Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: +j90YfL5CkAu83ddsQogYemPraebmOXE5ECUOb0Zcnk=
Subject key identifier: 03:35:30:C9:DC:29:8E:31:A1:B4:E7:95:46:0C:62:96:92:59:C8:67
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 019D2AE0772C4A4FAAC60C2E7225FEAE58CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 16:00:46 +0000
Manifest this update: Thu 26 Mar 2026 16:00:46 +0000
Manifest next update: Fri 27 Mar 2026 16:00:46 +0000
Files and hashes: 1: Wup1Q1uFK5aAm0q7_cAA8x0spSY.roa (hash: d/XhcWFuK+yDoXR1POg4vJ7o5/6q+n/d2c4kmBYqIpk=)
2: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: qV74ka/4a3WMoGlsu5ZUIlUdQCB4nZpgXeGfHGn6TO4=)
3: ocDruih2yibbf6CAeSAG3oeE1I4.roa (hash: OFqknVm6G0kk+aIE7XbTQXvAldWSJ1pjOrT88QpbMe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:77:2c:4a:4f:aa:c6:0c:2e:72:25:fe:ae:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Mar 26 16:00:46 2026 GMT
Not After : Mar 27 16:00:46 2026 GMT
Subject: CN=033530c9dc298e31a1b4e795460c62969259c867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:ce:6f:67:eb:19:6e:4b:09:00:65:36:ee:
7b:f8:e1:99:e1:53:ee:bf:1f:c6:8a:03:d3:31:cb:
ae:24:1e:29:e5:8d:3b:23:a1:10:eb:79:a7:5d:97:
60:02:dd:5f:6f:92:6f:9f:8e:f7:94:0d:6c:ed:2e:
32:38:e0:7a:2e:8a:03:b0:1a:a9:4f:e3:00:7e:54:
e7:cb:bb:80:ec:40:91:9e:9c:fb:bd:37:89:b6:2e:
34:99:69:fa:28:a1:6e:8f:12:8f:d3:bd:1c:76:9c:
91:82:e7:78:6b:a6:0d:0a:8d:cd:4e:73:b0:ab:5a:
dd:5c:4d:a5:04:dc:ab:0e:bb:b0:d7:b7:c9:b4:b4:
00:fa:77:f6:ff:58:fe:15:ef:c4:6c:e6:1d:82:74:
69:16:96:dd:18:64:04:76:fb:f5:c1:fa:8d:63:86:
f9:75:04:1b:27:aa:8b:93:d8:8d:a4:e0:2e:76:41:
d6:4a:66:f9:a5:6c:67:85:95:9c:a3:41:31:cd:65:
19:cc:bd:b2:24:0c:43:98:88:6a:5e:65:93:96:31:
04:cd:c3:bd:2e:9d:94:44:f6:65:d5:60:5f:fd:5f:
06:64:f5:c4:9a:10:ab:89:14:59:53:82:18:2c:58:
6f:51:cb:c0:35:f5:57:86:c4:cf:1c:8b:69:f0:7a:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:35:30:C9:DC:29:8E:31:A1:B4:E7:95:46:0C:62:96:92:59:C8:67
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:87:65:69:4c:5c:07:34:ce:f5:fc:37:40:10:8c:e6:9e:a9:
70:4d:d1:f2:19:e8:00:c6:fb:39:34:4a:8b:69:58:72:da:4f:
57:87:36:b0:46:37:cb:c0:f9:79:bc:b2:2a:34:04:bb:ec:52:
9d:11:00:4c:1f:72:2e:55:28:57:46:cc:a4:d4:cd:8e:6c:1a:
13:3d:99:4f:e6:4b:74:68:f7:45:36:b1:ab:df:7c:53:fb:9f:
16:b3:66:e6:e0:02:c2:3b:92:ea:61:3c:3c:ad:8a:6e:0c:ba:
42:3a:62:f0:e1:9f:ae:91:f3:29:ab:14:ba:d1:b1:9b:f2:1d:
7e:04:6a:c3:c5:41:99:ff:cf:eb:5c:ea:55:b6:6b:10:12:11:
54:48:3e:ff:19:e6:74:39:df:21:cb:ef:f7:20:0c:c3:48:fa:
1b:52:71:66:b0:ce:5b:77:ec:37:70:08:cb:3f:cb:9c:57:90:
32:97:23:58:8e:ed:fd:65:34:2e:84:ba:93:15:87:ec:66:8d:
6f:3d:85:58:8a:51:b5:2a:b1:4e:f9:35:0d:6b:0f:20:5a:ec:
3d:bd:40:f3:2c:71:31:df:9b:62:89:70:6e:10:d9:d2:87:18:
e2:7b:ce:b5:4a:0d:b0:55:3b:5e:92:cb:05:8e:13:61:e0:ce:
4b:bf:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:05 2026 by rpki-client