwmlVFt+yY5QW5fpXuJykhkMA+m3sk=
Subject key identifier: 0B:03:A3:6F:84:6E:AE:63:6D:A4:69:DE:6B:79:AB:94:0A:2E:10:29
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer: /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial: 019D2772D9782909EFE1D6312A5369C9168E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number: 19
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: A3jZDGijzaWkZHKAPWkFciTDmjUGyhmlt0tBqLFH6+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d9:78:29:09:ef:e1:d6:31:2a:53:69:c9:16:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=0b03a36f846eae636da469de6b79ab940a2e1029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:d8:4c:a3:f3:c4:68:99:a8:4d:30:d7:16:
ce:a5:6d:90:cd:d5:1e:fa:86:1e:6a:35:4b:0e:f6:
99:75:8f:0f:b4:96:d7:2c:43:50:00:48:38:31:4f:
75:03:0b:82:d2:72:fc:71:c9:c5:8b:28:ee:2e:8e:
14:a6:2f:17:bc:c7:9a:f9:9d:97:87:1e:95:61:7f:
94:7d:44:ae:7e:00:d1:ef:7d:8b:6c:8f:6f:5e:cf:
1e:63:b7:49:45:91:cd:2f:50:0c:f1:8f:4c:04:2d:
a1:56:17:2a:55:ae:1a:cf:7e:3c:43:1d:f5:21:fb:
8b:98:db:37:18:c9:42:d2:7d:1f:73:17:ea:33:44:
30:5c:5b:e1:ee:71:51:3a:37:27:65:f0:f4:8b:7f:
a0:e4:1a:1b:4c:cc:d1:97:46:d4:6b:c4:8c:27:4f:
21:90:be:7f:ad:5e:b7:a0:8e:2d:a9:34:cf:f1:46:
b7:bd:8f:27:94:3a:50:81:0a:bf:ce:6b:cb:a0:f7:
17:9b:30:09:4f:cd:72:42:9e:ac:88:eb:3b:6e:0a:
7b:56:5e:ed:f0:0c:61:2e:38:9f:d4:a1:38:53:58:
ae:31:53:e1:87:df:a7:7d:80:3b:0b:e4:07:91:76:
cc:01:ee:7a:64:96:4f:10:15:1e:43:ce:56:5c:0a:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:A3:6F:84:6E:AE:63:6D:A4:69:DE:6B:79:AB:94:0A:2E:10:29
X509v3 Authority Key Identifier:
keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:12:e3:9a:c8:e2:d3:a2:ba:d5:4f:53:35:6d:bf:67:08:
59:5e:30:95:f1:99:a9:ac:06:e9:45:a0:6a:ce:4c:d3:74:2e:
3e:29:a0:e4:62:60:31:b2:d2:a4:57:20:ac:1e:8e:d2:3c:70:
de:4c:7f:9d:3f:b5:69:d9:5d:16:85:3a:48:a4:26:e3:89:60:
68:74:97:e9:ef:e2:9c:7d:c4:da:4c:8c:08:f7:be:78:4c:a1:
9b:b0:4a:d2:ec:a0:f8:00:a4:df:9c:4c:33:89:29:79:e7:f1:
6d:8c:36:a4:18:c7:28:24:39:ed:a8:49:71:98:b8:62:67:39:
7e:8a:dc:d6:9c:e4:9b:2a:3b:06:20:4c:32:23:90:e5:da:37:
55:61:e9:7a:65:be:3f:c1:5a:9f:87:54:3a:c6:5c:ee:db:9f:
b6:11:0e:ef:03:32:d1:eb:1a:7d:9e:a4:e5:68:67:68:f1:0e:
e6:b4:d4:f2:08:57:90:d2:b3:9d:ab:fb:5f:e9:52:c9:2b:7d:
45:61:e7:8b:9a:07:2b:2e:2a:94:db:f8:c9:84:f4:10:bb:0f:
23:fa:cf:d5:34:6e:8c:21:80:d9:45:34:ea:6c:26:a9:32:d7:
60:3e:ad:69:74:c2:4a:95:a8:5f:21:99:43:74:92:3f:ab:c0:
50:fe:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:52 2026 by rpki-client