Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: vmSMTj2dEQYg1/JJp7C5z1g4UQj9g3WBPiUExLwkOic=
Subject key identifier: 83:77:BC:F5:F9:0E:6F:F1:CA:C7:16:BE:85:7B:4C:8C:D5:37:7A:40
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019CAB6BA0971086E41B4253AA2B996B68C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 15B4
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: b9xpJalvfa4q5miofd31KIbJWMWDQup56LkOAjrenxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a0:97:10:86:e4:1b:42:53:aa:2b:99:6b:68:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=8377bcf5f90e6ff1cac716be857b4c8cd5377a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:57:de:10:b4:08:82:dc:74:e4:29:f6:fa:
0b:c3:76:03:30:24:45:8a:7d:dc:99:33:e3:99:ac:
00:2f:69:c6:d4:94:77:8a:8a:bd:f0:6b:aa:02:47:
9c:04:82:2b:02:c1:8b:5f:c9:26:7c:33:7d:6f:66:
28:6f:fb:97:9d:10:e3:2d:93:df:b3:0c:e8:48:c0:
6b:ec:95:5e:88:6e:7c:7a:c3:d7:92:ba:7f:50:8f:
e7:72:50:5e:bc:0a:61:a4:b2:3e:bd:be:e2:e8:35:
c6:15:be:13:66:4c:22:23:8b:64:46:3b:30:17:ff:
1d:dd:13:3c:94:7d:23:be:28:cc:fe:bb:c6:9a:93:
0a:96:a0:b6:f1:6b:ce:5c:f3:cf:e0:f8:1a:28:bb:
f3:57:49:3e:79:5a:2d:65:f3:50:7a:ff:d2:9b:2e:
f1:4c:c0:de:15:81:7e:9f:2d:a5:90:8e:bb:a7:e6:
13:53:08:3a:de:4e:2d:2f:b0:1c:c4:4c:f9:54:ad:
b8:86:c8:ba:76:e3:03:0b:45:61:dc:4a:90:da:f8:
7b:74:62:b9:7d:c2:5f:85:df:1e:37:2b:4d:f8:2e:
8c:33:44:23:ac:52:21:fa:60:cc:77:7b:e2:79:7e:
49:89:dd:03:ed:20:a1:19:96:a9:d5:02:5a:2a:b3:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:BC:F5:F9:0E:6F:F1:CA:C7:16:BE:85:7B:4C:8C:D5:37:7A:40
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cc:ba:08:a2:37:13:eb:2e:f0:95:73:46:58:80:dc:57:ea:
74:27:e0:a5:75:40:40:3f:9f:b1:2a:d9:86:f9:17:2b:ce:4b:
e6:4a:43:ac:2e:4e:de:5b:f3:a1:e3:e0:07:32:da:94:1c:d0:
a9:d8:b0:52:0a:dc:f2:e3:be:17:af:70:95:05:0f:74:33:e2:
9d:f1:98:e3:7b:07:7e:b2:74:f9:08:9f:3a:bb:c5:ae:8c:52:
a3:22:25:d8:4b:e9:12:9a:32:7b:6e:18:a7:28:2c:25:4c:69:
27:d0:22:96:27:0d:18:9e:f8:9c:8b:49:5d:17:af:37:e8:cb:
46:f0:57:0a:44:d4:5a:37:11:ec:97:71:97:03:b5:45:68:1e:
34:c3:49:9d:80:ff:c5:92:6b:f8:97:33:ce:e3:3a:69:be:89:
8a:c9:dc:d2:12:18:90:7b:83:da:56:1a:9f:53:0d:81:eb:d9:
c0:e3:e6:e4:b8:1b:6d:2d:0d:3a:2c:e1:d0:67:de:fc:07:27:
3e:18:43:28:f3:99:fc:43:b1:80:14:53:cf:a6:54:a5:06:84:
46:58:25:39:cf:ab:01:7e:e7:e2:7a:59:13:6e:32:93:09:d5:
b3:35:ca:32:d4:27:7c:3c:86:f5:09:2d:0d:b6:30:b1:b4:c5:
06:90:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:17 2026 by rpki-client