Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: 8UmwiN15UZokKdFmLm0tF4M8tQKtUuOJaaOXOsfdhF4=
Subject key identifier: AE:DB:B8:0C:D4:C7:9C:53:FD:23:D1:11:76:7E:71:07:07:1B:2D:31
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019CABD9B68967C54B6D27E3F99EC15FEA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0D44
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: 3oCtAyUn4jcacPgYLn4mcxJMEfqSanOZE5Tp1V2bcGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b6:89:67:c5:4b:6d:27:e3:f9:9e:c1:5f:ea:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=aedbb80cd4c79c53fd23d111767e7107071b2d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:d5:1d:a3:39:b0:b8:da:2e:ad:c6:98:de:
84:2f:d8:43:a5:61:b7:d9:2e:ba:0f:73:f3:21:ed:
89:07:b1:1d:ed:23:ff:0e:42:ec:cc:bb:23:47:1f:
1f:e1:2e:1d:42:76:46:e6:bd:93:77:c1:02:d5:52:
d3:c5:66:6c:a7:02:a2:89:c7:93:6c:45:25:85:e5:
3c:57:8d:95:7a:b9:48:37:e0:89:8e:94:5f:27:17:
8b:d8:e9:6f:19:87:17:03:2d:30:62:60:06:02:7c:
7e:2e:8e:f5:23:07:34:6e:9d:d6:e3:91:c3:20:4f:
16:56:ae:ca:e7:b0:22:91:a5:c5:ed:1d:5b:0f:06:
24:05:21:4d:a2:39:6a:49:8c:98:74:47:4c:cd:ae:
8e:bb:a0:23:e8:db:fb:89:fd:61:65:e4:f8:32:a1:
1f:28:11:4b:0a:d3:0b:4b:bb:02:87:dc:a4:82:73:
0b:45:9d:78:32:76:61:59:99:e8:01:d2:39:5b:b0:
55:8b:26:6e:e8:b5:15:83:43:b7:47:f1:73:fc:ca:
90:19:76:62:3d:20:d6:57:8b:3d:e5:1d:11:f1:6b:
d4:1f:f4:a9:cd:a3:cf:71:ec:c2:f6:e9:fa:1f:55:
22:a2:13:4d:98:c9:fb:2a:5e:16:dd:aa:8f:0b:aa:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:B8:0C:D4:C7:9C:53:FD:23:D1:11:76:7E:71:07:07:1B:2D:31
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:58:13:17:8e:d8:53:25:d2:fd:96:0c:29:b3:13:b6:21:46:
06:1a:02:93:c4:5b:82:c2:a4:b6:b9:5c:80:4b:2e:b2:60:06:
12:f4:ee:1a:b7:d5:57:dd:1b:88:55:8f:72:a3:3f:b4:43:40:
ff:9d:64:20:00:46:0b:50:71:fb:74:28:05:58:06:61:18:07:
bd:64:5f:3c:7f:4e:66:57:c7:33:b9:5f:d6:b5:a3:99:54:42:
e3:af:92:31:0d:45:85:22:5e:91:5d:e1:90:13:10:66:80:7a:
92:cd:5c:99:2d:32:6f:d2:9c:c0:3e:62:ec:9e:c7:b2:1c:71:
4f:91:37:35:3b:72:f1:c2:97:b5:01:78:2d:0b:31:bf:1e:1e:
cd:c9:6f:fd:df:94:b6:eb:da:49:23:35:f1:f1:61:0a:a3:0a:
3c:fe:75:a1:f0:23:21:df:3a:03:19:49:44:8f:e8:d0:4c:74:
9e:8a:d8:c8:63:92:21:e5:d3:16:43:c4:e5:2f:13:d8:4a:01:
0e:72:e2:eb:c1:8d:c4:69:e9:f8:05:ad:11:a6:f7:27:8f:03:
69:d6:ee:ae:83:cd:75:7a:eb:f8:94:14:95:70:31:c6:48:cf:
59:d5:13:35:ac:bd:18:21:02:43:0a:b4:2f:97:aa:f9:35:7f:
ef:ce:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:25 2026 by rpki-client