Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: Us8BDfg2N+KSmXts77uFDSquFDcp5RmD6GjdT70htTc=
Subject key identifier: 68:18:0B:AD:AD:28:7A:EB:FC:E4:37:41:46:B0:51:FF:5B:63:BA:5C
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 019CAED9DFFFF0F4D658EF688A8FA6E10D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0F3E
Signing time: Mon 02 Mar 2026 14:00:40 +0000
Manifest this update: Mon 02 Mar 2026 14:00:40 +0000
Manifest next update: Tue 03 Mar 2026 14:00:40 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: tBRbyx5gYFWh4aOTHIwazA3s2Jy0vDkXA6+OVxvsAU4=)
2: RY3gtGJUikJjvAv0lx45qrDHyp0.roa (hash: 76j4Lek2Mb/IIJEFcGb75gTBWRvx5a0x7KTV09dxAg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:df:ff:f0:f4:d6:58:ef:68:8a:8f:a6:e1:0d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Mar 2 14:00:40 2026 GMT
Not After : Mar 3 14:00:40 2026 GMT
Subject: CN=68180badad287aebfce4374146b051ff5b63ba5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:b0:ee:16:85:ee:1c:c6:f2:2e:6b:29:cc:
9c:98:f0:b5:c3:c0:5d:5c:48:6d:d9:08:8a:59:1d:
9b:d2:b0:d7:e6:d7:35:77:67:c6:f1:34:99:d5:1e:
7e:0d:f4:f3:f4:d3:b6:7e:3c:b1:ab:c7:53:6e:41:
fb:31:1c:5c:ec:7d:f2:b1:43:33:73:17:d9:ae:c7:
9d:83:16:bf:e4:57:2c:96:b2:b2:2b:0c:ee:ef:01:
97:b6:2b:80:db:0d:d3:9f:d8:38:79:a1:22:44:62:
5f:f8:9a:9c:ec:1a:15:9d:8f:b7:4c:36:1e:1e:af:
a2:dd:ef:d8:5d:9a:88:a6:ee:56:e1:01:54:a9:10:
3c:53:5a:8c:48:57:f2:ae:5e:d9:30:f0:3d:e3:2b:
ba:e5:bf:f8:53:97:77:1e:33:7f:79:0f:80:51:98:
3f:9f:3f:2b:68:8f:01:7b:64:bf:f6:e1:3e:7e:ad:
fc:3d:b9:4a:5f:84:03:2b:9e:fd:75:ff:aa:e6:ba:
a2:28:89:b9:3e:23:8d:53:a4:c3:2a:a3:4a:e2:78:
10:c7:77:f4:be:49:2c:fe:6f:f1:b5:e9:f4:67:f3:
1f:23:ed:87:d5:bb:98:1a:9e:99:ba:6b:58:81:21:
23:3d:1a:dd:d8:d4:49:d8:b0:52:f6:24:2d:f0:a3:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:0B:AD:AD:28:7A:EB:FC:E4:37:41:46:B0:51:FF:5B:63:BA:5C
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ec:ee:ba:88:c6:13:27:30:e8:21:66:3e:e9:86:59:36:d1:
25:1f:40:e8:4b:80:67:9c:2b:e4:1f:a0:1e:cd:09:3b:94:df:
05:7d:67:3b:8d:16:82:61:41:d4:68:6c:26:05:3b:47:b2:47:
e1:bf:bf:db:dd:a4:85:ca:2e:7e:30:0d:04:ff:3e:ba:da:42:
58:12:83:1f:b4:5a:09:05:ae:ee:c4:5a:2a:0c:dd:b9:90:4d:
8e:08:30:67:39:51:72:74:ba:ac:74:8a:e6:95:cc:3a:d9:2e:
72:5b:e9:06:04:20:5a:63:74:44:f2:3c:e7:a1:a7:a7:e8:c8:
05:36:af:b7:6f:3c:9a:5a:58:1c:18:72:33:d9:2d:9e:42:d0:
b6:18:c3:8b:65:43:e2:79:70:92:73:ed:82:cf:61:8d:b6:d0:
0d:88:56:e7:35:48:f7:df:f5:8e:4b:21:a2:47:43:2e:80:b9:
da:1d:00:57:23:a3:eb:79:0d:da:16:90:40:80:9b:2e:65:9c:
05:03:17:a9:7e:7b:58:fe:6f:82:d5:04:77:37:29:34:5f:67:
cc:c6:cf:fc:d5:80:31:d8:39:b9:ec:4d:e4:8b:fc:cb:7e:11:
8d:24:ef:4f:5d:ac:c5:74:c1:c0:ec:43:52:bb:42:aa:44:8d:
51:1b:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:37 2026 by rpki-client