Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: l61c0cZJwFJoU55YhxXZxS3fe0G3+70IK/iu3dC5a7I=
Subject key identifier: F3:EE:58:6F:6E:DB:31:43:84:97:B3:9F:5F:50:00:83:91:C7:A4:E3
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019CA9B379C31EA5CFA5F276DC3BD718678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 14:00:37 +0000
Manifest this update: Sun 01 Mar 2026 14:00:37 +0000
Manifest next update: Mon 02 Mar 2026 14:00:37 +0000
Files and hashes: 1: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (hash: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs=)
2: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (hash: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: aLpPn3LADN4FjrVsJxPqchWQt8csG/ja0UpwcIQnv68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:79:c3:1e:a5:cf:a5:f2:76:dc:3b:d7:18:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Mar 1 14:00:37 2026 GMT
Not After : Mar 2 14:00:37 2026 GMT
Subject: CN=f3ee586f6edb31438497b39f5f50008391c7a4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:51:79:42:c2:58:d9:9f:9a:1e:27:9d:20:
a5:cb:96:72:eb:03:eb:2e:d7:32:f0:0f:59:59:cf:
43:28:d4:74:20:08:bb:e4:05:d7:1e:18:3b:7c:c8:
c0:b4:d2:2e:79:ff:99:4b:5d:95:51:18:82:62:6b:
6d:3e:6f:6a:84:f6:82:ae:f4:66:e7:f2:73:5e:9b:
00:fb:79:ee:a8:75:66:13:ce:58:f7:60:ef:bf:8c:
03:4b:34:3b:a0:2e:c5:c7:f8:ca:2a:81:14:24:d1:
9d:27:8e:12:eb:40:c5:02:09:97:64:56:2c:6c:56:
a8:41:f2:13:59:36:08:dd:35:08:e9:ff:b9:43:e7:
a3:dc:90:66:fd:a9:6b:1a:94:4d:59:db:0c:8d:23:
39:6c:bc:de:4c:02:d5:6e:0f:30:63:df:b5:26:40:
21:e7:be:69:9a:25:6c:24:33:27:83:d8:0c:55:fa:
3c:1e:08:b3:6f:da:e5:1d:d2:75:09:d2:bf:ee:84:
99:61:af:c4:19:76:31:c8:38:e9:58:ae:72:50:d8:
48:5e:84:c7:c4:39:71:5b:24:c8:c5:c1:32:1e:f8:
24:75:64:aa:94:85:5c:a5:f8:94:76:53:bb:9e:d3:
bd:f9:ef:f5:72:91:19:d5:40:94:a9:8e:af:ef:13:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EE:58:6F:6E:DB:31:43:84:97:B3:9F:5F:50:00:83:91:C7:A4:E3
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:68:51:34:65:36:53:da:51:b4:63:be:cb:fc:a3:83:3d:2f:
05:ed:17:67:ba:e9:b5:2e:ca:64:a5:4a:99:ba:5e:0c:0c:44:
97:1d:2c:70:60:62:28:0b:c1:56:c5:34:7e:8a:8b:84:9e:d4:
73:d9:81:fe:9c:7e:e6:9f:ec:77:80:a7:e1:b7:8d:89:58:fd:
8c:93:77:0d:0b:38:d6:45:61:ce:ea:ff:2f:98:45:b7:1d:00:
ae:1c:35:1c:0b:be:1d:b1:a6:17:69:77:75:8d:d2:d6:34:77:
31:72:d3:c1:31:5a:31:e4:44:19:bf:d4:2b:64:a4:ab:ba:2d:
8c:05:bf:02:a4:6a:84:f5:66:ad:ef:91:e7:b6:ee:02:eb:fa:
c3:6d:d8:11:3d:d8:1f:d5:1f:3b:cb:89:0d:34:87:96:7b:a4:
ca:2c:77:ae:81:e2:a1:64:c7:91:b5:57:a2:b6:e2:e0:73:a2:
10:51:9a:96:ab:16:61:b6:fb:e5:b1:65:c6:5d:e9:47:bd:2d:
b6:78:ec:f6:1c:1c:75:8b:97:63:a1:ab:63:59:df:94:77:ab:
8e:c7:e2:40:12:71:1b:2f:a1:05:5c:e5:9d:0e:f1:b7:a9:db:
6a:50:b7:1e:1a:14:a1:95:0e:ff:f0:94:1c:09:38:9e:9c:e5:
f6:36:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:47 2026 by rpki-client