Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File: JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier: 9wP/6l2so/oWqZCuTyHTj8dt90A04BcQfc+QZD7rdQs=
Subject key identifier: 77:F4:0C:66:AB:82:2D:F8:80:3F:5F:09:71:D8:F2:17:84:F1:4B:B0
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial: 019D28F22B93F6B9D88BA4B913FF11DCC857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number: 1327
Signing time: Thu 26 Mar 2026 07:00:52 +0000
Manifest this update: Thu 26 Mar 2026 07:00:52 +0000
Manifest next update: Fri 27 Mar 2026 07:00:52 +0000
Files and hashes: 1: 1IIEvGygvpoLAGhzsQa0AFiSc6c.roa (hash: IlEP7k2pN5p03aEIwdfyX+8YwJkY7uWP4+Wsd4o4ZfU=)
2: 7dyvMJC9soHwC2C-qKBNN8Swy1E.roa (hash: ThU9QlnbHrk5sj3VeLKsVi1YledN8CGPHeD+PwkC7Pk=)
3: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: 0PnB7YpKcJrXq8D8+Oh4v8vkZxaK73JG5UzyzZjG6dc=)
4: iAMQWeS9GMw3TAa5hDTAT6s825g.roa (hash: 2q1sFbCAgulgub3q2AGPYNHWFrfFNMkKFSc13dmp7t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:2b:93:f6:b9:d8:8b:a4:b9:13:ff:11:dc:c8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
Validity
Not Before: Mar 26 07:00:52 2026 GMT
Not After : Mar 27 07:00:52 2026 GMT
Subject: CN=77f40c66ab822df8803f5f0971d8f21784f14bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:16:af:6b:b9:4a:26:85:b2:41:f9:c9:b5:
60:19:19:46:84:ea:76:56:9f:35:8a:d9:51:49:64:
89:80:23:23:dd:02:3c:8d:f6:8a:7e:67:6a:76:55:
40:9b:fb:0a:c9:7e:80:f9:76:bb:c2:eb:4b:a5:9b:
98:07:eb:ce:d4:fd:b4:63:24:50:f5:41:2a:f7:01:
13:3a:47:f6:44:1c:8e:44:b9:67:0a:2b:37:6d:24:
df:99:d1:80:d2:b7:96:19:68:5a:92:c0:28:0d:cf:
16:50:0d:aa:13:a7:a9:f8:3e:3a:98:cf:ef:c5:0e:
50:9d:aa:69:df:0a:1f:bc:3d:79:a4:93:a0:e6:a4:
44:76:32:fd:16:cd:ae:5e:d8:23:eb:c3:f2:dd:d9:
ba:cd:79:f5:43:bc:06:3d:4d:d5:39:0e:1b:2d:b4:
41:bb:41:f8:6c:ef:b4:d7:d1:d0:b8:02:88:6d:e3:
05:a1:8e:ad:c3:6d:f0:cb:ab:35:1d:ac:4c:1b:b0:
65:fb:aa:0e:c7:29:c9:dd:aa:a9:fb:0c:96:8d:6f:
35:2e:82:f7:8f:19:7a:2b:d2:f6:08:b7:a3:45:3c:
20:34:db:97:5a:d0:44:57:f5:0a:e2:c5:09:04:a0:
20:e2:f4:18:6c:b9:ae:4b:66:df:59:b9:94:74:a5:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:0C:66:AB:82:2D:F8:80:3F:5F:09:71:D8:F2:17:84:F1:4B:B0
X509v3 Authority Key Identifier:
keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bf:11:94:a9:64:d5:03:03:1a:9e:49:53:e8:9b:fa:96:3f:
31:ac:42:c5:2a:26:42:09:1c:ee:e1:6f:b3:71:8e:b1:e9:b9:
d5:7d:c1:86:5e:ce:b7:c8:3b:75:f2:14:80:d0:4f:3a:b1:25:
ea:6f:16:ba:02:be:82:cd:bf:62:35:a5:ad:52:85:01:9f:95:
9c:cf:90:35:6f:1b:36:20:ce:75:5c:3a:75:26:0d:29:d1:19:
2b:cd:38:f3:3d:fa:01:e7:db:98:29:5f:af:26:9f:56:87:f0:
e3:0f:bb:cd:85:e8:b1:7a:59:e6:bd:47:21:b5:82:c4:53:62:
a8:f2:40:f9:6d:4f:86:48:fe:60:b4:cb:30:10:7c:de:d0:88:
d0:6e:09:a2:7d:da:fe:c7:49:ae:84:c4:bb:af:95:59:91:4b:
c5:4b:09:53:53:4b:7e:60:be:77:f6:98:19:0b:7d:e3:39:ab:
93:fe:6b:f9:cc:70:44:e2:78:04:bc:21:e6:b5:8e:90:af:49:
ad:2a:bf:f7:30:42:bb:b7:05:82:cf:36:4c:e8:f4:b8:fd:5c:
0e:f1:a0:96:e8:c8:0d:d4:b0:a2:fb:a2:de:cb:bb:67:b2:58:
bd:02:00:cf:cb:90:ea:d5:86:25:d9:92:9a:c6:10:fe:52:48:
c2:0d:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:47 2026 by rpki-client