Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: T4hfXX1ZJ0H/8KIjb4eZfWUQU+CizPSYLobJpJHFMoM=
Subject key identifier: 5E:93:3D:D7:7F:09:DE:53:53:3F:24:8B:42:D2:EA:98:98:76:F4:B7
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 019D2A3C5900A139D40A281CF05E3D68EAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 13:01:31 +0000
Manifest this update: Thu 26 Mar 2026 13:01:31 +0000
Manifest next update: Fri 27 Mar 2026 13:01:31 +0000
Files and hashes: 1: ZWc731yhXtnZwZA4k-893U-Fzys.roa (hash: RRFLJwA1DLmfU7R9eR3HkSpvYKtbhnQe6Ugjt8gXSbA=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: n+fBMu9UW9u7vu6E6tTwGeHlBqzxfF90kwS7vUjhQyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:59:00:a1:39:d4:0a:28:1c:f0:5e:3d:68:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Mar 26 13:01:31 2026 GMT
Not After : Mar 27 13:01:31 2026 GMT
Subject: CN=5e933dd77f09de53533f248b42d2ea989876f4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:d5:ee:c2:91:ee:4f:f7:ef:bb:fe:22:67:
74:53:93:de:25:b2:79:80:af:ae:e2:3c:f4:c2:bf:
1b:d4:c5:1e:0a:e8:58:b4:03:b5:be:15:f4:02:1c:
98:49:8c:d4:10:48:18:3b:27:fc:1d:00:79:5d:c8:
41:9c:73:64:99:cf:4c:4e:89:55:b5:dd:62:c1:79:
60:23:0d:08:e0:dc:2b:df:55:ef:71:dc:83:a5:78:
02:d5:45:27:38:51:d3:09:4a:27:6e:45:07:8b:11:
bc:dc:57:b5:3d:fd:ea:41:fc:ba:b8:39:8d:53:d0:
73:4c:03:fd:76:cb:ed:72:e8:de:57:04:0f:bb:6e:
3f:33:c8:a5:ea:32:5b:8a:51:23:a9:d1:96:08:3a:
ce:d1:91:cf:69:4a:64:30:b6:5f:88:c7:7d:8f:8a:
85:ae:0e:5e:a7:5b:3d:a2:ba:15:0b:30:d9:42:99:
dc:a1:b1:cf:2f:72:47:e9:62:2c:aa:4b:5d:ec:70:
ca:ac:6c:ea:33:fe:4d:22:50:70:29:0f:93:e4:f9:
e0:39:93:c5:20:38:26:91:a4:ee:fc:ef:c3:cc:91:
46:e5:a2:4f:3a:8e:27:76:03:d2:d4:fe:27:22:8d:
3a:85:16:4f:15:35:0f:09:c7:0c:de:41:01:e6:80:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:3D:D7:7F:09:DE:53:53:3F:24:8B:42:D2:EA:98:98:76:F4:B7
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:f3:d9:b4:5f:fb:32:b2:f7:f6:7f:56:38:a1:ad:7d:0a:
b0:fd:0c:2b:df:05:ba:81:11:01:98:47:4c:3f:c1:d7:1a:2a:
87:10:0f:1b:35:da:91:28:80:24:0c:7e:84:1d:7a:99:39:11:
7a:76:c5:fe:5b:f6:9c:64:c7:e1:28:2b:a2:e8:c5:da:ef:bd:
2e:c5:30:fa:60:ca:91:bb:47:d4:e1:7d:4d:e2:3e:65:75:d3:
5c:c4:d8:61:21:7d:5c:a0:90:6d:e1:82:8f:a5:d4:17:3d:10:
ff:58:72:06:ec:5e:0e:dd:60:db:4a:55:87:89:a5:e1:2a:5f:
be:8a:54:e2:ce:43:8a:ed:5e:1e:f4:91:e6:a5:67:00:af:60:
3c:57:57:aa:a4:2e:19:0c:31:8f:37:ad:5b:ae:19:4c:a4:cf:
08:9e:49:17:34:b7:e8:6e:dd:3b:38:bd:99:be:ab:56:01:2d:
04:e9:c5:07:9f:73:3a:96:1e:3f:e0:fd:71:b9:11:72:3c:c6:
3c:af:09:7b:b5:ee:36:4b:bf:33:76:a2:01:b2:7d:82:ab:5a:
92:ee:3c:95:b7:09:6a:a2:92:73:c7:a5:af:8a:5f:0a:28:4c:
54:30:c9:c8:09:1e:b9:89:09:1c:f9:72:4a:3d:00:49:bd:f8:
86:a7:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:59 2026 by rpki-client