Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File: JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier: ++cFbNR2F0aL3/k+jpomKzCvSx6MzYfgxo8qr1dl5Es=
Subject key identifier: 92:0C:33:8D:04:B0:57:0C:73:EE:51:A6:BE:69:3A:0A:98:45:25:93
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial: 019D3375D2DD58886BC38771E1475EBC2F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number: 0F83
Signing time: Sat 28 Mar 2026 08:00:52 +0000
Manifest this update: Sat 28 Mar 2026 08:00:52 +0000
Manifest next update: Sun 29 Mar 2026 08:00:52 +0000
Files and hashes: 1: E-g-v2Rn7ovW7XAIev5scQP8c8A.roa (hash: q74zdfQNlbmYnT3S1OTFeC3AloIjMONMGPowWsbDW2Y=)
2: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: DmYFKZ+DmqpuLisXj0KQdY6DV4gFyR6EuIJe5A95WtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:d2:dd:58:88:6b:c3:87:71:e1:47:5e:bc:2f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Validity
Not Before: Mar 28 08:00:52 2026 GMT
Not After : Mar 29 08:00:52 2026 GMT
Subject: CN=920c338d04b0570c73ee51a6be693a0a98452593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:e1:b6:a9:8e:91:4d:32:29:74:08:91:85:
7c:bc:db:8d:da:b0:46:a7:bf:a2:a0:87:fe:f8:46:
71:95:b4:99:98:3a:f5:78:ca:d3:88:85:31:b7:31:
c5:13:bd:29:7e:8f:9e:25:55:c8:e8:45:58:6a:28:
41:df:43:1b:d1:dc:c9:03:ee:82:97:3f:2d:52:7c:
a1:ad:74:b5:b7:67:a5:73:29:d5:7e:88:9b:82:b2:
76:05:4b:4e:67:e4:9a:6f:b3:46:c5:6f:6a:aa:2f:
8d:d0:42:8c:79:46:06:a2:b1:39:97:48:a7:fe:a3:
da:d6:58:1a:17:ec:d7:72:9d:3b:62:8c:36:d4:63:
2e:2b:b9:cc:e9:4d:4b:09:ed:7f:c9:45:39:1f:ad:
38:01:86:38:af:f4:cb:19:c6:d0:4c:7b:a5:76:91:
82:a2:b0:5c:cc:dd:d6:e9:91:83:f6:4e:6d:b2:3d:
99:11:59:27:94:cc:a1:47:5c:de:df:aa:e6:3e:5c:
99:b5:06:ff:5b:d9:66:3f:32:b8:fc:5b:98:29:ec:
ee:b8:b7:9a:ee:72:f2:cc:8e:48:7b:91:a6:2e:3b:
6e:22:b3:77:e2:d4:85:a6:a8:a8:b4:46:e2:05:8b:
cf:3f:27:6c:c7:1e:78:c2:c9:62:16:08:d1:e6:eb:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:33:8D:04:B0:57:0C:73:EE:51:A6:BE:69:3A:0A:98:45:25:93
X509v3 Authority Key Identifier:
keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b4:4e:89:b4:aa:36:2a:c6:45:0d:1c:19:ad:ef:0d:5f:1b:
43:e9:70:7f:19:9a:4f:06:c1:f9:40:8c:fc:d5:76:01:40:fe:
a7:fe:b9:67:6c:81:31:63:ac:78:a4:78:74:14:d8:ec:8c:af:
6d:73:c1:26:d8:ea:d0:c5:fd:34:31:05:82:f8:69:35:6a:8f:
3d:5b:c0:de:1d:76:99:f7:ea:85:19:b2:82:19:af:d0:81:31:
f4:ec:72:2e:43:87:91:38:f2:a5:d8:56:5e:84:b9:8a:bb:8e:
c2:a9:60:df:5e:2c:ce:90:38:76:01:f9:24:04:a8:f9:30:8a:
83:ba:06:c6:07:62:f7:31:ce:ff:a9:1d:42:96:ef:ec:4f:62:
a2:38:a2:53:a4:28:70:82:59:9d:05:a0:97:2f:74:18:a7:da:
69:71:fe:fa:8e:9f:66:ea:76:6c:99:da:21:e5:b0:90:0e:95:
8b:5a:4f:36:63:25:98:cd:e5:c0:08:cd:5a:17:fb:82:33:a0:
56:b8:d3:85:7c:27:6b:34:33:68:21:8b:42:59:11:19:d5:75:
f3:4b:0b:03:7d:a8:9a:01:37:53:ae:ff:d0:78:d5:7e:5d:8f:
23:99:16:4d:b0:04:0b:c3:92:78:1e:21:91:33:22:d2:2c:21:
25:38:ae:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:37 2026 by rpki-client