Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: awY6Cn6XYPiZmOSNDNSrVks7w2bWD3ROUfJXTOCcUFc=
Subject key identifier: 05:57:E5:B1:2D:BE:C7:69:43:CA:92:F8:FD:F7:CA:E1:73:EC:D0:CE
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019CAD227C07DD9B3F523737DDC5EBE7F126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:44 +0000
Manifest this update: Mon 02 Mar 2026 06:00:44 +0000
Manifest next update: Tue 03 Mar 2026 06:00:44 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: 5StgWyYWPS9TE/bGAgJ4myPtNFYeSr+idagtY8l4Z+4=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:7c:07:dd:9b:3f:52:37:37:dd:c5:eb:e7:f1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Mar 2 06:00:44 2026 GMT
Not After : Mar 3 06:00:44 2026 GMT
Subject: CN=0557e5b12dbec76943ca92f8fdf7cae173ecd0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:b2:29:14:74:3c:a5:62:1f:19:c3:d3:fa:
71:57:64:ee:b7:23:68:b7:10:d0:ae:3b:d6:2e:10:
b1:7b:43:60:da:fa:f8:24:d7:53:84:88:e3:02:bc:
5c:28:c3:6c:f8:40:42:52:62:0e:61:89:cd:77:7b:
69:45:2a:90:fe:cb:1b:97:d1:f2:cd:ef:3a:cd:66:
57:d4:11:a9:e7:96:3d:3b:92:dc:5f:73:92:8e:f8:
6b:18:b9:56:e4:9d:85:3c:56:22:74:8a:5b:fd:0a:
9f:a3:d2:75:5b:2c:40:13:09:d6:cc:c2:2e:01:cb:
67:bc:5d:f1:7b:5b:c1:75:7b:ce:85:fc:79:fd:dc:
85:fd:9c:39:e0:00:26:5a:ad:50:81:fb:f1:61:06:
df:15:93:cd:3e:ba:b0:97:04:d1:cb:1d:c2:51:7a:
4f:85:a2:d5:29:cc:94:27:91:50:82:96:58:0f:80:
5c:91:96:3e:a7:9f:5c:04:20:50:57:45:06:ce:4a:
5f:c2:86:33:5b:39:a4:16:b0:e3:98:c7:2d:40:7d:
d5:99:1f:75:02:e2:25:c6:4b:8d:d7:9a:7f:c8:f0:
41:2d:7e:ee:d5:4a:71:35:9d:1e:22:77:47:58:e7:
c6:8b:6c:fe:28:a3:e1:54:6e:e2:41:15:5b:2f:e0:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:57:E5:B1:2D:BE:C7:69:43:CA:92:F8:FD:F7:CA:E1:73:EC:D0:CE
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:de:e6:dc:49:72:d7:78:eb:04:92:37:e1:30:c0:9c:7f:92:
3e:d3:4e:3d:04:3a:9d:34:ff:97:cf:13:22:e6:f4:8c:d7:42:
ca:9e:27:e3:84:53:7e:58:3c:d5:23:8c:95:0e:95:c8:c3:96:
39:57:07:ac:95:79:3a:ea:0b:80:d7:19:8c:0b:17:7a:d8:16:
1f:6e:3b:48:12:81:e6:ef:b9:c5:03:60:db:93:14:ca:89:1b:
c7:7e:1f:bb:83:72:05:f5:f2:a2:5b:5c:f8:0f:97:6f:a9:9b:
28:5b:24:2f:e3:d1:1f:f3:8a:8e:91:1b:e3:ef:17:3f:ef:51:
86:da:84:ff:41:e8:b1:97:48:51:01:e3:3f:18:d8:cf:37:92:
a1:74:96:20:2f:39:dd:46:63:fe:47:ee:af:33:69:71:56:e6:
f4:ff:b7:8c:fe:70:9a:29:27:2d:ea:e1:91:12:01:f8:16:f5:
8c:bc:90:46:18:e4:e1:66:96:58:3a:da:20:d5:7e:57:c7:e0:
d9:35:90:34:1b:c7:cc:43:07:23:2b:51:9d:d5:38:a9:aa:0d:
df:e2:e1:cf:b2:e4:28:5f:2a:66:a0:78:1e:2e:48:b5:b6:50:
ad:f2:58:e5:03:e3:67:7a:2c:c5:d6:20:25:f8:3a:de:b6:b5:
d2:ff:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:05 2026 by rpki-client