Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: GWeLmkzzJ8XskGx/WB6j/0jykxmE/UnzcugZlmOZYFI=
Subject key identifier: 40:28:43:BE:85:9E:0D:82:4F:5A:71:98:E2:FF:87:B4:24:B9:1F:11
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019D26CCF37D3E6CE986A5678A445C22D967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 21:00:58 +0000
Manifest this update: Wed 25 Mar 2026 21:00:58 +0000
Manifest next update: Thu 26 Mar 2026 21:00:58 +0000
Files and hashes: 1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: 5a9o2qQgFj1rhU5uTUgkO8LYg7KxGQcmAHd7bTVCmbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f3:7d:3e:6c:e9:86:a5:67:8a:44:5c:22:d9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Mar 25 21:00:58 2026 GMT
Not After : Mar 26 21:00:58 2026 GMT
Subject: CN=402843be859e0d824f5a7198e2ff87b424b91f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:7a:15:8e:fd:dd:d6:66:a8:68:1e:7f:de:
4c:8e:45:1f:39:0f:9e:74:02:21:15:1b:aa:b7:f2:
a0:82:76:d3:d4:db:a6:b7:b9:3a:0c:b0:8e:3b:62:
43:64:72:06:83:57:33:12:b1:f9:97:55:79:b8:83:
cf:6b:f8:43:ea:06:b9:c2:04:7b:b4:a9:1d:23:aa:
d4:10:f5:ed:f0:91:8b:59:59:f0:1c:34:5c:1a:d0:
61:0f:98:49:80:a5:bb:06:38:08:33:b4:00:4d:d3:
4d:32:6b:4c:3d:ad:19:cc:eb:a5:37:94:56:bb:6b:
5b:19:26:40:2b:8c:d6:60:64:4c:44:16:49:8f:50:
a3:c6:38:1a:25:a2:a7:0e:87:62:be:92:ec:62:b6:
53:29:6c:d7:d7:c9:48:bb:6d:97:a4:aa:ca:b1:2e:
b5:c2:7c:35:6e:44:ba:21:f5:16:b3:89:6b:9b:b0:
2c:2b:1f:31:73:48:97:dd:7f:d6:b7:b1:76:4a:ce:
80:d7:d5:2e:85:37:42:5e:ff:eb:7c:36:49:8a:05:
7e:19:f3:e8:d2:60:68:ed:da:ef:62:f0:fe:6d:74:
d8:75:56:af:45:15:a3:8a:4e:68:c3:62:d2:1b:0f:
29:6e:3b:84:68:24:f0:46:97:d9:8d:eb:84:7b:c2:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:43:BE:85:9E:0D:82:4F:5A:71:98:E2:FF:87:B4:24:B9:1F:11
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5e:dd:09:87:9d:62:56:67:a2:ca:59:1a:fd:6b:ca:2d:a6:
b5:b1:f1:94:bd:8f:f5:f8:3b:7e:80:06:57:90:dc:49:a3:a9:
1d:48:7a:ec:d1:c7:11:ba:fa:46:21:52:b9:ff:4b:6a:1d:21:
0f:75:63:f9:62:cd:80:d7:cd:f2:1c:79:01:1f:15:a2:72:04:
db:7c:c5:05:10:64:2e:d9:3f:49:8d:ba:4e:88:a1:aa:20:dd:
72:b9:0e:09:da:7e:52:81:96:63:f0:09:f7:07:c8:72:6b:f5:
86:a2:ce:6f:c5:60:a8:8b:13:1a:e2:bd:cc:77:c1:40:59:a8:
1c:87:56:1a:96:82:05:62:83:c7:d3:13:0f:b7:2a:8f:58:5b:
ce:07:e7:3b:c3:1b:bc:1b:95:c7:dd:3e:b3:d3:d8:de:36:e3:
21:6b:73:43:ad:a5:16:6f:92:68:52:f8:05:9e:ca:56:23:75:
f0:8c:64:4a:59:ee:46:3f:26:5c:eb:01:d2:dc:aa:ec:45:f7:
d2:1e:f8:1d:6f:cc:4a:71:9c:3f:14:39:0d:11:b4:92:32:08:
60:9a:2a:5a:4d:ea:47:d5:91:75:59:63:ae:93:3c:e2:07:95:
e6:af:e3:f9:c8:40:a0:05:79:51:f8:7b:99:53:84:e7:96:66:
25:6f:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:02 2026 by rpki-client