Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: ij3nDi2lWzJuupSb9iLCKae+nUOWv0PwepQHKkCTaMI=
Subject key identifier: 11:94:A3:E0:07:D2:B8:76:93:52:79:0F:D4:49:CA:77:24:03:3A:70
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 019CAA8FF296878BD787B30EBA0E0A2637BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 18:01:26 +0000
Manifest this update: Sun 01 Mar 2026 18:01:26 +0000
Manifest next update: Mon 02 Mar 2026 18:01:26 +0000
Files and hashes: 1: albAVH6lwfzmwVJzDmkpKh655KQ.roa (hash: BpL6bwg3t5pCu5LLatPQum4u8725IbG+PO63ipkITdM=)
2: i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa (hash: gL8PqoF8vFY4ZSfQKB1yxJH42nNfNmgI+ETePYwGBJ0=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: DCSglJtcvm+GPF80HAMmdvyrb38/NES6hibEbdGObXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f2:96:87:8b:d7:87:b3:0e:ba:0e:0a:26:37:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Mar 1 18:01:26 2026 GMT
Not After : Mar 2 18:01:26 2026 GMT
Subject: CN=1194a3e007d2b8769352790fd449ca7724033a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:fb:d5:f7:61:18:22:10:27:68:16:28:60:
4f:03:b3:6f:87:0b:60:24:27:0f:14:89:4d:55:69:
45:72:9f:52:f4:e2:66:70:cd:f6:aa:06:c2:f4:10:
88:35:c0:a4:5b:92:8a:2c:29:62:09:81:5c:31:4f:
39:ea:2a:70:0c:70:86:f4:d0:cc:70:5f:e2:26:99:
88:44:23:2d:0e:5a:ed:51:52:49:bb:05:00:b2:d1:
60:b0:b7:7d:1f:ab:f1:e5:af:0b:b9:6b:73:07:a3:
1f:15:ab:6d:25:d4:3f:b3:80:24:44:3f:3c:49:c3:
63:5f:46:e0:c6:2b:40:b7:47:00:3d:07:60:ce:c7:
ef:28:9d:6e:9a:cd:f6:60:f1:a9:cb:93:2c:c8:8c:
b8:e0:b5:22:db:9c:73:e2:79:03:e8:b0:cf:b1:3a:
73:18:c3:81:eb:eb:b6:a3:39:75:5d:ca:eb:b4:72:
57:74:90:93:b0:71:61:59:b2:eb:30:1d:f5:c0:a0:
d4:e0:34:cd:e1:f2:29:a9:8b:c0:d0:2d:f3:4e:d7:
33:0e:06:39:85:7c:33:51:d2:68:a5:20:de:85:33:
cf:97:63:9c:5c:df:99:fb:02:53:fc:eb:b9:21:16:
02:b7:7a:33:e1:de:f8:9d:23:0f:db:dd:78:4a:8c:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:94:A3:E0:07:D2:B8:76:93:52:79:0F:D4:49:CA:77:24:03:3A:70
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:34:ef:1a:a3:09:e4:a6:f4:ae:e7:f7:4c:a3:bb:4d:2c:33:
c2:6b:f3:64:32:1c:03:ef:b2:e7:02:96:25:90:2d:4a:10:a2:
46:c3:c9:33:e8:92:eb:b5:c6:0e:c8:58:7b:ac:94:0a:ec:d9:
b2:4e:5a:84:c1:54:9f:83:bd:40:b4:27:17:f4:46:1e:39:e9:
85:70:a5:6d:bd:6f:94:f1:8e:3c:2b:40:df:2c:eb:85:55:d6:
a4:bd:82:e5:f9:f5:e2:34:20:a1:0a:be:cb:c8:28:b0:ee:3d:
ab:a3:92:d6:a7:87:6a:01:82:70:0c:c2:fc:e1:8a:5f:08:6c:
3a:bf:f5:31:3d:6c:08:20:0e:94:6f:23:f9:f1:96:19:84:e7:
2e:5d:8e:b4:9a:54:46:f6:a6:8b:ca:d8:af:da:45:1b:11:84:
b3:13:1b:b7:3b:5a:f1:db:c0:ac:a4:ce:49:a5:70:27:17:9b:
b8:73:e0:8f:ce:c2:ed:bd:b2:05:ca:c3:df:2e:e1:de:91:ff:
0b:0b:1e:fb:6b:d9:bf:27:f1:3d:5b:7a:1b:c0:22:59:85:78:
28:ec:fe:87:f1:a9:48:44:b3:0d:b8:88:ef:4b:05:f2:de:5c:
8d:14:b4:3f:a9:66:80:94:a4:a9:20:09:b9:65:ef:da:44:81:
da:ba:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:24 2026 by rpki-client