Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier: 8QxHNc89whj2T3yWuThefUACI7TS5/zvjGCPO7ruunY=
Subject key identifier: 6C:14:57:F7:A5:0A:45:C2:E4:F5:AE:76:B4:AF:C6:6D:41:D4:12:56
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial: 019CAC102884EABAFBA8BFA4FF416721E6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number: 07A3
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: AN3xpl22PaRyPEelcwTSWgg5W5A.roa (hash: re4tuXpQRY9PMdfHT4O4lemkMyHNhEqfGaE5zniD/ZM=)
2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: sXwBy0cU6rQptLSpIukJYWC48yT5WIMOGe0bdoebing=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:28:84:ea:ba:fb:a8:bf:a4:ff:41:67:21:e6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=6c1457f7a50a45c2e4f5ae76b4afc66d41d41256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:54:03:fe:b1:0d:46:67:84:73:c5:19:f2:
c8:e0:7d:d1:95:13:e6:c1:a9:a6:cf:84:19:10:ce:
9a:0f:b3:55:b3:f0:5c:97:6e:06:58:64:14:70:70:
98:ed:37:31:1c:33:02:65:ef:c3:8b:11:be:da:08:
ac:d1:9e:e1:a4:82:32:45:35:19:26:5d:f8:8a:a0:
d2:27:20:31:10:22:83:42:b0:6e:a7:4f:eb:3a:c0:
2f:95:9f:a5:b3:45:cd:6a:0f:e9:ba:4a:5a:bb:c6:
37:fb:3e:aa:7f:98:51:4e:49:c7:c2:22:0c:8e:e0:
94:38:97:b3:72:53:a4:97:0c:df:92:c4:0e:c8:f3:
c9:48:01:ac:36:f1:16:2c:fe:7c:23:ac:54:74:0b:
56:75:32:da:01:fc:11:35:97:8a:3b:e8:ea:54:6d:
0e:31:7e:d8:79:04:cb:9a:bb:95:be:ab:29:0a:07:
06:65:93:14:b9:bf:47:84:bf:0a:ed:cd:72:1a:16:
93:2a:d2:3b:22:f0:d8:6b:a6:77:64:ae:84:b1:b6:
b6:5b:bf:f8:79:17:16:a8:f9:c6:d4:e4:df:4f:a5:
09:41:3b:c9:0a:4a:32:05:60:33:81:0f:a0:59:aa:
0d:0d:77:ff:22:74:e9:1e:02:b0:29:df:85:6e:22:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:57:F7:A5:0A:45:C2:E4:F5:AE:76:B4:AF:C6:6D:41:D4:12:56
X509v3 Authority Key Identifier:
keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2c:9a:ff:cd:21:bc:c8:ba:2a:7a:d4:83:5e:ff:20:2f:57:
d7:78:e5:1b:b6:a2:dd:df:a0:43:76:40:38:46:ad:13:56:27:
b5:bf:fa:76:58:c9:13:e8:9d:c4:60:7a:25:b2:14:c9:67:12:
37:14:83:0b:2e:39:e7:bb:07:16:0c:3d:60:f4:5e:e1:ed:c2:
bc:55:1c:4e:75:2b:65:11:00:28:e8:0d:ad:c8:91:13:32:35:
8b:09:37:eb:44:99:ce:c4:4f:05:45:1f:a4:55:b9:b0:ae:4f:
a8:5b:93:f0:4c:ea:61:a2:38:d2:4f:0b:a1:19:a5:19:09:4d:
7c:ef:bc:19:28:60:96:9f:3d:8d:5d:2c:33:41:9d:83:66:c7:
8d:38:c8:22:60:e7:7e:c8:a4:8b:c9:33:6a:dd:4a:30:b8:d2:
17:a2:8c:27:ef:0a:35:e8:58:b2:5f:76:a6:f3:1d:3e:69:e7:
f7:bd:3c:ab:49:6c:d5:bb:a4:74:7d:12:ea:a0:cd:01:25:6c:
ed:a3:00:1b:8b:65:c6:c7:5c:fa:c5:ab:dc:97:9d:60:40:86:
90:a9:83:7a:76:e7:2f:21:77:a2:3f:9b:a6:89:9f:25:00:49:
86:da:0e:2a:d6:c5:6f:6b:8c:1b:ff:70:35:ff:76:91:60:ee:
a5:e1:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:40 2026 by rpki-client