Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: F+4pCZHZtr3bIGwWUvVA9CiywOQgIvip1vULZdX0Y4w=
Subject key identifier: CC:B8:AE:32:6D:91:E4:08:B4:A6:06:51:58:9A:A3:AC:40:68:98:56
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 019CAD22EB03A911C1B58C9139695D2DD227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:01:12 +0000
Manifest this update: Mon 02 Mar 2026 06:01:12 +0000
Manifest next update: Tue 03 Mar 2026 06:01:12 +0000
Files and hashes: 1: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: 0idOPJM3YsyUYduNMHURm5IVOsde9M3EYeM4qvA61YM=)
2: w5L3FIDQ5dVgBosrxy8T9UB3MsY.roa (hash: q5Br3i/0tMxLM8djHNXqPKfHBcAZeWinp2LOD2kGfo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:eb:03:a9:11:c1:b5:8c:91:39:69:5d:2d:d2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Mar 2 06:01:12 2026 GMT
Not After : Mar 3 06:01:12 2026 GMT
Subject: CN=ccb8ae326d91e408b4a60651589aa3ac40689856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:69:f8:4b:e7:f0:da:38:b4:b6:d8:9a:7a:
0c:43:4a:47:55:cc:91:d0:1c:bb:a3:54:c8:03:12:
9c:97:8c:57:a9:7f:f1:d9:60:32:b2:30:c6:9b:7f:
b9:7e:c4:03:76:14:5b:ea:54:34:46:75:e7:cc:62:
ba:62:41:01:89:69:cf:e1:66:f6:49:a1:59:0d:a4:
6a:a2:c8:80:2b:da:f4:11:3b:cc:be:d3:85:e6:62:
44:25:1e:d7:3b:3b:b1:ab:1f:90:76:36:7d:44:cd:
37:1a:46:37:09:1f:f4:86:21:01:fb:dc:7d:16:39:
6f:97:81:98:91:50:d9:85:6f:28:3b:53:54:12:b5:
16:da:7b:cc:d7:6c:ac:9c:6b:d8:41:58:5f:3a:1a:
2f:3d:10:f8:77:e6:b7:b9:b6:71:88:27:14:cb:f0:
21:41:a7:7d:43:13:5d:2d:c4:98:f5:35:d6:c7:8f:
c2:2f:03:3e:db:ab:70:ea:27:de:1e:af:7d:c6:99:
12:4e:40:48:7d:fc:f0:d2:78:79:b8:41:4a:1a:0f:
e6:eb:91:d7:ed:b5:af:f7:60:43:6c:b2:63:1f:59:
17:4a:d3:61:c8:ce:29:5d:9a:f1:8a:31:8c:8f:c8:
1a:46:dd:e3:76:78:5f:52:81:f2:9b:4b:9b:e2:5e:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B8:AE:32:6D:91:E4:08:B4:A6:06:51:58:9A:A3:AC:40:68:98:56
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:40:61:d9:67:82:81:eb:ca:ee:a7:15:b3:2d:6b:3f:ab:92:
04:6e:03:0d:35:58:6e:cc:73:64:3e:5f:02:e4:4b:5b:67:b8:
ab:5e:fe:df:0c:27:16:12:4f:04:3e:92:a3:f5:0e:67:d4:49:
f9:ec:89:ab:42:76:db:e6:8d:46:99:0e:d7:df:00:0a:79:32:
51:73:b9:9e:fe:15:cf:f3:3e:7e:0b:43:c5:50:3f:38:65:9c:
1d:12:aa:11:36:7e:93:5f:e2:a9:20:4d:82:bc:06:8a:e6:a3:
25:2e:c5:2b:02:a9:e1:8b:28:3e:15:20:17:8c:e7:98:99:65:
91:7b:d2:e5:f9:3c:70:ca:aa:fa:7b:c0:25:20:19:20:9a:15:
89:d1:06:79:fb:32:45:71:6f:22:54:b8:6b:cb:fa:cd:51:62:
fa:a9:3d:0d:75:05:fc:58:fc:18:f9:ad:df:6c:18:12:4e:0e:
5b:d8:ef:c3:2d:56:3f:1d:02:e6:19:61:39:ee:f7:38:76:db:
5c:f3:09:14:5b:bd:d2:fc:46:28:21:1b:46:bd:87:20:fd:e7:
4b:79:c6:68:87:ae:33:dd:49:ad:29:8b:f7:dd:c9:8b:a4:a0:
08:58:a6:7d:c4:30:c0:67:4c:7c:4a:7a:77:17:f1:7b:52:c0:
5d:06:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:34 2026 by rpki-client