Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: FcOgHNuxrB1jIgCiyMafchDTXSm/XEkx8XmL0ftDzd8=
Subject key identifier: F7:2B:94:77:0C:35:98:9B:7A:2A:7B:CE:A1:3D:04:5C:DF:2F:48:A8
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019CAD5A6BD6AC78CC6C17A5899EB7456E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 182D
Signing time: Mon 02 Mar 2026 07:01:49 +0000
Manifest this update: Mon 02 Mar 2026 07:01:49 +0000
Manifest next update: Tue 03 Mar 2026 07:01:49 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: LW+snYZhaEETUyu9uK5eiquwqIq87ohxQw/ZP5Z5pJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:6b:d6:ac:78:cc:6c:17:a5:89:9e:b7:45:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Mar 2 07:01:49 2026 GMT
Not After : Mar 3 07:01:49 2026 GMT
Subject: CN=f72b94770c35989b7a2a7bcea13d045cdf2f48a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:1d:e7:df:0e:eb:c3:10:2f:7c:fd:44:17:
6c:f6:e1:50:53:3b:0d:92:61:18:0c:e0:80:0e:b8:
bf:0f:4b:18:88:1b:b2:cb:c7:48:b2:a9:8e:45:50:
af:c7:04:f5:f4:a3:a6:eb:95:ba:63:e7:a2:78:7b:
4e:dc:d4:20:91:15:10:7c:c4:25:6a:61:fe:ce:87:
19:8d:82:2f:f3:95:0b:53:b5:a7:61:e8:27:24:91:
62:7e:d5:3a:8f:2e:1b:33:0c:85:2d:f3:70:e6:4c:
09:90:48:23:fd:cb:30:79:35:f3:82:da:9a:25:43:
a6:fb:83:6a:d4:79:51:dd:35:13:3b:73:e3:5d:dd:
61:90:69:f7:8f:0e:2d:c3:f4:98:4d:96:27:7c:0c:
b3:31:b9:82:d7:11:53:33:d7:eb:72:b0:9c:63:31:
ae:eb:ae:9a:50:7f:8d:16:06:fa:51:74:85:0e:1e:
23:b8:8a:f1:8e:91:c2:94:2f:d2:21:e4:91:e6:84:
4b:ab:9f:0c:1b:ce:bd:1b:f8:c0:47:8a:b3:e0:a1:
7f:3e:24:df:9e:85:e3:8f:d7:19:92:d2:6f:a7:17:
04:1e:f6:c9:41:71:45:44:c6:a8:9b:f5:5f:8d:1e:
23:0e:77:70:06:cc:85:77:69:5d:17:2e:d7:12:9d:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:94:77:0C:35:98:9B:7A:2A:7B:CE:A1:3D:04:5C:DF:2F:48:A8
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1b:c1:23:bf:7f:3d:43:f7:b6:5a:d9:6d:cb:bc:5b:86:a4:
9c:c6:52:65:4d:6d:02:43:80:3c:b8:23:90:9f:93:c4:34:a7:
bf:51:ba:27:49:75:e1:0f:21:b2:d9:79:99:57:4b:27:fd:f8:
85:de:9a:02:4c:2c:05:5b:3c:32:35:f4:7c:58:84:7e:39:f3:
98:86:14:15:cd:a1:7c:2e:30:a9:91:f7:b6:2a:25:ea:3d:a6:
17:de:1f:3e:b5:75:a5:61:a0:0c:bf:94:4d:e1:4a:95:59:d8:
1e:81:c6:f5:98:02:83:e3:33:b1:dc:15:17:fd:c3:4b:54:58:
fc:f1:9e:17:09:1e:f6:51:c1:a0:46:99:55:ca:0c:d4:a0:3b:
2b:a5:dd:a3:58:33:e7:5a:29:75:9f:09:8a:0c:8e:87:d0:aa:
48:7c:4d:e8:c7:31:d1:24:9f:40:a9:84:33:9a:9a:b6:78:2e:
f6:fd:4d:ce:14:5d:09:b6:1b:90:78:68:52:39:e8:5b:2a:57:
f0:20:a3:51:55:6f:dd:78:fe:dd:83:5e:cb:d5:4a:fc:ce:1d:
da:f9:f4:e5:95:ff:47:cf:6b:df:85:12:d9:6e:d0:e6:e1:74:
50:5a:4d:ea:04:0b:30:bf:fb:d3:72:b1:68:8b:02:0f:d4:8e:
af:79:bb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:07 2026 by rpki-client