Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: fiIh/H+BBItPYL2JW6tCz0+WmVYhN9k9IdTzqpUVvAs=
Subject key identifier: 3C:4F:03:D6:E3:27:EB:45:3A:F8:19:24:F8:C5:C0:94:F3:F0:45:8C
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019CAA58DE8C08B923783CA03230557A3EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0B41
Signing time: Sun 01 Mar 2026 17:01:16 +0000
Manifest this update: Sun 01 Mar 2026 17:01:16 +0000
Manifest next update: Mon 02 Mar 2026 17:01:16 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: K8Ts+e6IRavP4ddph4UC21A+H3x/CrYQyWSY2LAyhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:de:8c:08:b9:23:78:3c:a0:32:30:55:7a:3e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Mar 1 17:01:16 2026 GMT
Not After : Mar 2 17:01:16 2026 GMT
Subject: CN=3c4f03d6e327eb453af81924f8c5c094f3f0458c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:4c:dd:26:65:23:1a:bc:81:65:f8:90:aa:
c4:b5:e8:64:ea:9a:0f:90:cc:b6:e7:a0:32:28:17:
e8:79:f9:37:d0:39:5d:d7:9d:5a:ce:2c:07:85:db:
cd:27:58:e4:2b:fe:d6:30:07:d4:09:43:17:b7:c0:
2f:3a:74:51:32:27:3d:4b:db:e0:30:17:8d:3c:63:
ea:80:55:d2:36:d1:8d:ef:2e:0b:8d:83:f4:c6:81:
3c:3a:98:11:18:83:45:08:46:9a:34:7b:0a:74:1a:
30:ba:3c:27:1a:85:28:71:61:73:d0:4f:c8:80:5e:
85:4f:8e:f6:7d:fc:12:1b:a3:4d:23:59:83:c5:ea:
4d:67:aa:b9:39:08:4a:6b:b3:91:8f:65:5e:b5:50:
20:03:90:84:e9:b1:52:4c:9d:25:b9:82:92:c5:78:
d9:77:cc:c8:6b:dc:99:9d:37:36:1e:85:7c:78:65:
8f:70:1c:c2:10:72:6d:d4:23:3e:b7:56:fb:5f:41:
a1:94:fd:e8:12:49:d3:72:0a:ab:70:d9:15:e9:ae:
b1:78:69:24:0f:cf:c5:81:9d:70:08:51:ad:be:bc:
1a:c7:c8:84:5c:5c:84:a2:90:52:be:e0:ce:50:75:
b8:24:d5:e6:4d:17:2d:9c:cf:75:71:82:c9:c0:dd:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:03:D6:E3:27:EB:45:3A:F8:19:24:F8:C5:C0:94:F3:F0:45:8C
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:69:b1:76:08:41:ff:15:75:53:df:5b:8a:9a:24:9a:f9:db:
81:fb:65:bf:33:31:99:45:12:53:d4:40:9f:35:6b:73:cb:8e:
46:c7:b5:0a:4f:ea:33:9d:30:d9:31:98:0b:d6:9c:e9:23:a1:
4d:60:e1:cc:33:52:d6:5d:e3:4d:b0:6b:de:5b:8e:94:5b:ce:
55:c8:2b:17:81:65:fc:2f:f1:4e:da:db:b6:b4:ea:fc:20:f7:
af:4a:72:77:88:76:0c:a2:ab:c7:50:4e:f2:e3:60:36:16:3c:
a1:4a:34:ae:7a:45:b2:51:84:f5:a0:34:93:52:c2:a9:26:53:
c7:74:3d:66:94:15:36:d4:e2:65:b3:29:9c:ec:5f:7d:3e:35:
bd:72:d5:65:5c:f5:3e:e7:e3:1c:eb:55:ad:96:d6:fb:3b:ee:
3c:c1:97:93:e1:f9:a1:83:4b:87:1c:73:7d:bf:4d:e8:af:11:
de:47:86:2f:db:f6:bc:fe:5a:42:ea:59:7e:a5:b2:e8:04:e6:
fc:fd:63:b5:bf:70:68:55:56:59:1e:25:c2:d8:85:ec:75:3c:
f2:d3:89:75:89:65:43:ad:4a:01:2c:fa:82:a4:16:3c:e2:8c:
58:e0:39:b4:89:ff:d6:ed:fd:8f:58:a1:bb:8a:20:4a:40:46:
09:fc:04:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:07 2026 by rpki-client