Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier: JYlbjEbhEkG8Zw9NVhTnt7mMQWmJl9iGv2axFOqKH3o=
Subject key identifier: B7:CF:D0:36:CF:8B:8C:7A:8A:28:DF:91:78:1B:1C:AE:12:32:2A:BB
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial: 019CAF117222BE1B1760230DDF578E05352A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number: 08C5
Signing time: Mon 02 Mar 2026 15:01:21 +0000
Manifest this update: Mon 02 Mar 2026 15:01:21 +0000
Manifest next update: Tue 03 Mar 2026 15:01:21 +0000
Files and hashes: 1: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: KmhF3wCx64gHwyadynhyyjde29Hjv4c44i+ZfjJZtwE=)
2: bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa (hash: mlGeYAkzIiaMQu2uNg0bx5zSdfDctbxIGGNO6WnD0zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:72:22:be:1b:17:60:23:0d:df:57:8e:05:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Validity
Not Before: Mar 2 15:01:21 2026 GMT
Not After : Mar 3 15:01:21 2026 GMT
Subject: CN=b7cfd036cf8b8c7a8a28df91781b1cae12322abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:97:fd:3b:14:5c:e8:cd:20:00:84:22:df:
b8:23:c4:13:ca:1b:1f:5a:af:67:f0:fc:64:fb:4e:
23:16:3e:ec:93:0a:07:60:3e:af:cd:ed:b0:eb:81:
fe:a9:79:88:ac:60:d7:35:d4:70:d2:fa:72:75:45:
21:26:b2:bc:6f:55:26:f0:5b:4f:ec:8f:04:e3:0f:
81:df:56:18:20:67:7b:e8:6d:ad:0e:de:49:08:11:
2e:85:5f:30:1e:f7:22:36:a8:34:41:57:a2:65:49:
fd:89:72:00:12:71:65:50:fe:d4:35:4d:e1:3e:eb:
ce:a9:43:1c:36:a8:52:86:4b:be:85:26:eb:a0:06:
06:36:1a:53:c9:3b:3d:70:04:c3:8e:20:45:ff:2d:
96:94:00:61:16:37:00:ab:5f:93:d9:ad:42:a4:8e:
35:b3:86:21:03:6f:0e:43:78:51:2f:d3:e1:2f:45:
5e:fc:ee:0e:7c:67:da:cb:37:e3:a4:89:e5:52:b3:
8a:0f:32:4e:d3:f0:1a:79:18:e3:84:b1:1a:f4:12:
b5:0e:ce:18:61:2c:30:ce:f3:b1:90:e7:42:ca:0b:
4c:8b:fa:7c:54:37:bd:fa:1d:bd:dd:6c:b2:28:07:
a1:fe:9b:4f:77:67:b8:64:d8:a8:42:39:ed:1b:f0:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:D0:36:CF:8B:8C:7A:8A:28:DF:91:78:1B:1C:AE:12:32:2A:BB
X509v3 Authority Key Identifier:
keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1c:d7:c3:4b:36:9c:ce:24:4b:85:2d:1f:7f:4b:42:11:ef:
57:b9:bd:81:e3:6a:a5:27:42:99:9f:ea:a4:9e:5b:b8:17:6d:
b0:26:ce:4f:6b:f0:26:43:66:8d:54:74:6b:68:42:3e:0f:29:
4a:f5:24:e9:77:ef:24:38:3e:d3:da:e8:37:e1:66:46:8e:3a:
f7:06:4f:3f:b7:37:98:a8:17:f9:43:80:49:6c:6d:05:17:d4:
38:cf:1f:34:a7:5b:16:04:b9:b8:5a:a7:1a:ec:56:81:6a:df:
c3:1f:ea:c2:97:91:43:b5:20:fd:0d:60:0e:dd:f6:b4:52:6d:
1a:2d:4e:aa:65:26:d6:52:6e:3d:20:51:0b:78:ac:90:eb:61:
8e:ca:be:83:a2:10:fd:68:b6:2e:f6:5f:30:1c:9f:5b:bd:5f:
e6:75:9b:c7:34:5f:5d:10:6a:c5:12:1c:36:1f:bf:44:20:0c:
35:c8:a8:56:b8:f3:09:1d:69:3c:4e:cf:a4:71:24:97:02:3f:
45:08:22:ee:a0:e7:39:3a:70:d6:58:19:b5:58:48:d6:6d:4d:
68:27:e9:5d:62:9a:c4:d2:15:f6:87:ea:b3:a6:8f:ab:d2:bc:
b7:e7:4a:91:92:0c:9b:33:67:fc:cd:58:20:1c:0e:d4:a8:4b:
1f:bc:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:37 2026 by rpki-client