Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: mvBW7vWvXFDWAVOw/lBSvnVUjHwCIToZaIBymlaM6X8=
Subject key identifier: 32:4D:79:FF:89:0E:24:3A:F5:0A:9F:2F:6D:0F:EA:3E:A3:56:9F:2B
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019CAAC692C5DF5353886967664C91DDB79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 10BA
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: Y37cj1icGnFIuaWtW3dDTnK5YQeoVOnDMR0C533lf6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:92:c5:df:53:53:88:69:67:66:4c:91:dd:b7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=324d79ff890e243af50a9f2f6d0fea3ea3569f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:6f:c6:a1:70:da:b0:58:d3:18:31:99:87:
8f:9c:65:e5:80:bf:94:fc:8c:52:1d:02:b9:8a:08:
c8:61:28:24:21:ca:23:bb:c1:08:24:22:33:01:2b:
9b:87:d5:92:61:2c:cd:0b:7a:c1:4a:69:b1:e4:f6:
16:09:9d:cf:af:25:30:29:ae:7b:6d:9e:56:7f:a5:
4c:65:14:bb:fb:34:e7:24:25:6c:cc:04:2c:38:69:
93:f5:f9:8c:b2:25:cf:a6:5d:6f:d5:45:6e:3c:2a:
9a:0f:da:d9:e2:b8:bc:1c:69:b0:2a:84:14:9d:e8:
d1:cb:dd:a3:9f:38:c3:7c:dd:0e:87:23:62:85:0d:
12:86:4a:e6:25:5f:56:e6:a1:18:db:35:fe:22:46:
43:cd:6b:96:aa:d2:45:05:ed:53:04:90:70:58:b7:
dd:62:84:7c:4c:33:0b:e3:72:0c:47:1e:42:40:ed:
49:b6:db:6d:68:02:23:5c:20:7f:bc:d2:94:be:fd:
06:7a:da:57:ae:ac:3b:d1:7e:d7:a9:8a:0c:31:38:
50:2e:7b:ab:0b:c1:4e:60:92:9e:fe:a9:01:3e:97:
0d:27:5c:75:3f:47:b0:1b:d4:bb:88:06:85:29:f7:
6c:33:2b:68:fc:3e:62:8d:c5:7d:8b:0a:58:2a:df:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:79:FF:89:0E:24:3A:F5:0A:9F:2F:6D:0F:EA:3E:A3:56:9F:2B
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:04:ce:24:28:66:9d:4d:14:b6:a4:b5:c6:e4:fc:f1:7b:b1:
39:9a:05:2a:e0:31:50:8e:71:07:9d:a0:ff:d0:3b:8f:f3:2a:
73:e9:a3:e7:40:15:c8:56:bc:c8:e0:4d:42:8a:2a:bb:09:0c:
77:7f:ed:04:65:b8:b6:45:03:dc:5c:11:cf:f9:4e:57:1f:16:
56:06:5b:99:16:22:a6:e8:2b:22:23:34:d8:77:8b:24:15:3f:
c6:30:e5:50:9d:f2:be:49:a9:17:76:0b:6b:2e:65:fd:79:c0:
98:5b:db:67:7b:8d:4a:47:89:f3:39:89:7a:e9:b2:aa:2f:bc:
d8:49:92:6b:24:10:7b:50:93:3c:4f:f1:95:00:77:10:6d:a1:
42:64:19:a6:51:aa:1c:30:54:dc:9b:b6:58:5f:98:2e:f8:0c:
ed:7f:90:5b:77:73:66:81:05:3b:7c:9d:49:dd:d0:77:49:b8:
a7:8f:6c:9c:82:ff:59:0a:bb:ac:ae:17:f0:48:47:28:11:ce:
a1:9d:07:6f:be:1d:f2:b9:0e:f2:e1:46:c3:06:aa:aa:0e:78:
ee:56:48:47:a1:d2:ac:32:74:d0:6d:52:12:5a:d7:1b:ed:88:
98:ae:65:1c:20:3b:80:7c:10:9d:59:05:e7:8a:3c:5b:a4:3d:
93:34:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:53 2026 by rpki-client