Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: iv5Fj0pHx11isEDu6XrbODeya8VJj8zryAqMEpvyvTM=
Subject key identifier: F7:A3:C9:DC:9F:62:BD:F8:1B:D7:CF:7C:C1:8E:AD:5E:C1:A0:0D:0C
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 019D273AE26C3AD6CBC9E6FD9A5BDFA498B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 17AE
Signing time: Wed 25 Mar 2026 23:01:03 +0000
Manifest this update: Wed 25 Mar 2026 23:01:03 +0000
Manifest next update: Thu 26 Mar 2026 23:01:03 +0000
Files and hashes: 1: 5SPOOAFTV5wB0v8bOqbqxdbSbOQ.roa (hash: mgFPEV4LAu92g1S2eIdHABLNocI2JnL7lnfnPbZr274=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: iIShOEAZ06n8bb3z5hzUAfXunPDt+NHO/vPujOAZVfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e2:6c:3a:d6:cb:c9:e6:fd:9a:5b:df:a4:98:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Mar 25 23:01:03 2026 GMT
Not After : Mar 26 23:01:03 2026 GMT
Subject: CN=f7a3c9dc9f62bdf81bd7cf7cc18ead5ec1a00d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:ec:c2:2a:b7:e9:6d:67:a3:2c:1e:a2:ca:
e1:86:ff:00:25:2c:53:cc:a6:12:eb:95:98:74:92:
a2:fc:ba:b5:91:62:1b:14:04:df:63:79:5d:da:f9:
81:0d:c2:64:ae:e3:a1:03:91:f9:26:54:04:aa:39:
9e:50:9b:ad:2f:0b:b0:ab:b6:27:7a:8d:f3:4b:31:
8b:63:1e:32:77:90:00:fc:07:96:0a:d8:99:0e:18:
e1:59:07:bb:6d:f1:68:a3:f9:3c:c8:5c:f4:68:0b:
18:dd:95:0a:cb:9b:ef:9f:6b:fc:74:9f:5d:dd:d5:
70:f7:a8:c8:2a:8a:07:0f:f1:d9:f4:9c:2e:31:7c:
f9:03:84:fd:2d:ed:14:b4:1f:53:44:9c:97:6a:fb:
a9:24:8b:4f:02:b4:97:5a:93:9c:2a:54:b4:96:28:
cc:96:54:11:3d:95:06:4b:46:a7:05:b8:f1:9e:ec:
08:19:40:55:3a:61:7e:6b:e6:c6:8e:b2:ad:5b:58:
71:43:81:07:a3:a1:ab:06:17:b5:b7:01:f7:b3:56:
ef:08:04:c1:5e:2a:1b:2f:27:c5:9d:cb:56:59:8b:
20:0b:1d:58:14:b6:6f:0d:e8:1a:7f:38:bc:6a:84:
ca:18:ac:69:b0:d9:6d:11:b1:fc:a7:88:50:5e:c0:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:C9:DC:9F:62:BD:F8:1B:D7:CF:7C:C1:8E:AD:5E:C1:A0:0D:0C
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:62:84:a5:d3:15:50:4b:12:ed:59:41:7b:c8:3e:49:b9:0e:
16:e3:73:73:ef:9a:3d:7f:56:84:a4:ae:a9:b2:71:71:e1:bd:
84:50:01:5a:84:a5:98:f9:fa:46:97:6a:ab:c0:09:c6:4d:e1:
be:5b:69:05:cd:6d:c7:cf:c3:c0:ab:fd:fe:e7:74:62:a2:a9:
a3:b7:48:b1:48:08:f5:9b:65:9a:52:7f:17:7b:d8:15:9b:29:
06:fa:b9:de:23:49:02:9a:c7:e0:e2:db:ce:c7:c4:b3:89:f6:
66:cb:3f:4b:ed:50:a6:ad:49:9a:14:0a:92:4b:b5:ed:af:17:
15:0b:71:29:f8:20:06:a5:34:6b:55:48:89:41:99:43:0d:53:
fa:e7:0a:af:90:80:67:16:d9:41:ff:53:32:3b:d1:2c:4c:43:
57:66:04:c7:41:fb:cd:59:88:c1:71:42:2a:a8:6a:22:20:8d:
98:a9:ad:1f:cb:95:37:6a:62:49:18:07:fe:c6:59:ec:60:9a:
f7:bf:e8:dc:9d:a1:ce:da:ee:93:a9:e3:f8:88:62:47:5d:fd:
bf:2b:51:c4:a3:0c:7a:42:34:13:18:95:56:19:c3:61:a2:57:
69:db:27:22:cc:4d:18:ec:30:f5:7c:6e:1d:bb:62:5c:4b:5b:
15:63:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:00 2026 by rpki-client