Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft
File: jKRJngTEZs_ph5p6BXMt80AVwZM.mft (raw, json)
Hash identifier: L0oCKSeKfpUX9xHm7qQRPl+ktpmrKInZ9ggtGr0dKTE=
Subject key identifier: 1E:B4:C6:B8:A6:FA:81:0C:B5:B0:5A:D4:9A:EA:92:B3:C4:9E:E5:5B
Authority key identifier: 8C:A4:49:9E:04:C4:66:CF:E9:87:9A:7A:05:73:2D:F3:40:15:C1:93
Certificate issuer: /CN=8ca4499e04c466cfe9879a7a05732df34015c193
Certificate serial: 019D269608470CD24CCCBE95FFEA12CEB75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft
Manifest number: 0159
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: dfKTFGfTs10YftYU8pRXD2L4Sc4.roa (hash: 9Go0Cy2c/hUxG6kI2Y4JKXgcTmA81NqlWJty/FdvMfs=)
2: jKRJngTEZs_ph5p6BXMt80AVwZM.crl (hash: R+LuejkoW4a+7/fYFTgwmT5MyVmUwALfC4/qY0PHBwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:08:47:0c:d2:4c:cc:be:95:ff:ea:12:ce:b7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca4499e04c466cfe9879a7a05732df34015c193
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=1eb4c6b8a6fa810cb5b05ad49aea92b3c49ee55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:cc:e8:e1:56:ff:b6:04:02:52:1b:b1:05:
8d:54:bc:cd:7e:1c:d9:a7:2b:53:97:c9:db:83:56:
55:8a:24:35:bd:46:1a:2f:ca:10:70:32:aa:cb:1b:
a6:e4:2d:e0:8e:54:5f:64:5d:85:86:5f:a2:da:7f:
37:8a:d2:00:4a:df:db:6b:f2:50:c6:9d:9d:c5:0a:
11:d0:ef:4d:35:ff:73:ab:3b:7d:22:72:5f:4b:de:
57:24:4c:b0:98:1a:ce:fc:80:5e:48:c7:be:22:a7:
94:16:47:ab:6a:1c:0e:b3:be:3d:6d:44:8e:8d:bb:
c8:5e:a2:7d:e6:6a:91:e9:a6:b4:59:42:16:b2:4f:
d9:f0:03:13:1b:be:aa:ba:00:5b:02:b3:9b:ca:61:
a2:6e:17:f1:71:c6:88:f8:a3:5f:d4:1d:c1:eb:23:
3c:f4:c5:4b:44:f3:c8:b7:dd:fb:ab:92:a6:40:4e:
0c:bd:51:7a:d2:dd:43:31:a6:fe:5b:2c:99:66:ed:
a3:be:7a:56:9b:f8:b5:98:35:3c:4c:b9:c4:f6:d6:
c4:38:c2:80:f8:57:07:89:50:31:aa:81:c8:5d:f6:
bf:9e:db:bb:32:26:3e:db:e5:45:7d:04:03:4e:40:
61:b5:58:91:ec:58:d2:9e:1e:5e:80:2a:fb:c0:f7:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:C6:B8:A6:FA:81:0C:B5:B0:5A:D4:9A:EA:92:B3:C4:9E:E5:5B
X509v3 Authority Key Identifier:
keyid:8C:A4:49:9E:04:C4:66:CF:E9:87:9A:7A:05:73:2D:F3:40:15:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8b:ae:30:00:a9:e1:2b:1b:e4:f6:79:4b:69:78:98:14:fd:
ff:b2:28:d0:d0:3c:17:e1:79:b6:80:97:97:c1:77:5e:34:b4:
3d:3f:9f:99:b2:79:ad:28:53:45:7d:77:e9:09:b1:fc:d1:10:
e1:b6:eb:f3:5f:69:b7:e8:32:24:4e:6a:cb:f2:7a:0b:b9:62:
78:39:bc:ed:5a:0c:f0:83:8b:ed:d1:ed:ad:9b:d8:71:b4:74:
91:3d:66:a9:83:f5:12:67:c4:1c:db:43:1f:85:20:51:61:fc:
d2:3f:b4:b7:ca:00:5a:5d:9e:49:ef:aa:e3:bb:ae:23:05:db:
47:38:9f:8b:ed:76:2e:16:5f:36:9e:d1:e7:22:db:4f:60:de:
77:1d:db:a6:0d:c2:6b:91:e1:73:01:b4:b8:55:28:67:c0:d0:
a9:1e:82:7d:c7:e3:5f:36:1e:84:95:4c:0e:16:f9:37:9f:b1:
ce:8f:49:a4:e3:31:4b:06:67:7b:78:d4:a1:10:2a:0b:5f:4d:
94:7f:69:d9:1c:60:9f:21:1e:df:ed:d9:0c:45:43:8e:27:01:
a2:68:d8:32:2c:20:ca:a1:bd:3c:ea:eb:35:10:50:85:83:61:
ab:3c:b5:e4:4f:c8:99:9b:da:15:ca:8c:e7:dd:60:81:ab:7f:
20:bb:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:03 2026 by rpki-client