Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: PSTT5Uauu0wq/NaY1BcgO4NeZCvUkqAaIMxV9GyeHPk=
Subject key identifier: 8A:C2:34:85:CB:0A:29:FD:F8:43:3D:80:8C:6B:34:10:6A:1F:02:90
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 019D265EF5DAE8CE0277C4708FF7A4D3FA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 046E
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: oLZivzzAPUWX17rMbTLsDn1l/fU8QqALa50A+bWsquQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f5:da:e8:ce:02:77:c4:70:8f:f7:a4:d3:fa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=8ac23485cb0a29fdf8433d808c6b34106a1f0290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:0a:2f:09:7c:eb:11:ca:38:2e:56:55:af:
ee:0c:24:7a:8b:35:1b:77:68:d1:a4:5d:dc:a6:35:
88:d0:e7:ed:bb:98:88:78:ba:2e:10:f4:ab:cb:80:
39:d8:87:69:ab:b6:79:53:b4:54:61:8c:a5:aa:37:
df:3c:72:f5:9e:1b:02:23:42:89:4f:e6:63:8d:a0:
63:97:e0:91:58:89:74:bc:ed:8a:79:9b:2c:08:99:
73:87:b4:ba:37:eb:b1:0f:7f:89:77:a1:1d:51:ac:
92:63:5e:18:b7:f7:79:17:e9:ba:a7:68:d4:f9:b6:
b3:ca:22:54:94:c0:b6:76:c7:53:2e:f9:25:a0:a6:
70:0a:47:54:4e:ce:86:dc:c4:21:08:b4:da:84:51:
e4:78:be:46:5a:d4:6c:f9:61:fc:30:f0:8a:fb:d3:
80:5e:b6:c8:c3:9b:ce:bc:5a:fb:47:b4:e3:0f:e1:
12:1c:e6:05:3b:4c:49:7b:4c:1c:1a:19:d1:4a:d7:
14:24:c2:5a:c9:a4:4b:e8:d4:ff:50:6d:ac:6c:34:
fc:b7:d3:31:f3:90:cc:d4:b8:c9:4e:7d:0a:17:d5:
07:d0:7a:6c:2e:6b:3a:c6:42:48:d4:07:49:54:5b:
1b:14:d4:0d:1b:d6:d6:56:a0:6a:80:bc:ed:1d:34:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C2:34:85:CB:0A:29:FD:F8:43:3D:80:8C:6B:34:10:6A:1F:02:90
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:05:88:40:2a:13:1b:8a:fe:32:cd:d5:c0:b0:ba:45:ac:c7:
49:e9:5e:af:0c:25:7c:4d:49:54:bf:dd:a0:f3:fb:55:62:f1:
c8:19:f1:9b:f7:c2:4e:03:96:be:a9:b7:85:ac:df:fe:99:a0:
0f:1f:85:75:31:ca:b8:9f:98:ec:15:86:f7:01:fc:49:2a:b7:
c8:e4:0f:49:5d:fc:da:1e:89:89:f1:f6:52:82:c7:35:95:88:
44:ea:1c:e2:2f:d3:56:65:74:33:31:c4:6e:17:7e:af:67:8c:
3f:1f:b2:de:85:27:4f:36:e8:8d:3a:4a:1c:87:18:40:2e:8e:
e8:5a:91:7e:a7:59:16:fd:ec:04:b2:2d:17:5a:ad:49:09:4f:
d7:c9:2d:11:44:51:66:2f:9a:d7:4e:fb:ff:a8:75:e2:42:0e:
8c:30:6d:a1:d9:a8:76:f5:a0:20:34:6b:7e:76:85:ff:c0:56:
0c:f4:2c:82:57:44:fb:2d:5f:7f:55:cb:fb:47:e1:04:f2:52:
30:d1:e7:eb:ae:69:bf:67:b0:8a:a8:d0:ce:52:d2:c6:7b:f8:
38:f5:12:ed:00:33:cd:4c:fd:00:e9:9b:dc:ec:62:c4:cd:28:
8d:1d:86:23:25:70:8e:74:a9:f0:08:8c:ef:dc:5c:45:af:b6:
87:58:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:45 2026 by rpki-client