Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
File: JovHlTH32BXSsrUin5rJ9vi_68o.mft (raw, json)
Hash identifier: nHUpYxg4oo4osviMD9/9SBVIqGALgSnzzBUQL0mPxF0=
Subject key identifier: D8:EF:47:B2:98:F7:44:23:07:FE:D0:98:71:25:39:94:76:0C:99:68
Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
Certificate issuer: /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Certificate serial: 019D273AFF0E8BBF976F8BE4B5F7B0B34058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
Manifest number: 033C
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: JovHlTH32BXSsrUin5rJ9vi_68o.crl (hash: KZJSl+pxlEY3GZHgXlxQKPiIZLmIhc3ONFBjVQ57lnc=)
2: K4vC0ZQEVcxblR42190HvLvXt18.roa (hash: gD9QMVbdiYcxkgUVZhwUFIXar252TxXKgPmwhr3G7D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ff:0e:8b:bf:97:6f:8b:e4:b5:f7:b0:b3:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=d8ef47b298f7442307fed09871253994760c9968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:c6:16:83:cc:75:e8:3a:2c:99:3b:7d:a2:
d6:16:ec:d0:f0:6c:9a:89:e8:67:0b:a2:3a:9f:8e:
26:4b:5a:02:ee:5e:e6:ee:52:99:96:6b:b4:e9:87:
14:47:84:b8:f0:1e:cd:cc:98:6d:43:eb:e7:8b:56:
64:a8:81:af:7b:43:31:ed:1c:e2:8a:73:f7:46:7c:
a2:1b:b5:1d:d7:44:db:20:32:57:35:3c:13:f4:3f:
87:b1:d2:80:17:1f:2c:2a:cd:03:ed:8e:bb:b0:14:
c2:7c:fb:19:08:03:09:d9:f3:94:16:00:fb:6d:af:
94:9b:f8:f3:71:d0:a3:ba:7d:f8:ac:77:1e:e6:47:
4d:14:7d:97:3b:da:91:bc:b9:b0:e2:43:62:75:26:
2e:ba:95:4c:2d:cb:16:33:d8:e2:4d:4b:6f:ea:4e:
a6:82:06:04:5b:ab:83:b2:dc:37:4c:08:f4:aa:fe:
9c:46:8b:23:03:fa:06:37:ed:68:71:71:51:81:2a:
c2:48:40:d1:48:7c:97:15:05:db:40:b8:82:75:20:
f4:7d:26:2c:bd:38:6e:91:ac:41:75:07:05:1c:77:
61:98:41:e2:ce:57:89:a9:fb:df:4f:95:e9:f3:98:
6d:88:a6:d4:86:6c:fa:8d:44:3a:48:63:06:e9:7e:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:47:B2:98:F7:44:23:07:FE:D0:98:71:25:39:94:76:0C:99:68
X509v3 Authority Key Identifier:
keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:30:7e:bf:e8:d8:d5:1a:fb:44:42:2a:9a:50:9a:5c:da:
71:53:ad:fc:f7:2a:69:93:28:84:3f:d4:ba:ee:ef:6a:e1:1f:
d5:c1:6b:6f:ac:a1:d4:7b:fe:f2:0e:e3:62:90:2d:04:39:b1:
7d:9f:f4:cc:61:97:ba:66:3c:09:5d:c7:b2:c1:72:8e:f4:bc:
a6:74:54:38:86:30:05:45:0d:32:5c:51:39:23:a8:ce:bd:4c:
2c:21:db:a8:ad:c5:12:04:50:6e:35:bb:60:de:70:c2:f8:27:
31:43:7f:17:00:ec:b9:77:a5:7c:23:6d:62:ab:ff:8c:1f:10:
17:f0:0c:53:67:4f:00:b9:3b:79:8e:a4:28:61:e5:90:7b:8f:
f7:a8:4e:3d:59:28:c2:68:cd:e4:97:8e:4c:79:ca:66:1e:c9:
5a:3c:09:59:bc:21:5d:00:52:d2:60:80:04:9d:90:eb:ab:b3:
66:f8:33:2c:eb:af:db:6b:09:45:ee:5e:27:26:fa:4b:37:4c:
71:fb:db:9a:4f:91:05:f2:96:65:fa:cd:7b:1c:5c:2f:5b:fa:
cb:13:9a:b2:32:fb:73:5e:d3:40:ef:7c:4f:e3:2f:65:d0:9d:
d6:71:dd:b2:b1:d2:dc:c1:1d:8d:4f:0b:df:f0:9d:dc:fd:1e:
02:23:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:50 2026 by rpki-client