Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: C8wJI7CI9HdfX1vMiNB/vf0fnC+zbQsS0faSl7YZ9qQ=
Subject key identifier: 25:97:4B:0A:B9:27:3B:A0:C6:32:D6:F4:07:C7:26:56:85:4D:5B:FF
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 019D3263186E46C3FEF43266594D5E86A4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 184D
Signing time: Sat 28 Mar 2026 03:00:48 +0000
Manifest this update: Sat 28 Mar 2026 03:00:48 +0000
Manifest next update: Sun 29 Mar 2026 03:00:48 +0000
Files and hashes: 1: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (hash: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: kvHrJFDquxKtVpLoQs8DgpTmJr0F51g37aBF2rufs38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:18:6e:46:c3:fe:f4:32:66:59:4d:5e:86:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Mar 28 03:00:48 2026 GMT
Not After : Mar 29 03:00:48 2026 GMT
Subject: CN=25974b0ab9273ba0c632d6f407c72656854d5bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:a9:b8:7d:5c:a8:28:25:3c:b4:d7:1a:91:
ee:34:62:10:a9:f9:5a:d3:87:7c:92:8f:3f:3f:82:
5e:68:a7:11:20:30:97:81:7a:5b:46:89:b9:b4:c7:
30:66:39:a2:fe:66:50:77:ff:19:16:24:2c:a7:85:
f2:ed:eb:be:ab:fa:38:22:4c:ab:ce:e8:f8:9f:c4:
5e:3c:84:d9:32:94:fe:0d:3a:94:2e:1c:f1:bb:b9:
86:ab:01:9b:a3:4c:b2:03:2d:2e:88:24:56:7a:30:
ca:fd:d5:33:8a:1a:16:5d:ce:3d:88:3c:3f:6d:ce:
d7:3d:67:cd:97:0c:04:dc:a0:8b:11:5d:45:87:fe:
2b:7a:ae:d2:a5:0d:67:79:9d:d9:c0:87:47:ab:78:
55:f3:11:93:6c:77:e2:4f:60:40:7c:a3:bb:1a:c6:
18:1f:8a:a0:70:4b:c3:ea:70:d4:b1:fe:22:a9:7f:
fb:37:00:20:69:98:b7:ed:8b:67:da:e2:65:42:30:
0e:5b:9d:1d:6c:9d:f8:57:38:74:d0:48:73:20:2e:
df:53:90:19:30:a2:7c:9a:c6:70:b7:73:bd:73:ba:
29:2c:6b:9a:2c:3e:93:1e:71:95:33:86:cb:38:5c:
54:75:c1:55:59:7e:ea:a2:51:4d:a7:46:92:fb:2f:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:4B:0A:B9:27:3B:A0:C6:32:D6:F4:07:C7:26:56:85:4D:5B:FF
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a9:87:5d:0d:3b:7f:c4:8a:fb:67:19:48:6b:d1:b5:08:b9:
d6:b1:8f:ba:74:46:dd:8c:d5:50:76:d6:32:ff:1c:60:5e:04:
90:31:c1:84:72:e7:c0:ef:48:d7:89:e4:dd:b4:18:2a:00:0c:
e6:3b:bd:10:42:cb:3e:fb:10:3b:8c:76:0a:9d:cd:16:b4:9d:
19:04:a6:d5:c4:8d:53:d0:b8:6a:0c:af:4d:08:f9:83:97:64:
0d:39:bf:90:90:9d:5b:03:69:b1:99:a7:0d:b0:b2:85:03:aa:
d0:72:6d:9b:c6:f0:de:97:4a:c0:0f:56:9f:06:a7:80:a2:6f:
93:b5:a2:7f:21:10:66:81:2d:f5:dd:af:4a:89:09:94:5b:5f:
f8:02:0d:4e:7b:3a:dc:b2:08:f4:67:63:96:c7:cc:f9:6b:8f:
0f:5b:9a:65:04:f1:1b:08:49:c4:45:c8:5e:1d:ae:2b:b8:bf:
25:b2:9d:8a:f4:6a:da:13:5d:9e:83:6b:2f:63:81:a7:79:83:
5a:22:d9:3d:92:06:77:d4:4b:8f:3d:c3:05:e1:ee:40:66:8c:
5f:f8:ef:f0:75:1b:c7:23:85:4d:ca:c5:bc:a7:34:0f:82:fc:
d7:dd:f5:02:e7:7d:cb:4e:5e:15:9b:9b:9d:56:6a:50:c4:11:
4d:54:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:49 2026 by rpki-client