Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier: fZlEoiD6fbHgRg8UjpOeJU9+34DiEkZg81+/oEBpgjE=
Subject key identifier: 29:1E:AA:89:2A:8C:30:0E:CB:D8:F1:4E:59:F0:33:52:F4:E9:02:79
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 019CAEA3C7A3E6F8BA96ABF8655F533CFF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number: 0F9B
Signing time: Mon 02 Mar 2026 13:01:34 +0000
Manifest this update: Mon 02 Mar 2026 13:01:34 +0000
Manifest next update: Tue 03 Mar 2026 13:01:34 +0000
Files and hashes: 1: 5-dugcBchtXNBoxU8gQHmgyF3EY.roa (hash: d7JZa0tOh8DLsFD86kEU0q/71M3EzBvkFJCRMhMKG4c=)
2: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: sBb8z8ULvCNMl9xIvBOWYGdFL4xumtRhjQUFq3J98V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:c7:a3:e6:f8:ba:96:ab:f8:65:5f:53:3c:ff:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Mar 2 13:01:34 2026 GMT
Not After : Mar 3 13:01:34 2026 GMT
Subject: CN=291eaa892a8c300ecbd8f14e59f03352f4e90279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:57:ae:6f:85:47:b2:a6:ca:ae:69:43:c2:
79:97:a3:c8:c4:42:83:2e:13:a1:70:e0:a9:b0:77:
b2:df:5a:30:28:31:22:58:83:d9:9e:ef:0b:23:d1:
b0:19:f2:22:31:54:dc:d1:a0:5f:1e:df:5e:99:44:
e1:08:3a:09:a6:a6:f8:cd:09:71:18:c6:f0:0d:e3:
6f:e8:e9:5d:a2:60:ca:f5:31:fb:da:e6:28:07:3c:
02:d2:58:1e:2b:f2:90:b0:b3:0b:96:0e:51:e3:1e:
27:f3:1f:5f:b7:4a:ab:c2:79:89:be:f7:d2:0e:43:
b6:1a:62:32:0c:77:a4:b1:87:88:64:1c:fc:32:d2:
f1:5a:e9:cc:83:43:9c:c1:bd:17:01:34:c2:17:e1:
67:62:fe:d0:8f:c1:65:79:34:ef:b8:43:05:03:51:
6d:90:c4:52:2d:66:ad:08:0a:ac:b1:56:f7:b1:d6:
1c:b5:e5:90:0d:e4:57:4e:ad:63:8f:54:a5:e6:60:
88:f7:c0:a6:8b:55:05:4d:17:e3:d8:66:57:c5:d1:
ae:9e:65:0c:94:44:0c:b1:56:34:bd:cd:df:a6:c9:
fa:c9:3b:ef:3d:63:4c:ad:2d:f2:a2:f8:a1:e4:f5:
fb:73:56:b4:e3:57:94:94:bd:96:56:2f:20:5e:b8:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:AA:89:2A:8C:30:0E:CB:D8:F1:4E:59:F0:33:52:F4:E9:02:79
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:6d:4a:89:2b:2f:b8:8e:14:33:ce:04:7f:05:87:1c:c3:
3c:ed:f9:d7:61:0a:71:21:0f:d0:d9:aa:b4:9d:b5:da:66:d2:
2b:52:ba:9e:8d:6e:54:11:32:22:c7:7f:db:6a:eb:92:51:3e:
18:2e:0d:35:91:e5:f1:ef:a9:32:af:b1:2e:da:f9:e3:08:7a:
79:c1:e1:1e:a8:f2:a6:df:c0:74:c2:97:32:ab:f9:e1:7a:b3:
d3:33:92:8e:ca:43:8d:3c:6b:0f:12:31:ee:2e:c1:97:33:63:
d9:5f:e6:86:0b:f5:d5:9e:96:7d:57:2f:8c:d0:4d:28:c3:e8:
23:b5:b6:53:03:5f:b1:49:f2:4e:19:ae:4c:a4:bb:38:f4:4a:
78:fe:31:c2:6d:a9:90:c9:25:4f:2b:eb:be:0e:8e:d3:9f:b9:
06:40:42:53:f3:89:58:82:8b:ed:66:c3:e1:42:8f:df:e8:8a:
b3:39:1a:6c:1e:c9:40:67:68:3b:25:95:04:3e:50:a2:37:6d:
c5:ac:9f:99:fb:ee:f6:c6:9d:28:a0:89:b0:d3:15:e6:f6:1b:
eb:8c:77:0f:35:18:2e:ac:3e:60:87:4b:45:39:44:d0:b8:4e:
e7:ae:5e:d5:3c:ff:2a:d3:f7:1d:6a:11:4d:37:cf:70:ff:71:
f2:4c:f0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:56 2026 by rpki-client