Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: ajRZ/UdvUkiYSA9268RDZQYFOPJxKHJwGk4ncdRtlAQ=
Subject key identifier: EF:DE:04:B4:B3:D1:F6:9F:F5:23:57:F3:9B:C9:BF:A9:90:BB:13:5D
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019D25831702A1E5DDDB68BD61C47F61C058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:00:41 +0000
Manifest this update: Wed 25 Mar 2026 15:00:41 +0000
Manifest next update: Thu 26 Mar 2026 15:00:41 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: YOqhQGSrW7srPdRZXQIfF4UbmOgQoswmJxNhRKbXEzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:17:02:a1:e5:dd:db:68:bd:61:c4:7f:61:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Mar 25 15:00:41 2026 GMT
Not After : Mar 26 15:00:41 2026 GMT
Subject: CN=efde04b4b3d1f69ff52357f39bc9bfa990bb135d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:75:2d:45:18:b4:b2:40:7b:70:3e:64:22:
61:2f:51:27:45:8d:14:7e:24:f3:e4:e3:b3:3b:ab:
3a:39:8f:fc:35:86:aa:d1:5a:86:7e:06:86:1c:cb:
db:3c:c2:fd:91:be:5a:8d:2e:68:c1:6d:5d:07:bd:
d7:ab:90:de:c4:fa:c7:99:90:76:bc:ad:0f:21:d0:
50:c7:87:50:3c:b5:3b:3b:f8:2f:1f:d8:be:14:62:
5f:05:31:36:b2:1f:ea:e3:1c:03:90:5e:c0:89:44:
05:d2:75:7f:f5:11:2c:9e:6a:96:6e:95:4d:58:c9:
8e:a1:55:b2:5e:47:b5:53:bb:e2:1a:97:48:7b:40:
3b:cb:73:40:4b:f7:a2:4b:de:9e:7e:bd:57:d5:45:
a5:34:7b:3b:6e:bc:75:6a:7f:0e:81:5b:90:9e:e0:
f9:64:70:21:38:47:98:e3:9c:92:4d:23:3c:9f:ab:
7e:58:06:b6:ec:a2:91:0d:d6:57:08:b5:dc:a3:89:
99:d9:df:87:cb:d8:f5:ed:a2:6a:94:40:a7:12:f8:
0c:4b:8e:0d:75:97:68:3a:92:89:e8:7c:c4:90:bd:
5a:86:e1:35:27:0b:4c:7d:91:4c:96:e9:a0:21:df:
07:ea:64:51:5b:13:17:de:40:d7:22:15:84:b0:2d:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DE:04:B4:B3:D1:F6:9F:F5:23:57:F3:9B:C9:BF:A9:90:BB:13:5D
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:cf:3a:01:7a:db:3c:6a:b7:ce:eb:3c:32:2b:42:ff:31:56:
f3:b9:3b:8c:9d:3d:cf:48:54:2e:5e:3c:90:2a:22:65:73:b6:
14:32:47:3d:c7:ee:63:83:42:c1:1f:8d:4d:26:61:e9:08:ec:
4f:fa:77:48:6b:24:c4:9c:1a:d5:4d:6e:21:9c:30:f2:8b:b9:
c5:e3:12:19:8b:4f:90:1d:9c:a6:a0:03:d2:97:57:84:9a:26:
2a:c7:af:25:8d:25:58:88:9b:5d:e7:39:37:60:68:b5:e4:07:
3a:aa:31:7d:88:a7:5f:07:45:86:e7:22:37:c0:34:b7:13:a3:
78:24:e5:e1:a2:ec:59:a1:17:b5:24:fd:3a:95:b3:37:57:fb:
7b:0f:25:de:65:9d:f7:a8:a8:94:f2:d9:c2:05:d9:61:f5:1f:
2e:dc:ef:00:72:79:4d:32:90:3a:b0:92:98:77:28:c2:14:b6:
21:8e:fb:28:5b:f3:f2:91:a1:61:e3:54:0d:49:12:36:32:7c:
89:35:c3:bf:fd:e0:97:fa:95:07:0f:db:9d:9f:93:5f:88:87:
5d:a9:ad:41:16:93:19:16:12:d0:92:c6:3c:60:57:94:76:c2:
35:3e:a2:17:9b:ec:7c:14:2a:d4:00:fe:66:cd:bb:62:34:26:
14:ad:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:52 2026 by rpki-client