Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: tD7ZCAxKKlQbvpOmel2nuXmRKBvY+Ksa6cIA9PuPE0E=
Subject key identifier: F4:82:AF:50:0B:09:D2:AA:FD:AE:90:97:6E:29:21:82:CA:5D:73:79
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 019CAAFD6F153C632962C9E89659FB5AA7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 1429
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: jispgru9Q4t6sawE42wYgPOMato.crl (hash: G0/Vm1quXDo878NEBQa3Ew9msZb9fi2QnvvqtXOh218=)
2: rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (hash: coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6f:15:3c:63:29:62:c9:e8:96:59:fb:5a:a7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=f482af500b09d2aafdae90976e292182ca5d7379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:ce:2e:fe:3a:a9:80:0f:1f:8b:17:69:6d:
c5:80:50:2f:ea:99:8b:a7:23:98:4b:3a:a9:51:c0:
c4:35:99:a8:22:62:4b:c1:b9:4e:9b:92:f8:65:a7:
52:55:9c:45:0f:cc:03:13:3f:89:47:be:8f:7c:6b:
b5:f0:c5:24:f8:5f:96:f0:23:5e:67:ed:fd:82:19:
a8:6f:be:0e:2a:0f:3a:6f:c1:f8:c1:c7:4d:02:97:
24:af:37:9c:a2:b4:b3:67:c3:6d:48:9a:a8:82:5c:
a9:e2:5f:ba:c8:82:b4:af:da:31:3c:67:c0:ef:8b:
fe:49:e8:de:92:95:9a:0f:7a:42:84:9e:26:d5:e1:
46:2f:1d:2f:58:b8:a7:7c:cd:f9:32:03:10:90:ae:
92:48:f7:e8:a3:09:08:98:47:72:cc:e8:14:36:a7:
e4:04:dc:46:10:f6:d9:26:92:c5:b5:a0:b2:68:4a:
7e:d4:80:68:98:1e:f2:fb:14:a4:9d:7c:7f:d2:2c:
ed:0c:54:d8:2f:a8:b2:83:a6:c4:30:6b:49:8c:41:
9c:e0:25:05:5e:6a:84:d9:06:78:f6:1c:cd:0f:97:
18:37:ec:5c:40:ef:7a:8e:fe:0e:70:a5:bf:88:e5:
cd:ab:e2:4b:51:cd:16:e7:2e:fb:a9:1f:c4:ea:f2:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:AF:50:0B:09:D2:AA:FD:AE:90:97:6E:29:21:82:CA:5D:73:79
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:07:21:97:f2:52:75:40:ac:bb:06:cd:55:32:58:34:63:f4:
6a:6f:08:c1:cb:4e:72:3e:3c:7f:5b:0e:82:44:55:cf:f5:9a:
09:27:93:18:a0:15:09:c3:73:4b:6f:f4:92:92:af:eb:02:16:
9c:f0:9d:3d:a1:bc:30:a9:4f:cc:76:3a:59:48:82:69:1e:e7:
19:d4:13:4f:c5:30:7e:c0:21:32:dc:22:82:f8:e7:83:1b:c3:
a2:16:68:7b:70:f9:4a:ac:89:57:5b:f9:cd:df:cd:6b:32:64:
42:a0:9c:50:72:a3:4c:86:01:ec:35:a2:f4:b3:12:c9:37:33:
e4:26:cd:7f:9e:2c:4f:b8:e6:06:2b:c9:0f:5a:14:4a:e0:b2:
aa:e3:65:d3:a6:00:75:5f:18:22:59:15:3b:cb:62:69:aa:4d:
f3:89:aa:19:77:8d:0f:18:d5:00:33:45:46:c8:bd:45:fc:6f:
d0:ca:ae:fc:4c:9e:dc:72:dd:14:bd:9a:66:04:b3:b6:2b:75:
5e:01:b5:c1:84:ce:38:91:22:e1:06:78:12:00:4d:3a:af:57:
ed:c2:9f:cf:c1:8e:c3:15:b1:ac:80:54:26:95:76:ea:a4:01:
9a:ca:af:80:fa:50:cf:13:24:be:a4:a7:0c:6c:8d:e4:be:4e:
72:59:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:11 2026 by rpki-client