Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: Jk/KZcqqAN9N/lOynGbD1d9WwROsIV+C6TBmFQhQ6OA=
Subject key identifier: D7:13:5D:B3:36:09:49:1B:7F:A7:D2:3C:BA:97:2A:D2:12:4E:31:A1
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 019D254C58D4BE25DE43DE3D60FE3BBF9D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 08E3
Signing time: Wed 25 Mar 2026 14:00:53 +0000
Manifest this update: Wed 25 Mar 2026 14:00:53 +0000
Manifest next update: Thu 26 Mar 2026 14:00:53 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: uEk54L3DA8JdT0/wTZdkWhu/qGttvYZ8+at00IfGlb8=)
2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:58:d4:be:25:de:43:de:3d:60:fe:3b:bf:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Mar 25 14:00:53 2026 GMT
Not After : Mar 26 14:00:53 2026 GMT
Subject: CN=d7135db33609491b7fa7d23cba972ad2124e31a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:a6:9a:b9:b9:d7:d1:85:92:01:77:95:c3:
34:ae:4b:1f:98:c2:de:a0:d7:c4:2e:94:22:4f:24:
9a:c1:50:da:f8:27:9c:74:34:cf:f9:46:ea:49:2d:
e0:dc:8c:2c:9c:0d:7e:30:06:82:03:8f:a6:36:40:
e3:42:20:47:2e:5e:07:5f:bc:3e:44:54:1e:03:75:
b6:25:01:a2:5b:5b:58:d6:74:28:56:d5:3b:78:b1:
d3:d0:66:7c:4c:32:63:8e:3d:49:c1:8a:7a:4c:72:
1c:cd:87:c1:51:3a:c5:f2:b8:f9:dc:48:2f:4e:75:
e2:48:77:b4:ad:98:dc:19:fb:9e:a6:17:20:22:c4:
24:fe:4a:95:78:d9:93:75:f6:00:92:e1:ba:e8:60:
5d:ac:93:f7:3c:24:2a:e3:3a:f2:ae:e8:45:f6:12:
ef:0d:96:7e:b9:a1:5f:09:ac:ff:f7:00:5e:3b:a5:
7a:7f:31:37:6c:dc:a5:39:6d:08:4c:99:6b:00:24:
12:e8:8e:18:21:99:03:dd:26:25:5b:5e:08:4f:5e:
57:78:ef:4a:3b:bc:3b:45:74:17:f4:6d:dc:57:02:
f4:36:25:9e:8a:ac:26:34:2a:b7:d9:02:de:cf:39:
73:a0:8b:06:39:c3:86:31:15:78:75:0c:42:a2:a6:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:13:5D:B3:36:09:49:1B:7F:A7:D2:3C:BA:97:2A:D2:12:4E:31:A1
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b4:2f:a8:f6:ba:1a:93:a1:0a:7d:77:b4:0f:70:69:26:98:
9c:3e:0e:d9:1b:52:4d:f8:5f:78:9f:ee:72:13:e6:9c:6b:97:
ab:eb:e0:89:cb:bc:28:ec:f4:70:aa:2f:76:dc:4a:28:18:fa:
13:59:7f:58:33:4f:f6:b9:09:cf:c8:57:d5:58:3b:49:40:33:
7f:b5:7f:48:d7:c3:8a:f1:43:11:76:6c:50:f1:76:4f:13:a5:
6b:04:7a:4a:65:50:29:3a:a2:df:85:ee:21:74:6f:ae:9f:e0:
23:38:ce:e9:49:6b:44:b0:7b:a0:1a:bd:40:21:70:4b:69:88:
8d:53:b2:82:c8:25:56:00:73:e0:46:5b:2e:c3:ba:0b:76:8b:
68:25:c8:ca:34:38:44:27:40:ab:ad:2e:47:1b:53:be:82:49:
aa:ed:f8:39:7b:96:78:2c:0e:2c:a0:3a:8f:7d:77:3f:84:af:
61:28:5a:65:eb:e4:43:69:3b:b5:55:a5:c1:75:f2:63:f6:4f:
4c:c3:df:69:d1:fd:b3:a6:3e:be:69:c0:de:cb:41:a0:dd:5d:
c0:ea:21:07:8b:b5:5a:87:6b:19:d7:47:28:b9:7e:00:6c:79:
fe:3d:90:1c:59:d5:13:50:bf:ed:07:71:85:24:51:a2:f6:ee:
68:4e:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:29 2026 by rpki-client