Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier: jDYRhRKUigG0sitwz9aw9tkVe02iCzDb19QrAqTMd80=
Subject key identifier: C5:27:35:61:E0:9B:B2:B1:B1:E1:1D:A2:AF:75:9E:23:70:D7:E8:5C
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 019D2A3C0A15C35481FC5C4FF7B17989116E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number: 0FDB
Signing time: Thu 26 Mar 2026 13:01:10 +0000
Manifest this update: Thu 26 Mar 2026 13:01:10 +0000
Manifest next update: Fri 27 Mar 2026 13:01:10 +0000
Files and hashes: 1: 5-dugcBchtXNBoxU8gQHmgyF3EY.roa (hash: d7JZa0tOh8DLsFD86kEU0q/71M3EzBvkFJCRMhMKG4c=)
2: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: abvKDnSg1Ua/nXR2x/5D3kGkFmn/BZFTLRnKfDmdMeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:0a:15:c3:54:81:fc:5c:4f:f7:b1:79:89:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Mar 26 13:01:10 2026 GMT
Not After : Mar 27 13:01:10 2026 GMT
Subject: CN=c5273561e09bb2b1b1e11da2af759e2370d7e85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:5f:aa:9c:38:5d:0d:fe:16:7a:8e:f9:0b:
fc:25:6a:6f:c5:01:6c:1c:34:ed:67:d1:65:d6:32:
91:17:52:75:3b:74:0c:c9:79:7c:b8:f7:bd:51:15:
fa:00:48:e9:7d:57:84:ca:fc:19:87:22:d9:c3:5f:
6b:fb:20:3f:f2:43:20:64:2a:6d:71:47:c6:11:fe:
1a:4f:57:18:0a:fe:69:7d:9d:48:39:a8:ec:c9:32:
c3:6d:2a:e8:06:79:ca:4a:95:36:86:ab:93:42:8f:
64:4c:a7:75:15:9c:ec:42:a3:eb:06:f1:76:fb:31:
16:41:ed:bf:fe:75:f4:0d:cc:3d:9a:07:52:13:43:
de:14:ae:55:a8:6c:27:b9:55:c9:f4:12:ac:dd:59:
12:40:99:50:d2:55:7b:6d:99:25:34:20:56:dc:dd:
6c:20:f3:af:e4:99:62:d2:ea:f9:7c:b8:f2:49:5f:
38:fa:b3:c1:18:70:0b:16:27:9a:df:7d:4e:2e:76:
dd:33:6c:48:8e:a5:c7:64:6c:46:62:a8:f9:27:37:
13:07:01:c7:f6:d4:20:09:03:c5:60:ec:79:a8:7c:
a8:bf:3d:45:a0:46:7b:ab:0a:94:c4:a9:9f:89:38:
ac:c6:59:28:50:93:93:52:10:ba:74:00:c2:67:b2:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:35:61:E0:9B:B2:B1:B1:E1:1D:A2:AF:75:9E:23:70:D7:E8:5C
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:02:68:78:ea:10:c8:91:5b:3a:06:a8:cb:5c:24:52:be:78:
16:89:45:22:51:42:08:b5:88:1a:90:ef:12:bf:dd:e3:17:ab:
07:fb:d3:52:32:a6:b5:cf:83:52:32:db:65:04:8d:61:1d:3b:
8c:38:59:82:35:76:7e:ef:ea:51:33:92:d2:85:63:52:2c:68:
17:e2:11:de:bf:a3:5c:9d:26:83:07:91:e1:29:01:5e:7d:4d:
0f:1d:39:02:21:24:92:46:14:f3:17:65:73:c8:a1:fc:89:9f:
49:08:a2:d7:e8:3f:9f:6f:89:ca:14:76:5e:d1:a8:a4:79:ae:
38:01:b3:52:db:10:26:22:42:e0:0e:6e:f9:6b:3c:02:cd:11:
d8:5a:c6:ba:5f:9e:91:6d:02:dd:5c:81:98:4e:96:b5:18:a1:
3a:73:b4:ea:4e:b8:49:21:1c:3d:95:8a:2d:0e:e4:cf:9c:d3:
af:55:ee:d9:e1:59:ac:2b:03:8f:d0:ab:27:8f:b8:46:70:5b:
57:cb:f1:3d:c3:12:e4:a4:40:27:c4:6a:b2:c8:57:9b:b3:77:
b6:ba:b0:c6:2b:0a:7c:32:df:a7:a0:50:6b:b2:d8:2b:38:a1:
8b:ec:ef:08:54:c1:aa:6f:02:f4:fa:b3:82:7e:a8:38:d4:c9:
fe:73:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:44:03 2026 by rpki-client