Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: OqcLDCyv23ksPOIddSM0xAyBt8iPyWI3WsdeKsqPNLQ=
Subject key identifier: 35:F6:D6:B6:77:C8:A9:84:41:13:A2:15:A5:A8:F4:17:D5:C5:59:16
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 019D2A3BFB928038FADD502930477315BBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 13:01:07 +0000
Manifest this update: Thu 26 Mar 2026 13:01:07 +0000
Manifest next update: Fri 27 Mar 2026 13:01:07 +0000
Files and hashes: 1: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: uGkZRrAkgx3nzZvyF523cdXglu+qhRJBC9VC2WmSMFs=)
2: pwRfNzXMGOEuy9-A9ygooZEM6n8.roa (hash: sFyYjRFOUtVZQUg+k6G6omkeszu0+pmN0gGghnRFGQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:fb:92:80:38:fa:dd:50:29:30:47:73:15:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Mar 26 13:01:07 2026 GMT
Not After : Mar 27 13:01:07 2026 GMT
Subject: CN=35f6d6b677c8a9844113a215a5a8f417d5c55916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:74:1f:8b:cb:5d:bc:50:fd:56:e3:bc:43:
0d:8b:d9:a7:35:d7:b7:e4:fe:bf:14:9a:8b:80:67:
e4:6e:2f:4c:90:7a:f2:3a:51:3d:5f:e1:59:db:cc:
76:1a:ec:94:50:d5:ac:f8:8e:d4:9b:0e:f5:b7:cb:
e3:14:d6:00:8e:8c:9a:fe:d5:9f:17:f7:64:8b:3e:
7e:42:8d:1b:11:bb:a8:08:8a:ef:d8:49:99:f2:33:
70:b5:b3:a8:88:d0:b6:e4:da:fb:9e:13:fe:ea:4a:
7a:42:0d:3e:34:bc:ad:d1:19:ca:48:a5:46:ef:1c:
dd:b2:f5:2b:35:d1:9e:54:44:41:04:66:66:cf:95:
2e:0d:7a:9d:5e:24:44:fd:57:7b:fe:cf:18:cb:ae:
58:50:06:61:74:5f:a5:b2:71:a9:73:0a:d1:31:52:
07:3a:55:0b:fa:d1:de:d8:b9:0f:a8:06:0c:04:58:
06:21:ac:91:40:34:f4:e6:61:59:97:5a:7b:5a:24:
34:d2:eb:a0:d9:cc:62:fe:18:9c:12:cf:f0:30:3d:
4f:98:cb:b3:aa:2a:96:24:86:9a:d1:14:9a:57:72:
e5:c7:80:22:2f:e6:1f:7c:02:59:4d:83:f2:95:05:
d2:c9:e4:27:4a:c9:ed:75:47:39:af:58:d5:34:05:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F6:D6:B6:77:C8:A9:84:41:13:A2:15:A5:A8:F4:17:D5:C5:59:16
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:83:69:ed:8a:dd:62:90:11:0a:49:0b:bd:a9:4f:21:e8:80:
7e:a9:a4:6a:3b:ba:e2:94:86:84:09:3e:7e:51:2a:a4:1c:fe:
05:dc:de:7a:e8:ba:3b:67:59:56:03:11:9e:5a:e8:a9:8c:62:
2f:74:b2:ed:2d:88:0f:8d:71:7e:67:af:14:e4:7e:5b:83:bc:
a4:6f:c8:8b:16:7a:16:ad:c9:ff:ee:2d:7c:83:d4:d1:d5:e5:
14:c1:04:41:a9:1d:15:b9:e9:72:54:f6:d7:93:81:ad:2b:80:
38:a1:f4:d4:a2:b4:d2:81:d2:51:ec:ba:86:c5:98:f5:3c:38:
85:91:51:94:9a:03:da:3d:e5:89:8e:a7:8f:48:3f:d7:e9:ce:
c1:08:4c:dc:81:8e:c0:ad:0f:0f:1f:e1:6d:75:17:2d:76:14:
aa:69:cb:1d:e2:f3:f1:35:37:01:d4:3a:99:6a:03:f2:ae:43:
1c:f2:f1:b2:dd:b7:e3:4b:8b:d3:d9:5c:4e:69:2b:83:8a:37:
48:a7:66:36:9f:d4:5a:24:78:b3:f9:96:bc:73:a6:9e:eb:dd:
95:07:ec:d9:f8:2d:f3:9b:96:f6:a6:7f:ad:b4:ba:a6:dc:67:
e3:1f:af:75:02:70:01:e8:dd:73:fb:ec:fe:c9:d1:f2:f8:af:
20:c7:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:26 2026 by rpki-client