Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File: JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier: b5sM9GAdPS+70TsEL4G3MUVfRBFyuIwyAXrlfqenwLw=
Subject key identifier: 27:8D:5E:38:25:87:EC:E0:BA:9E:CA:DD:70:45:1A:F4:D3:08:FB:88
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial: 019CAD904F2672622B2E3F2C386931443A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:00:41 +0000
Manifest this update: Mon 02 Mar 2026 08:00:41 +0000
Manifest next update: Tue 03 Mar 2026 08:00:41 +0000
Files and hashes: 1: 8wb-NwIWx_2gv_9rr5Dl3p3Xqdc.roa (hash: 32Fi6nwUZX9CqosBIo6WurIihzlTBMG77RVVRRD5m4A=)
2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: Up+nSJchjBoFYnrkD+7CB60QRMwTXQXGQaXTfUrQRqg=)
3: OLaCsdQ4sg-u5_SUOVqiRzJngxw.roa (hash: LbFlyjzKtWZ1y7kJgj0oynVYxTM3x3eGRVvy4xZ47Q0=)
4: QYCJdzvA_R6ZOVcD5qshTwEZ9p8.roa (hash: y87bUDl5fpfIu0/tcrwXPFrdyosHyMwLLF9BcN/7EKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4f:26:72:62:2b:2e:3f:2c:38:69:31:44:3a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Validity
Not Before: Mar 2 08:00:41 2026 GMT
Not After : Mar 3 08:00:41 2026 GMT
Subject: CN=278d5e382587ece0ba9ecadd70451af4d308fb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3f:ab:83:0a:16:01:12:8c:58:ef:6e:0f:48:
96:81:f0:01:c8:ab:55:93:50:8e:2b:22:11:d1:cb:
f0:da:d0:f9:31:12:4f:b2:45:d8:73:63:34:b3:68:
a7:9e:b8:4d:bd:59:77:22:32:9b:4f:ac:6f:80:96:
6f:ad:47:da:c2:38:6c:80:a9:5e:29:c5:d8:ac:4a:
fc:99:6d:cb:81:80:1e:77:90:5c:db:62:00:d0:e0:
45:30:42:08:13:6b:86:f2:ba:12:4a:c7:86:e2:1a:
97:a5:93:7c:10:9b:82:58:a2:d1:e6:ab:a1:e3:18:
f7:d7:2e:13:eb:fe:7f:3c:22:8d:94:c9:0a:6b:9d:
7d:6b:a9:f4:f5:c7:4f:a8:02:68:6d:0e:0e:84:41:
09:ad:b9:c6:2a:53:fe:af:60:f3:55:08:80:b7:b3:
48:26:71:d7:95:68:4f:1e:fd:f3:8e:30:e8:ee:ed:
75:77:dc:33:97:ec:7d:66:5b:04:84:fb:47:f8:22:
89:3f:25:19:7d:a0:9d:07:c6:09:b7:90:e5:72:48:
8a:c6:a4:e1:37:7a:f2:73:03:bb:d2:85:70:8b:70:
be:ff:7e:91:68:87:ab:07:a1:8a:b7:33:d7:c3:a9:
dc:1d:30:df:62:db:8d:dd:ee:2e:50:e8:93:e8:d1:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:5E:38:25:87:EC:E0:BA:9E:CA:DD:70:45:1A:F4:D3:08:FB:88
X509v3 Authority Key Identifier:
keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:bc:2f:5f:b1:59:a2:d1:c3:77:d0:95:24:24:be:0d:7d:
d4:0a:e8:36:0f:9b:7f:66:8e:6b:aa:ff:5f:24:0a:78:cf:5f:
3f:f6:44:29:33:b4:30:cc:0e:55:15:d4:ff:ab:7a:7f:b0:c5:
a3:c2:3f:e6:66:44:a5:ee:e6:c1:be:e4:57:08:8d:ea:f4:b8:
89:e1:e8:30:90:47:e1:52:b8:24:42:7c:f4:75:4c:53:58:b7:
4a:10:c1:e8:54:59:c6:3c:e4:3e:93:c6:16:97:9f:a9:ef:44:
6d:dc:83:72:8a:9c:02:8b:7a:85:13:d1:68:16:9f:81:06:de:
95:77:24:46:90:0e:c7:7a:5d:98:4a:0c:ff:60:6a:9a:c7:d8:
e3:d4:53:41:d9:27:93:31:3e:d1:de:41:e9:01:a2:2a:d6:98:
01:0a:31:da:93:b5:7d:ee:ca:06:de:41:89:67:52:2b:62:66:
72:12:21:2b:4f:7b:eb:93:2b:ba:de:14:c2:dc:00:38:de:28:
e0:0c:16:bf:f8:df:d4:ca:c7:15:03:d4:b4:f9:9e:51:08:70:
35:b1:eb:c6:0b:09:a2:fc:e2:38:bb:b9:af:0e:84:59:be:dc:
e3:d9:7f:cf:28:9c:76:eb:36:b3:87:47:ea:ee:e6:01:30:48:
78:d0:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:28 2026 by rpki-client