Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: YnErNv3Y5SOlgYlAg0S28TTfsOte6PMjkYKpf95Prqc=
Subject key identifier: 37:C3:56:75:DA:E4:85:42:34:8B:D0:0C:27:63:5D:7A:FE:D7:7E:68
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019D27A8885AF1007F0802A2344052ACB275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 175A
Signing time: Thu 26 Mar 2026 01:00:49 +0000
Manifest this update: Thu 26 Mar 2026 01:00:49 +0000
Manifest next update: Fri 27 Mar 2026 01:00:49 +0000
Files and hashes: 1: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (hash: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c=)
2: Fb1-dZNCLLAcnEB2Ti_7na8L3DI.roa (hash: drGKyU8ZStuTt2RE0qNyuAHVNHKysS8wlS5+BTY+Lpw=)
3: Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa (hash: NLBLl8XhEwUwmOEQuE68fLj2rtmpnyK8kpfDaShHB6o=)
4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: RenPpj8RUfkvpLwm01ukoBhACGO6SVcruBN91j8c8IQ=)
5: Q419CMj39itEx5d1rZmvp11tEJo.roa (hash: aVTyR4miZff0FyNpx215JRudcRdWaUXQlchw+P/x8P0=)
6: bLrhejxGzYlplxbqpieFMxs8DTo.roa (hash: CHc0tXNDgBxUAvjvHgZDJcY5ybMe0rKmbUth2iY5KUY=)
7: caT7i0Ho-ce70M9ACVatVgOV6EE.roa (hash: OVGWsWiY+37CUfHQZ+flCcNGvE7DfMZs+E/YKFAYsXI=)
8: h4EWMG2Dd54unrlyJO11e05TJek.roa (hash: bmr5lQGgTSTyLvAWa1p7TSXtQmQWDBHJeY7C8CEpo9w=)
9: x2carAIaVgKjSsDGLEB8OLFM8NE.roa (hash: rttqg5eKj+V5DoEj4lQNOSz4ZdWbLM3E0GMVNzsZGEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:88:5a:f1:00:7f:08:02:a2:34:40:52:ac:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Mar 26 01:00:49 2026 GMT
Not After : Mar 27 01:00:49 2026 GMT
Subject: CN=37c35675dae48542348bd00c27635d7afed77e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:a6:ec:e7:66:44:31:48:53:ed:25:c1:34:
b9:9f:e8:31:9c:af:5e:a7:a6:88:2b:63:d5:48:5e:
a8:16:e0:62:2e:51:38:66:7f:14:51:9b:9d:1a:2d:
78:c0:64:b1:87:b9:26:ef:ca:b4:7c:e7:06:fa:d7:
f1:72:b1:bc:d4:d2:d4:ba:99:2e:ed:6b:83:ce:99:
23:6f:0b:be:f0:b5:87:34:8f:ad:83:0c:66:ff:f8:
8e:7f:23:57:46:41:b1:ed:6b:43:ca:b0:97:bd:d2:
27:47:52:57:53:0b:3c:97:c2:68:77:97:c8:e6:42:
76:c6:26:22:b3:47:a8:20:d7:ff:3b:b7:2f:72:16:
8a:a7:47:cc:05:39:77:c0:47:2d:ec:0b:5d:1b:e4:
0e:2b:bd:dc:40:63:5f:46:fd:f5:26:26:11:5f:a4:
df:b2:ee:36:fe:f8:f1:5e:5e:8c:a4:d5:5a:76:a9:
ce:e0:77:73:a5:49:d5:d5:2b:2b:c4:b5:69:de:5d:
3b:b2:9b:2c:a0:ec:38:58:93:ff:db:d0:0f:d1:4b:
0f:96:5a:99:df:22:91:37:54:74:ab:27:8c:01:52:
ab:a8:df:a4:a3:93:a1:99:fa:bb:ad:7d:f4:7c:09:
74:e3:0d:73:26:3e:55:86:19:e5:72:09:88:4b:56:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:56:75:DA:E4:85:42:34:8B:D0:0C:27:63:5D:7A:FE:D7:7E:68
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:71:87:f2:84:ab:07:f2:7f:91:d4:cb:8c:2e:09:8d:50:2c:
ce:76:e9:4f:1a:69:2c:0b:cb:8c:92:fe:b7:a8:e7:6e:0b:ab:
f3:58:04:65:25:f5:98:6d:c4:0a:51:98:93:45:16:2b:53:90:
66:26:d9:34:2a:b5:48:67:2c:a0:5f:e7:6f:51:4a:53:0b:79:
7d:d5:61:fa:52:3e:a5:23:e8:94:16:e6:bd:58:1f:54:44:07:
f1:2a:cb:84:35:26:13:5b:a9:ed:97:b1:37:a6:3c:43:77:da:
7f:82:4f:b1:82:9d:c6:7f:75:e4:35:27:53:77:fb:95:07:47:
34:0b:6d:11:94:ae:85:4e:a8:ca:6a:6e:95:3e:bb:0a:c2:82:
1f:37:ba:47:9b:27:5a:ef:1e:1b:b6:49:25:8b:fb:8a:5c:7a:
f3:93:c1:27:a4:0c:a0:40:5d:82:6b:83:ba:9b:1d:32:75:4f:
46:24:23:79:29:45:bb:cc:bf:cb:d7:7c:7f:ae:52:2c:7e:be:
84:49:51:b3:f4:0a:6b:0c:d6:00:5a:89:c6:23:1f:a3:a6:bf:
19:21:cf:2c:80:de:e9:31:46:3e:c9:ca:0c:16:cd:ff:94:d1:
a5:13:1a:bf:ca:05:7a:13:91:d7:e3:70:56:eb:fe:5b:aa:f5:
9b:4e:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:35 2026 by rpki-client