Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json)
Hash identifier: 9RhV1ICmog89Na6+jU70EFR3fc2tOL0l6ohsF2FedzY=
Subject key identifier: CF:FE:F0:E3:D2:48:BB:7C:52:67:9C:D2:AE:90:F7:68:9E:62:F0:EF
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial: 019D273B31A86F706BA341C96EB28B34F916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: M1Lf11eksEvqz34PbHYO7Z4jXHI.roa (hash: 1wwr1qMj1Er+C+R6P5FqGwBBlZMubvTHn7IuCGLNv1Q=)
2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: FA/OvblJ0lmT0kAzPo1BhG4NFqp2MaA8yiUoMQeoLtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:31:a8:6f:70:6b:a3:41:c9:6e:b2:8b:34:f9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=cffef0e3d248bb7c52679cd2ae90f7689e62f0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:a7:b3:5a:4a:e6:f1:b7:ff:ce:68:ac:d7:
bc:d0:a6:b4:f6:d3:de:7f:08:bf:c6:6a:64:45:ec:
63:11:90:b2:c6:48:e4:bb:43:94:4f:00:0a:88:d3:
40:ad:52:f9:a4:33:55:d8:f8:eb:95:8c:ba:ed:e1:
9f:f3:d4:f7:e7:7a:2b:90:42:ae:fe:53:96:d7:d5:
a4:40:08:d0:9a:80:82:6b:57:55:a1:c6:4c:8a:11:
93:7a:8c:e3:78:6d:9d:57:f9:a1:5e:f3:40:04:a7:
92:fb:a7:42:35:0c:6b:87:f9:1c:cf:07:dd:b6:24:
6e:85:92:cc:d4:e6:c5:52:73:c4:0d:cb:51:17:48:
e6:ca:62:4e:3f:03:f3:a7:c2:37:01:07:db:ec:d9:
84:af:8e:6f:59:62:18:8f:2f:d7:eb:d2:34:ec:43:
1a:23:a4:84:03:43:e8:71:36:94:3b:52:e8:87:c7:
1b:56:e7:88:c9:8c:33:cf:3b:b1:b4:bf:4f:93:1d:
00:f8:91:28:40:15:32:ac:c0:1b:b8:72:75:ad:92:
fe:f9:aa:cf:84:fd:ff:75:d7:fa:eb:5c:a9:4c:6f:
dd:94:d5:36:b3:05:f3:84:86:c1:70:50:2e:b8:c2:
0d:e2:29:96:2d:84:91:54:b7:1c:35:90:a5:b1:08:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:F0:E3:D2:48:BB:7C:52:67:9C:D2:AE:90:F7:68:9E:62:F0:EF
X509v3 Authority Key Identifier:
keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:53:eb:6a:53:97:ee:4e:c9:a2:cd:5f:af:da:b1:65:9b:3f:
49:d1:c9:65:31:2a:6c:fa:2b:d9:87:53:56:32:5b:a0:78:d8:
5f:a0:5b:d4:75:fa:a8:94:87:aa:f7:c7:e1:26:d3:45:c8:d8:
75:b5:ab:9a:06:98:10:87:b8:33:6e:18:98:c6:cd:9f:a3:36:
30:3e:5c:f1:5b:6a:f4:c4:ef:d1:84:79:cb:5a:f6:8b:ca:5e:
0a:25:27:37:3d:39:b3:ef:16:8a:95:4d:8d:65:7e:d8:b3:20:
d2:62:77:70:15:a0:b3:76:b8:66:9d:72:0e:0a:9c:90:78:57:
e3:e0:93:45:5d:76:34:cb:d3:99:c6:70:e0:a5:59:db:f5:6b:
fb:98:c1:ab:63:d0:f1:f9:64:81:e8:ba:ed:45:e7:e2:76:6c:
a6:0f:27:fc:25:33:4f:a8:b8:03:dd:ab:b5:2a:37:75:48:5a:
ec:d6:b7:ca:71:24:4b:02:ba:7f:a0:0c:0f:67:be:d6:f7:0f:
68:58:b6:ba:64:46:06:7f:3f:bd:37:86:76:21:75:fa:1f:52:
70:9e:b4:4d:2f:62:0b:ae:84:63:26:48:73:d9:b3:8e:70:b1:
85:61:13:bc:ff:ee:d4:e8:4b:f0:37:a6:c1:17:0e:24:b6:29:
64:e6:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:58 2026 by rpki-client