Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: qP1td+9p/IXgFv7bRbstLO7X0JmfeYFAMu+c4Pmh9ZE=
Subject key identifier: 1E:9C:46:25:E4:55:DD:88:FF:54:36:15:B5:93:65:05:8A:05:F6:C8
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019D284D711D58ED4F7DD29A63D2D5B2344A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 15D3
Signing time: Thu 26 Mar 2026 04:00:56 +0000
Manifest this update: Thu 26 Mar 2026 04:00:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: pS60b3PkJN8YXM0g5SHlDrIkz349+jr+8JaoAMww7eM=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:71:1d:58:ed:4f:7d:d2:9a:63:d2:d5:b2:34:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Mar 26 04:00:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=1e9c4625e455dd88ff543615b59365058a05f6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:0a:ad:de:7d:44:0e:13:bf:21:e3:49:a8:
2e:15:17:7a:fd:ea:39:25:48:63:a0:c1:81:3e:45:
a1:5c:73:2b:83:dc:ee:4b:7b:37:9f:89:39:03:d3:
e7:7e:4e:65:09:e6:86:38:4b:41:81:39:42:4f:88:
b0:19:4d:f0:6e:5f:5a:84:5d:e5:c1:bc:5e:30:de:
32:c3:dc:36:11:e8:73:bc:c4:9c:ec:ae:44:fa:3d:
e4:5d:33:7d:76:4c:1e:77:b8:44:c2:15:a9:d9:80:
c0:97:02:f2:8a:bd:19:ae:89:88:28:68:57:b5:c7:
cd:01:c1:7c:ee:7b:e5:5c:24:7b:9b:1b:e5:f4:74:
fa:51:ec:4d:bc:7f:a0:b6:42:86:a9:e2:29:9a:6e:
70:ae:33:84:8f:4b:66:ea:ae:57:93:f7:88:fb:54:
d7:26:70:83:e8:99:34:73:fc:f6:80:25:4b:d8:94:
7f:3e:f9:f5:4b:e5:6d:2d:b6:fa:18:a9:0d:39:82:
62:eb:7a:00:08:a8:49:50:53:33:7c:57:d6:ab:79:
b3:5e:95:b3:69:b3:1a:ea:6e:f4:36:08:9c:33:39:
4b:ea:a2:dc:0f:78:b9:6f:ea:7f:90:9a:f1:4d:bd:
eb:08:35:67:e6:b8:75:b1:38:20:86:84:cf:64:f0:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9C:46:25:E4:55:DD:88:FF:54:36:15:B5:93:65:05:8A:05:F6:C8
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:aa:27:5d:9c:be:c5:dd:87:6c:0e:07:b5:4a:58:fb:8e:39:
ed:71:fe:de:b4:8d:50:b5:96:2c:b1:db:ee:c5:d7:2b:ed:d4:
e3:c6:ae:49:e5:84:05:27:a3:03:30:a5:85:e5:86:d8:b1:c1:
35:8d:9b:16:8d:ab:6c:26:73:b7:c8:a1:bc:54:66:d7:c7:d8:
b2:c1:1b:23:6a:ee:ed:a7:2f:2f:15:7e:be:a0:0c:e6:71:06:
98:63:9a:7a:d0:d1:f0:f2:36:ec:9a:db:b9:7c:c6:14:e9:6d:
3b:2d:a0:93:fd:83:be:e6:41:c5:f6:9d:71:bb:49:cf:4a:31:
26:e6:22:25:f8:34:79:7b:48:15:4f:19:0d:ce:79:e6:3c:1c:
53:e2:fa:98:74:28:23:de:e5:5d:55:b7:64:22:27:ed:97:8f:
eb:7f:c0:f9:92:0d:27:a0:93:a0:da:ab:5e:3a:0f:ad:f2:e2:
0c:4c:f6:73:95:45:a6:f3:b3:d4:e5:f8:38:17:db:e8:f1:4f:
c1:11:56:49:bd:37:3d:af:ac:66:14:17:bf:be:70:e7:3a:71:
87:df:27:e7:c1:de:73:e2:ed:cd:1e:7d:0d:38:6a:51:bd:f5:
14:b6:dd:5d:d5:e2:6c:df:b8:a0:40:ca:a1:32:03:62:36:09:
3c:b9:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:56 2026 by rpki-client