Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: /TJD8MV2rOnAZ6y1m//DxDySb7g9BzA8cKdjPOchGAI=
Subject key identifier: 04:63:C5:81:43:AD:8F:62:D7:16:74:D4:52:DF:D6:A7:BB:D5:EB:BD
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019D3307C4FEBB847C6656E1184C3CB42BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 11BA
Signing time: Sat 28 Mar 2026 06:00:40 +0000
Manifest this update: Sat 28 Mar 2026 06:00:40 +0000
Manifest next update: Sun 29 Mar 2026 06:00:40 +0000
Files and hashes: 1: fpTANtI4bRz4exyqA72XnfqWeAU.asa (hash: AzHMEe9qZzasIn392H8jsDvUxwHyy/nAONClfoo+kAc=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: 0WKX4XDpJuzCHJ9yN1m3BT6/hIbkdfrXtPYYEykoYeI=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:c4:fe:bb:84:7c:66:56:e1:18:4c:3c:b4:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Mar 28 06:00:40 2026 GMT
Not After : Mar 29 06:00:40 2026 GMT
Subject: CN=0463c58143ad8f62d71674d452dfd6a7bbd5ebbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:41:27:48:64:07:3a:c3:2a:36:15:a3:7c:
2e:3f:4a:99:40:4a:dc:0d:7c:8b:30:34:fc:d8:5d:
fb:e2:1b:10:7e:28:7c:a1:0c:9a:af:e4:20:29:0a:
e9:5b:0c:df:13:cb:87:c5:47:0f:7a:72:ac:72:07:
ed:66:ea:9b:66:38:7c:36:bf:fe:66:d2:ba:a0:03:
3a:cd:63:ba:05:6c:33:d1:95:63:d2:ab:71:2c:60:
d4:99:69:88:d7:a5:55:46:5d:2b:98:b6:89:e5:86:
3d:a2:9e:43:a4:c0:df:60:7e:80:d5:a9:8d:c0:39:
db:ed:3e:09:b6:9e:8e:33:1b:ed:7c:d6:df:12:8a:
b1:be:3d:64:f3:c3:f6:d5:2a:43:28:36:2b:4f:b9:
0c:ed:33:0a:0d:23:61:17:43:9f:5e:b6:36:45:ff:
a8:59:76:76:d3:55:7f:ad:6e:b7:86:33:76:02:95:
64:d1:a5:17:34:84:7a:dc:30:f2:46:e5:5a:44:63:
cb:4a:76:e5:c3:e4:3a:93:3e:2f:3a:1d:8c:06:2c:
d3:52:c7:01:a8:00:72:08:3b:63:da:fc:12:a8:b7:
8a:30:b8:c1:e3:cc:c4:a3:65:6d:40:0b:18:12:76:
13:35:0a:7e:db:74:da:3e:93:3e:f2:91:f4:57:f5:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:C5:81:43:AD:8F:62:D7:16:74:D4:52:DF:D6:A7:BB:D5:EB:BD
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e9:73:08:01:42:a7:99:53:02:53:b3:3e:0f:65:dc:c9:a1:
a1:a4:ac:07:85:73:7b:90:b4:25:f6:41:a5:86:74:19:6a:6e:
92:84:6e:de:eb:2e:be:3b:90:f1:e1:f5:90:97:ea:5d:9f:3e:
4a:02:c1:70:13:f7:b8:cc:0f:25:da:f2:27:c8:b4:b8:d7:cd:
d5:b4:ad:2e:7d:20:bd:bb:2f:9d:06:55:a9:9e:44:36:2e:eb:
47:02:f9:b1:01:87:9d:ab:60:28:13:e2:52:0e:e2:5a:46:74:
d1:bf:28:db:9b:d7:76:d2:c2:d6:2d:2e:5a:79:c8:06:4c:b7:
2d:7c:4f:39:8b:e6:74:c0:16:5a:61:f2:12:04:5f:3e:8d:9b:
c2:64:6d:d3:49:42:36:e5:86:99:21:e9:35:96:7b:c0:02:c1:
db:8d:d5:ba:9b:a8:82:f2:cb:cd:3f:ff:86:71:23:6d:06:8c:
53:43:e4:d6:65:55:68:a3:b0:1c:df:46:71:a4:61:81:75:c2:
8b:8d:e2:9c:86:63:df:5f:e4:75:47:59:27:b2:11:86:54:25:
c7:c7:bd:d2:47:65:84:0f:74:78:0d:3b:f1:aa:53:2d:00:2b:
7c:38:d8:a8:e7:0c:c6:f8:5c:6c:d3:f7:ae:e4:85:51:7d:ec:
54:d3:01:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:14 2026 by rpki-client