Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier: YJgvS3y31Dn4hBiAuW5rwJs5MOorDXRn4n5IKbjAzwA=
Subject key identifier: E5:DF:96:E6:AE:58:CA:BD:3E:32:81:A0:C3:AD:C6:AC:AC:9A:A3:58
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial: 019CAF7F03F0861948199D67FEDEC7802F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number: 0218
Signing time: Mon 02 Mar 2026 17:01:02 +0000
Manifest this update: Mon 02 Mar 2026 17:01:02 +0000
Manifest next update: Tue 03 Mar 2026 17:01:02 +0000
Files and hashes: 1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: KG9NUv+lFgBJBPoXgUo78NvyGD1fKwzMm0TDKJ30los=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:03:f0:86:19:48:19:9d:67:fe:de:c7:80:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
Validity
Not Before: Mar 2 17:01:02 2026 GMT
Not After : Mar 3 17:01:02 2026 GMT
Subject: CN=e5df96e6ae58cabd3e3281a0c3adc6acac9aa358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:7c:df:56:a6:e2:cd:ca:1e:7a:56:44:3b:
f3:1f:a3:a6:67:84:70:ce:92:e0:06:ff:41:da:03:
ea:ac:48:5b:7a:f6:71:93:2c:fa:6c:e5:a9:1a:57:
00:7f:f7:5a:fd:5d:2f:90:29:17:74:1e:ea:b0:10:
dd:85:67:fe:9e:1b:d5:f4:76:5b:14:ba:e2:3b:4a:
c8:72:2f:53:ca:7a:5b:03:e3:48:f0:d6:c4:3f:2e:
ab:2c:73:75:2a:ec:68:ca:fb:09:c9:de:59:b8:71:
d4:2b:fb:a0:ba:1e:fc:73:56:17:6c:73:24:1a:df:
7c:12:e9:9c:70:de:11:03:f8:2f:f6:80:d6:3e:09:
69:4a:c3:b9:7e:b6:0b:4f:21:fb:09:b0:dc:3b:92:
20:fa:7a:5b:5d:0d:94:16:81:df:a8:a3:52:5c:22:
de:6a:15:da:38:c4:fc:b7:94:59:79:17:d9:2d:1c:
08:4e:c2:bc:a1:28:29:31:8f:fb:43:1f:8e:ca:cf:
ee:0b:f6:62:6e:dc:60:70:80:99:a1:e4:d7:ba:dc:
ce:12:8f:27:d4:31:a1:cd:dd:44:61:90:1e:56:ae:
ab:97:7f:0b:38:7d:f3:10:2f:fd:30:6f:0f:bf:c0:
ae:8c:9c:fb:ba:e6:1d:62:42:f0:1d:27:1e:c0:4c:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DF:96:E6:AE:58:CA:BD:3E:32:81:A0:C3:AD:C6:AC:AC:9A:A3:58
X509v3 Authority Key Identifier:
keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:80:aa:ee:01:04:87:b9:91:0e:2c:79:a6:b1:60:85:79:44:
04:df:0e:89:b2:e4:24:df:36:9b:37:16:2b:42:c5:ca:14:4b:
14:3c:79:12:ee:71:84:59:54:79:13:28:6d:30:49:e0:c2:01:
b3:ce:c4:f7:af:ed:c5:1c:74:39:ae:02:8d:21:b0:15:33:7b:
1f:d5:4f:4c:30:53:25:a5:92:0f:16:76:d8:d2:95:26:a9:07:
0a:2f:61:94:d2:cc:c4:34:80:6e:bc:f0:c3:1a:e8:8e:50:88:
83:dc:b0:c5:3c:fc:5e:99:85:49:c7:1f:0c:98:2c:61:5a:74:
fc:58:e0:c5:58:96:43:ec:9a:89:42:d5:50:60:da:07:a7:34:
9d:38:21:94:fb:da:5e:d3:5c:45:4c:fc:81:8f:31:b3:7b:bb:
b4:2a:0d:02:d3:0e:0b:23:75:69:d1:37:a7:c9:20:fc:38:98:
dc:25:fc:76:86:e0:f5:a9:3b:50:97:21:52:0f:34:f0:dd:c7:
d9:f2:a0:79:06:86:8a:2f:df:16:81:e5:d2:7d:d3:f2:b3:7f:
a4:93:5d:16:b4:a2:65:27:e2:be:5a:a0:61:c4:03:e1:4b:70:
47:cc:93:78:ec:68:7f:de:38:b2:80:a3:2f:31:5f:86:cb:a3:
3a:55:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:49 2026 by rpki-client