Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: rynZjG5Rcw9HUaPpvMGlsffNyZv0THH6w9v444VWSdc=
Subject key identifier: 27:FF:72:62:5A:9E:EC:F6:50:46:23:A6:D4:10:C9:56:CC:03:57:4A
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 019D28BBD5CBB94661674057CD244F06E85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 06:01:31 +0000
Manifest this update: Thu 26 Mar 2026 06:01:31 +0000
Manifest next update: Fri 27 Mar 2026 06:01:31 +0000
Files and hashes: 1: OM4KLQmzyd_Wm52APVHhgRe4ToE.roa (hash: yWOF8Zx5ObpIqx5RDQmGc/nckpLK3IVHrsfnnr9/bl4=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: uM4ivjCXLZW/+0X4UMCqrSHj0hCyZpPTIm0imC+cHww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d5:cb:b9:46:61:67:40:57:cd:24:4f:06:e8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Mar 26 06:01:31 2026 GMT
Not After : Mar 27 06:01:31 2026 GMT
Subject: CN=27ff72625a9eecf6504623a6d410c956cc03574a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:8b:67:fb:dd:24:97:26:e0:c6:3d:f2:c0:
25:06:77:ad:98:ef:b1:05:21:e8:ef:86:6e:f0:a3:
bc:7a:ac:0f:73:c4:77:f2:22:d0:7b:42:ff:d4:5d:
59:fa:3b:fe:7c:4b:20:a2:d8:61:4d:90:f3:05:7a:
6e:f1:17:da:9d:a9:71:30:a5:e9:ba:9e:36:88:0e:
46:e4:86:a7:d1:db:cc:07:8c:20:21:54:75:14:71:
03:fb:0f:c8:e1:a5:76:d3:60:82:36:93:8d:32:b6:
eb:d9:a3:96:3e:05:7f:00:52:d3:a7:71:16:f4:06:
f7:b7:8d:ff:1e:dc:61:01:96:c2:5c:1c:d4:4e:70:
d1:92:75:fb:b3:86:23:6e:0a:50:0a:10:79:a6:2a:
55:1f:3d:d7:af:1f:ec:46:6b:e3:98:66:79:fe:a2:
c2:5d:b9:4b:b0:66:64:10:bc:04:55:db:73:a5:d0:
78:d0:a3:ea:7b:9a:cf:78:1d:81:93:55:52:ff:5b:
17:be:a1:e9:88:29:1f:f6:d2:36:c0:9a:51:92:4a:
9b:ad:29:8b:7a:e0:46:cc:2f:f0:1d:0f:00:49:d1:
18:93:a2:68:30:20:65:8e:9c:5d:3c:f8:03:10:bf:
45:52:48:7e:1d:f8:67:ff:43:be:78:81:6a:b2:ab:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:72:62:5A:9E:EC:F6:50:46:23:A6:D4:10:C9:56:CC:03:57:4A
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:23:bb:62:9d:d7:7b:a5:7a:62:7d:25:73:b6:e1:3a:87:14:
9c:44:8c:ac:b7:54:09:10:04:24:a6:2f:0f:d4:3e:98:d8:f7:
d1:00:7b:f7:71:d4:f1:bc:df:52:61:78:77:99:8e:c9:2d:6a:
e7:c4:51:c2:c5:9d:b9:f3:3e:06:8d:7e:93:b2:4d:c2:e0:26:
4b:41:b5:ed:49:4f:fa:5c:10:d2:2b:e0:02:e1:d5:5c:dd:ef:
c0:a7:7a:ef:a5:7a:3b:a8:cc:f2:a4:64:bb:b4:ca:20:06:46:
e6:3c:a9:6f:f8:e5:d0:f9:1a:01:06:8f:a5:f6:e2:c5:4c:1c:
2a:55:61:d4:94:c7:0a:83:99:00:c5:7d:b4:71:52:ef:bd:0c:
8f:ab:d0:79:bb:41:78:ce:33:95:37:ea:52:af:fb:07:ea:06:
27:3b:07:0d:3d:4e:1f:d5:88:40:b4:08:e0:47:84:94:ef:c5:
25:38:db:59:7f:d6:b3:a3:aa:c2:dd:9c:10:3e:33:d3:d8:84:
a0:1a:01:da:c7:d8:4d:59:6f:48:72:07:70:c4:05:a5:c7:83:
ff:09:9d:40:b1:7a:9f:f0:7e:3c:9e:5c:3e:69:03:be:87:4c:
b2:9d:74:b3:73:ce:84:7e:70:81:97:d7:29:22:83:93:09:17:
5c:ad:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:16 2026 by rpki-client