Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: aam1d2umvxRklWaST/5b4BUlO6/zCNLmgi/WYrQW5xQ=
Subject key identifier: 88:CD:6B:7A:35:16:28:D5:F6:CA:2E:AB:3B:82:DE:D0:DE:00:8A:51
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019CAC0FB90E5001713F25160E4CB42B96C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 171A
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (hash: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c=)
2: Fb1-dZNCLLAcnEB2Ti_7na8L3DI.roa (hash: drGKyU8ZStuTt2RE0qNyuAHVNHKysS8wlS5+BTY+Lpw=)
3: Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa (hash: NLBLl8XhEwUwmOEQuE68fLj2rtmpnyK8kpfDaShHB6o=)
4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: PhniJA3qAlm0sZ8scnyE2Qv/fMCR+Kpo8JLyifPQAhk=)
5: Q419CMj39itEx5d1rZmvp11tEJo.roa (hash: aVTyR4miZff0FyNpx215JRudcRdWaUXQlchw+P/x8P0=)
6: bLrhejxGzYlplxbqpieFMxs8DTo.roa (hash: CHc0tXNDgBxUAvjvHgZDJcY5ybMe0rKmbUth2iY5KUY=)
7: caT7i0Ho-ce70M9ACVatVgOV6EE.roa (hash: OVGWsWiY+37CUfHQZ+flCcNGvE7DfMZs+E/YKFAYsXI=)
8: h4EWMG2Dd54unrlyJO11e05TJek.roa (hash: bmr5lQGgTSTyLvAWa1p7TSXtQmQWDBHJeY7C8CEpo9w=)
9: x2carAIaVgKjSsDGLEB8OLFM8NE.roa (hash: rttqg5eKj+V5DoEj4lQNOSz4ZdWbLM3E0GMVNzsZGEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b9:0e:50:01:71:3f:25:16:0e:4c:b4:2b:96:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=88cd6b7a351628d5f6ca2eab3b82ded0de008a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:4f:57:ea:1e:31:7d:49:68:50:3f:81:d8:
40:7e:d4:aa:ff:1d:49:c4:ec:96:d4:9d:fb:d5:57:
ee:f6:f1:a7:5a:c8:b6:c6:01:6f:68:e0:14:09:55:
fa:1e:61:20:3d:5f:f8:31:d0:5b:f9:07:45:7a:b1:
f2:c9:aa:f1:8c:9a:88:67:28:21:7a:81:03:65:b5:
dd:e8:6c:54:4a:12:49:94:e3:18:2e:7a:1e:a8:85:
3e:3c:97:60:ad:2c:32:0e:58:60:c8:40:a3:4c:7b:
7c:38:1e:17:b4:ef:0f:7d:24:19:2e:38:05:3d:4f:
64:a2:d6:b5:b8:a0:c1:9c:17:24:8d:dd:15:fb:e8:
87:d3:30:d7:d0:ce:41:bd:3f:e9:42:f9:0c:00:97:
ea:09:42:7c:1d:2b:0a:4c:1a:06:8f:89:e2:8a:be:
b2:0b:14:78:f1:f3:09:0e:95:6d:08:5a:10:36:7e:
48:da:10:9d:6d:b9:62:64:7e:6a:d5:0b:71:50:36:
55:a5:f0:af:fd:19:8f:ee:1b:f7:fb:50:2e:1e:68:
e4:d0:5c:b4:01:f6:93:ef:e1:78:6e:90:23:9f:ae:
45:b3:42:b5:6f:68:ad:fc:3d:79:3a:7b:29:36:a1:
1e:2d:05:d7:db:14:36:f2:22:2a:6a:ea:89:f5:27:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CD:6B:7A:35:16:28:D5:F6:CA:2E:AB:3B:82:DE:D0:DE:00:8A:51
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:61:86:cc:29:fb:78:22:b7:93:55:66:ab:93:dd:8d:f8:03:
81:75:3c:6a:c7:00:17:7d:bf:47:ed:52:8e:4a:75:c2:a9:b0:
21:2c:38:55:a2:f6:e1:12:54:3e:26:be:2b:36:50:2c:46:c7:
9b:40:ee:2d:1a:44:7c:fc:d3:1f:ca:67:da:e8:a7:cb:90:9c:
17:c0:4e:9d:77:8c:73:67:aa:3f:bb:2b:f6:aa:18:43:3e:be:
f3:37:7a:ee:f5:45:1e:4a:05:d7:7b:1b:b2:3a:45:9d:35:98:
c7:a6:de:36:95:a9:4a:00:bb:e5:80:c3:0b:2f:76:2b:f4:b8:
33:ae:93:35:d7:f1:5c:0e:77:53:df:2c:87:74:b6:53:bd:10:
97:f0:1f:a9:94:49:66:47:31:78:dd:7f:94:26:c6:22:39:01:
d8:ba:08:3e:a9:1f:52:e1:f4:c5:be:cf:a4:f0:8c:07:32:99:
57:90:09:f3:49:4d:8b:17:ef:1a:1b:5d:78:12:c3:09:65:bb:
f7:8d:c9:09:cf:3e:11:11:40:b7:e1:b2:82:4e:a4:2e:cf:e7:
86:49:c0:ce:91:3f:d0:20:2b:2c:e9:4e:50:a4:85:10:16:ca:
f1:05:e8:9f:e7:e7:9e:e2:f7:63:e2:1c:91:0c:cb:67:c9:2b:
42:4a:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:28 2026 by rpki-client