Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: 3OaVMmfUYa2OTNdFnTCX+FHKBPztGrbLDWDl31LDmSc=
Subject key identifier: CA:7B:85:ED:10:33:52:D6:D5:81:3A:7C:54:EC:6B:B3:62:1C:71:26
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 019D2D05C3F960EF6EA050FBAFC40200B695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 188A
Signing time: Fri 27 Mar 2026 02:00:45 +0000
Manifest this update: Fri 27 Mar 2026 02:00:45 +0000
Manifest next update: Sat 28 Mar 2026 02:00:45 +0000
Files and hashes: 1: VndZi1ag43yUYbp1p18VZaT1S-Q.roa (hash: YUCC1yTTSNVtoC4MDdJQsWo/Nb81JBpWk0EnfDrruB8=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: gdAroTHgf/5V6fmNt9gMKfKC1g8FIPKeSlwo/Jmp7co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:05:c3:f9:60:ef:6e:a0:50:fb:af:c4:02:00:b6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Mar 27 02:00:45 2026 GMT
Not After : Mar 28 02:00:45 2026 GMT
Subject: CN=ca7b85ed103352d6d5813a7c54ec6bb3621c7126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:74:ab:e6:99:c0:5b:40:17:93:d1:d6:47:
32:55:3e:4f:a4:14:21:48:9f:88:25:e6:0b:a8:1b:
a1:b7:a6:55:57:e8:e9:36:af:53:47:ac:fc:80:64:
61:1e:63:4c:8d:2a:74:02:d0:9f:78:f5:d6:00:7c:
cd:9e:bd:68:40:7d:71:c3:86:8b:a8:c5:0d:15:94:
d2:04:73:79:c6:9d:06:06:13:af:56:d5:82:1d:93:
e4:7a:2e:0c:40:e7:2f:32:eb:bf:f1:5b:00:79:d3:
37:9c:35:1a:7b:83:d4:e0:7d:65:12:30:57:53:81:
48:3c:bf:28:58:4f:72:78:5d:95:85:b6:19:29:59:
5a:77:dc:b8:26:c7:cb:58:43:36:5b:18:14:ac:e8:
6c:8f:0b:a9:df:54:86:0e:d9:98:b0:f3:ac:83:62:
9c:e2:c4:cb:34:9d:77:0f:ac:63:23:9a:05:1f:58:
5c:0a:83:7e:7b:3f:96:64:9a:c3:23:3b:70:a1:e7:
48:f4:fc:6d:43:35:f1:b5:19:bb:96:0f:42:fd:63:
31:c5:e7:71:ca:59:d1:90:c1:06:fa:a4:f0:cc:6e:
86:59:1d:06:28:d0:66:f7:25:d3:a4:1a:94:55:0d:
7f:03:a3:8d:d9:93:8e:d7:f0:2a:16:ab:a2:73:16:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:85:ED:10:33:52:D6:D5:81:3A:7C:54:EC:6B:B3:62:1C:71:26
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:6b:de:b6:ca:a5:d7:b9:b4:f9:07:4b:b4:f0:70:22:6a:2c:
c6:50:6a:ac:18:ff:ca:81:db:a6:b9:5e:88:c9:2d:91:b3:84:
7a:bc:92:16:88:1a:23:e2:30:2a:5e:e8:72:7c:c5:6d:e2:44:
bb:b4:f1:31:59:15:48:11:5a:b2:63:c3:6d:3a:bf:35:21:bf:
2f:fb:5a:69:6e:43:24:03:e2:b3:21:ce:b0:90:e0:bc:b7:58:
f1:64:0d:65:83:d4:0c:86:d4:0c:b1:0b:9c:97:7f:36:5d:8b:
ff:d2:2f:5c:12:1c:5b:82:95:71:5f:94:3a:93:8c:e0:1f:16:
18:67:f6:4e:19:9c:12:24:6b:97:b9:d9:cc:89:d2:d8:78:10:
56:25:4b:7c:18:9b:3c:93:e3:c4:14:1e:4e:09:35:93:8d:4b:
8f:71:dc:ed:6e:18:c5:b2:cb:0c:c6:9a:c1:b0:27:3d:31:d8:
c3:8c:4b:73:42:b8:c4:c5:aa:f4:9a:4d:14:52:1c:7f:df:17:
e8:cc:fa:cb:7b:32:dd:eb:85:72:53:f1:2e:50:1d:e2:4a:42:
2b:16:83:15:13:11:ca:74:8b:03:aa:02:34:99:be:c7:88:d9:
37:83:90:e9:cf:a7:b7:5d:57:c5:fa:b6:68:b4:d0:bc:64:78:
8a:2f:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:15 2026 by rpki-client