Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: 0nGGE/Z/exwI9pXVR7IG9fxiZwygXegdQhtvwZKSEo8=
Subject key identifier: 92:91:B2:B4:19:59:C8:78:01:67:98:B6:AC:1D:0D:15:C7:EC:A6:37
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 019D28170E18F762D3120D6B5BC983E84FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0F95
Signing time: Thu 26 Mar 2026 03:01:32 +0000
Manifest this update: Thu 26 Mar 2026 03:01:32 +0000
Manifest next update: Fri 27 Mar 2026 03:01:32 +0000
Files and hashes: 1: WixuCuv6oK2h_hFTQCqiu7aJKaY.roa (hash: q9PZjoZVbTamxQQPVsYxw6N358GhwOGzbBLOqLT/7OQ=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: CYZ9a3ccnRb8fsPYQo+DCUjmG516Eth3HBausEfi3Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:0e:18:f7:62:d3:12:0d:6b:5b:c9:83:e8:4f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Mar 26 03:01:32 2026 GMT
Not After : Mar 27 03:01:32 2026 GMT
Subject: CN=9291b2b41959c878016798b6ac1d0d15c7eca637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:ec:62:1a:ac:06:70:46:c5:2d:67:85:62:
fc:c6:32:f2:62:c5:9f:2f:e2:d5:71:8a:99:b6:e8:
87:a5:87:c2:58:18:14:8b:b8:f2:54:74:f9:26:41:
78:91:6f:cf:3e:c1:29:43:ff:25:29:3b:0b:ea:c9:
95:7b:e7:de:05:42:8f:74:f9:93:16:b5:ad:5f:d2:
ed:1f:90:79:4e:d2:a2:5d:d0:2f:b7:1e:82:3d:87:
43:f3:23:6a:c9:9e:d2:0a:54:12:45:17:3f:62:67:
c5:a7:07:23:71:ca:aa:0d:76:f5:8b:6a:41:f4:30:
2f:0b:03:4a:98:02:6c:fd:d6:41:97:c4:4f:ca:be:
26:9a:d1:1f:b4:96:9b:98:c4:2c:e7:9e:f9:69:84:
b1:02:c1:d6:65:b1:99:4f:52:93:e5:7f:86:86:49:
82:49:ad:d7:89:c2:e5:e2:b0:ea:ab:08:49:68:24:
07:1f:ad:6e:20:8a:3d:8a:2a:49:74:93:97:5d:3a:
02:8e:fc:ea:ba:a8:b3:32:7b:0f:da:69:bf:81:d9:
d7:80:0c:55:a4:62:63:e2:5d:80:2c:a1:69:52:4d:
09:fb:89:ef:49:87:2d:65:88:62:d7:3b:af:44:7d:
11:70:c2:d8:36:4d:95:81:8a:99:60:70:0e:3f:3c:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:B2:B4:19:59:C8:78:01:67:98:B6:AC:1D:0D:15:C7:EC:A6:37
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6d:62:db:f0:ae:c5:dc:78:51:3c:fa:a2:b9:ea:15:16:3a:
fd:35:38:1a:8e:c0:0d:a6:98:be:24:ff:1a:d8:66:68:84:f4:
dd:91:ce:4b:b8:75:85:b3:aa:f8:ba:82:90:d6:54:36:ac:4e:
7c:4d:a2:26:56:95:bc:f0:01:62:91:7c:f4:43:12:68:ca:40:
10:0a:4b:e7:12:0f:ed:cc:0e:3d:d1:d3:f6:1c:07:bb:28:38:
86:ec:b7:87:5d:4e:5a:6a:bb:ee:4a:69:e6:17:57:41:ef:5e:
94:8e:a1:e9:0f:ad:69:80:e8:b6:d1:85:58:1a:00:dc:1e:90:
b9:6d:bb:10:da:e8:39:f3:9d:9f:b1:5b:16:a4:08:3b:64:1c:
51:a3:31:98:24:90:0e:19:2f:3e:24:66:a9:97:f4:1b:f0:db:
b5:18:5e:32:1d:d7:9e:fb:02:72:17:22:33:21:f4:8b:61:78:
f4:be:6f:ac:46:28:88:80:9f:88:11:5f:11:4c:ba:cb:d3:86:
dd:9a:3e:cb:d3:5f:2b:c5:53:0a:c1:3a:e4:cf:1e:3f:c3:17:
a5:49:d5:e8:34:1b:f7:42:c2:8f:b6:ad:9f:d2:7c:66:7a:5f:
b4:85:93:b4:75:d8:4e:24:29:f4:13:a9:e1:99:48:07:48:83:
ea:a3:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:04 2026 by rpki-client