Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: i/7OzeYA0T6gz7iFwOK7wwFJo68MqReofWIS9kniNoI=
Subject key identifier: 49:82:04:1C:25:22:77:7F:86:17:87:63:46:75:98:DC:8E:C2:19:0D
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 019D299741D2E3B217F04270ABC1B3C2B5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 10:01:11 +0000
Manifest this update: Thu 26 Mar 2026 10:01:11 +0000
Manifest next update: Fri 27 Mar 2026 10:01:11 +0000
Files and hashes: 1: G1NkqVj8Yr6VTyyoWcdSUhUvvCw.roa (hash: CZnYGn2RTJItTzBITrNscqi0v2S9GDn0ujpdRLMbDD4=)
2: _Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa (hash: xyogZ8QKw5nxXSVIno+0JDHOn4OpmuVmDGIYgg6rJzo=)
3: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: gzJ3poysbYYD1VOfgKGFJ7+5hwYjO8pFQ0LImcbrrwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:41:d2:e3:b2:17:f0:42:70:ab:c1:b3:c2:b5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Mar 26 10:01:11 2026 GMT
Not After : Mar 27 10:01:11 2026 GMT
Subject: CN=4982041c2522777f86178763467598dc8ec2190d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:99:6c:19:67:57:84:8d:6c:81:76:08:31:
d4:88:b3:e4:51:5a:35:4b:e9:98:38:2d:28:ee:27:
a7:f8:e3:25:7d:6e:ab:7c:b6:62:07:f4:b5:df:11:
1e:1a:f9:37:65:0b:db:e5:5f:53:4d:7c:c7:5d:33:
c0:a1:52:04:b9:85:c4:85:91:b6:65:71:74:b2:be:
15:10:3c:b1:c1:b2:96:ef:62:29:59:eb:31:b4:89:
a4:fa:c5:44:5f:52:b4:67:fc:9a:a3:30:cc:b8:07:
94:64:ff:7e:02:5d:64:cb:49:e3:a5:bd:db:c8:8e:
cf:e7:fb:83:a3:67:de:d4:34:15:ec:be:85:fb:2a:
d1:f6:06:c3:2a:d9:eb:7a:6e:38:bc:17:86:d9:6e:
50:fe:a1:4b:d5:1e:5c:4e:5f:42:a6:09:bc:6b:90:
38:47:b3:f3:a0:e2:22:a8:d5:41:99:ae:bd:2c:db:
40:98:36:a5:b5:68:08:18:ea:ae:b0:61:d1:72:fd:
c6:2e:a0:06:11:3d:fd:ab:50:a9:ee:9d:df:29:94:
62:78:57:b1:7f:ab:12:b0:bd:4c:b4:77:47:6a:e1:
f3:9a:75:23:9d:65:bb:cc:ea:d8:58:ea:0d:a7:36:
83:e7:78:e9:bb:72:ff:93:7d:59:20:7b:12:33:d9:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:04:1C:25:22:77:7F:86:17:87:63:46:75:98:DC:8E:C2:19:0D
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:66:3a:68:ea:e5:db:ec:cf:65:a3:1c:d4:6c:a1:a1:9f:
04:a9:20:b9:70:1a:b7:59:37:9d:2c:d4:40:c3:54:53:9d:58:
e7:c3:fd:64:f3:be:0e:18:7a:0c:ea:d1:2c:09:02:05:f9:04:
96:5d:55:85:99:5b:fe:15:de:54:ba:08:e5:1a:7c:e9:e3:49:
59:26:a2:85:ec:2e:df:31:53:80:9e:9d:2d:dc:6a:d5:b6:6f:
98:2b:4d:3c:8b:53:f1:d1:06:32:45:e3:87:16:a6:94:f8:6d:
72:91:a0:7f:ca:3b:02:a5:03:32:f3:8a:bd:0b:77:5f:10:2f:
df:3c:02:f5:22:cd:90:7c:64:12:c2:05:33:0e:af:58:48:d7:
e1:a4:ca:d5:55:cd:0c:34:1f:90:ef:33:bd:89:c8:3b:57:ef:
87:81:18:67:50:70:5d:59:1f:5a:5f:ea:37:d8:54:63:32:93:
c3:48:14:47:e1:97:c2:b4:f0:32:89:03:8c:81:a6:41:47:1d:
92:b1:ed:30:fa:58:d6:14:ac:5f:68:53:bc:59:6d:75:c9:cf:
1d:af:f6:b7:db:57:8a:2f:3a:ab:66:63:0a:40:82:a8:89:5e:
c6:de:8d:47:9d:dc:c6:1a:d8:4a:09:92:20:5e:71:af:77:9a:
15:44:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:57 2026 by rpki-client