Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: aVUXwwcxylTZMPYV3QpSVUPk8CoyzeHtCigTgdNogCI=
Subject key identifier: 08:73:DA:F1:29:1F:31:29:3D:D8:AE:14:28:B4:E1:1B:75:E8:24:67
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019D2C613C3D36CFCB06F6D5A9E101420F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 178A
Signing time: Thu 26 Mar 2026 23:01:02 +0000
Manifest this update: Thu 26 Mar 2026 23:01:02 +0000
Manifest next update: Fri 27 Mar 2026 23:01:02 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: CXreCb3IMQ7kYaE511+epGaKpo01x7TdRovllG8PBj0=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:3c:3d:36:cf:cb:06:f6:d5:a9:e1:01:42:0f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Mar 26 23:01:02 2026 GMT
Not After : Mar 27 23:01:02 2026 GMT
Subject: CN=0873daf1291f31293dd8ae1428b4e11b75e82467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:41:94:67:ff:76:40:65:44:30:c8:a8:fb:
82:e0:f5:ba:e4:05:55:43:79:70:93:5f:45:51:28:
ae:49:f3:9f:de:6e:b6:df:a2:0c:9f:14:5f:73:77:
4d:86:9d:4d:60:ec:de:7d:34:65:fa:be:9e:25:68:
b6:e4:3c:3e:9a:9f:2e:09:df:5d:c6:29:cf:13:70:
1a:5f:56:75:09:03:3b:2d:41:3d:1b:f7:b5:6c:43:
e4:12:9f:b3:69:e3:e9:4d:72:21:52:9f:5c:03:41:
e5:9a:5b:51:ed:0e:6c:8d:55:82:95:a6:6e:de:95:
41:05:60:67:d7:a3:11:4f:47:9b:a5:c7:c6:32:6b:
cf:63:eb:56:d2:98:d8:ef:97:b6:bb:46:1c:70:ac:
f0:b9:dd:fb:d5:95:6e:31:b2:56:e3:1d:ae:cb:f5:
bf:92:af:3b:5d:c6:1e:ee:65:31:20:f0:a6:63:99:
55:8c:7c:18:2e:f5:69:37:de:c1:d4:1d:43:22:16:
7b:cb:a6:78:03:7f:dd:05:0d:db:28:11:c4:04:92:
ff:43:cf:e2:ca:69:31:02:6d:82:f9:ed:f0:a5:bd:
f8:c6:a6:97:a0:da:44:68:78:ed:36:39:42:c7:0d:
7a:5f:18:73:1d:c5:14:8d:40:be:5e:69:71:9f:6c:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:DA:F1:29:1F:31:29:3D:D8:AE:14:28:B4:E1:1B:75:E8:24:67
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:09:b9:24:1e:bc:24:cd:4b:6d:dc:46:09:e6:28:1e:69:a9:
74:ea:07:33:8d:b6:a5:62:23:83:50:09:e7:0f:30:b9:47:81:
63:c7:d8:69:61:9c:f9:c2:e2:6f:b7:0f:82:b0:0c:7b:e6:b5:
eb:ef:62:2b:a0:86:01:c3:1e:27:1e:38:9e:c4:3d:86:ce:37:
e6:9f:f8:b5:84:18:fb:63:84:f8:0a:94:62:ae:4c:fa:50:38:
ef:c6:ee:a2:f0:85:d2:a8:95:36:5d:0e:cd:27:bd:3a:2c:f9:
49:a5:3a:c2:cd:30:c8:11:b0:fe:3e:77:52:72:cb:b9:ae:f8:
a6:b0:46:ca:91:9b:6e:ca:0c:fe:c3:72:ca:ab:e5:72:92:57:
f8:39:65:00:ac:ca:60:53:ef:c6:34:ff:a1:0b:f1:70:9e:03:
36:b2:bb:e1:52:5a:46:ed:9a:37:ed:f9:07:4a:c0:a7:f8:17:
c6:fa:ca:78:74:25:ca:c3:1b:5a:4c:f5:3b:1d:13:2a:c0:39:
25:28:a9:42:ab:68:5b:89:19:e6:6d:0a:7f:ad:21:6b:3e:c0:
a3:a9:a5:6c:ac:d8:6d:f7:97:92:69:f7:2b:f7:ec:76:5e:2c:
84:22:99:7b:0b:2b:98:dc:9f:6a:df:60:b6:79:c5:be:8f:2c:
9d:68:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:23:03 2026 by rpki-client