Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier: URpUFAVCH51szagiXkXqbhD5kTI9BJorboTEixeXnEA=
Subject key identifier: 8F:5D:31:21:00:B3:01:00:A6:35:D8:42:84:A6:28:01:DC:A0:31:38
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 019D273AC964EA6BCBED59F4ED9D21495F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: 8cg2nEVG8Xzu0RX4ymhKb5woKRk.roa (hash: kcwFv0RR8Ptv5DePTusLmAIEM0ACWY+zBbPUnnsVU90=)
2: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: 3Z9ntj0QB9MPn13o6yCHmsDDNhimbd57hY6atk3bOR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c9:64:ea:6b:cb:ed:59:f4:ed:9d:21:49:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=8f5d312100b30100a635d84284a62801dca03138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:8a:fa:63:09:49:f0:2e:a1:18:14:dd:46:
49:67:53:2f:c5:d1:91:e1:6c:f8:9e:75:ab:fd:03:
88:0e:30:75:9a:e9:44:38:06:1b:58:e7:24:44:18:
bb:c5:b3:b5:ba:a5:99:72:ec:22:fa:71:a3:e7:76:
6a:f7:3f:d3:12:7b:80:20:08:07:c2:38:32:07:0f:
57:77:a9:88:32:c3:ef:fe:49:54:40:d7:df:da:f2:
9d:89:79:57:78:ed:d0:a8:fb:2b:95:1f:db:2b:23:
77:70:98:03:6c:18:1d:74:9d:08:fa:73:25:f8:b3:
a6:10:50:f3:c2:16:d4:09:af:da:fe:bd:51:81:74:
81:4e:9b:61:a8:24:63:c4:59:b0:52:e8:19:a3:62:
c3:91:f4:d1:3e:85:19:f9:ce:6e:b4:59:48:27:ca:
a4:71:3f:21:a7:34:e2:54:a5:69:e7:5b:a8:f7:11:
72:ae:be:77:bd:71:38:0e:4e:79:f4:2f:7b:06:59:
a9:89:81:e0:dc:94:72:e7:18:fe:88:0a:a7:1e:35:
e4:1d:41:6c:f2:97:9c:9d:3e:9f:69:4c:72:56:33:
64:df:52:fb:27:ff:34:35:4f:96:e7:e3:33:ad:74:
04:e0:e9:da:99:3b:ae:51:63:78:47:3a:07:e4:a8:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:31:21:00:B3:01:00:A6:35:D8:42:84:A6:28:01:DC:A0:31:38
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:58:20:c1:13:68:ea:a3:13:02:24:5f:8f:51:c5:d9:69:73:
85:60:12:f6:21:a7:9a:b9:4b:36:e6:f6:88:57:46:f2:5a:d6:
ce:d5:f8:7d:f0:93:02:13:8a:1c:db:59:cb:9d:00:82:72:e7:
bb:96:2c:a9:0b:16:7d:c0:41:30:1a:ca:d4:aa:73:0d:fd:82:
64:8e:45:58:d3:b7:92:f3:1b:d8:e5:34:34:84:9d:bb:c9:2e:
c9:f9:b8:a1:1c:a7:a1:75:d8:4a:3b:79:6b:95:47:0e:bb:51:
d3:e8:96:27:eb:14:17:84:59:db:68:e8:0d:5d:68:ff:60:25:
9d:d1:b2:94:cc:b1:18:32:01:b0:9a:af:3e:49:1a:83:a9:33:
e3:cd:16:8c:8c:f6:04:7f:87:53:ba:e3:fe:84:1a:3a:76:54:
ec:f5:bc:dc:46:30:3d:74:f2:11:85:5c:af:c0:ad:a4:34:12:
68:9d:c4:0e:88:1a:65:22:f0:a8:11:26:12:a6:e3:76:aa:71:
89:35:82:69:83:57:2e:c0:87:d2:28:e0:4b:6e:40:a4:6d:b3:
05:18:ab:6a:bb:d3:3d:3e:e3:28:f8:54:28:7d:d3:55:e6:2d:
64:3e:eb:0d:ab:75:1f:ec:b7:94:dd:88:75:91:31:a7:54:7b:
d8:28:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:08 2026 by rpki-client