
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: nKJfXOwFy5+8oDXXwgYpUcYAGipynQ5NoDDeNBpaqHA=
Subject key identifier: AD:DD:E7:3B:F9:13:80:5F:4C:E0:4A:92:0C:99:C2:81:D0:3E:18:B2
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 019D39AED2BB21C0839201DAAC079324A363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 13:00:51 +0000
Manifest this update: Sun 29 Mar 2026 13:00:51 +0000
Manifest next update: Mon 30 Mar 2026 13:00:51 +0000
Files and hashes: 1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: D3G2BLD45eCnb+hjLI+VreWmEKTPXlpVEvaQZVL84Cc=)
3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d2:bb:21:c0:83:92:01:da:ac:07:93:24:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Mar 29 13:00:51 2026 GMT
Not After : Mar 30 13:00:51 2026 GMT
Subject: CN=addde73bf913805f4ce04a920c99c281d03e18b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:3c:88:0b:3b:57:65:ee:e7:32:cc:80:dd:
5d:ba:55:3b:82:fd:16:01:3c:81:87:a2:58:4f:5e:
17:4e:89:2e:33:7c:81:70:6c:a2:41:8d:ec:34:eb:
7e:3c:40:d4:a6:51:9b:73:d2:a3:0e:0a:73:9e:ef:
84:60:df:8d:11:9c:d6:51:84:d0:d7:a3:ba:ec:80:
94:1e:37:d1:02:47:7f:8b:d6:5d:7e:50:07:20:7e:
c5:b8:b0:f2:47:11:52:78:f9:9d:99:52:e2:3a:56:
3e:17:c9:a3:d7:02:20:38:95:5d:85:a6:19:43:8e:
6c:83:52:0f:c7:4e:05:d6:1c:bd:36:ac:e2:0c:80:
ab:c1:51:04:2d:af:7b:c4:61:94:b2:c0:c2:2f:c3:
36:1b:48:63:0a:74:14:f0:6a:a7:af:c3:00:3a:0c:
ee:3e:d3:eb:bb:05:d1:63:18:30:7e:5c:c4:23:4c:
21:18:b4:53:4c:05:de:7a:ef:ba:af:f0:66:0f:31:
f3:79:12:c4:ac:48:4f:c1:c9:f2:ad:90:de:5a:42:
e2:32:02:73:58:02:fb:6f:7b:50:f2:a3:18:91:ea:
00:b9:49:fd:e7:0b:b2:02:42:5a:9b:4e:bd:11:36:
8e:b8:32:fd:68:6f:6b:68:97:b8:20:44:9c:05:34:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DD:E7:3B:F9:13:80:5F:4C:E0:4A:92:0C:99:C2:81:D0:3E:18:B2
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e4:41:33:86:6d:9b:92:8c:78:73:20:19:d3:d0:8e:f7:85:
0e:97:23:40:37:26:96:4e:c4:b2:7b:85:ae:65:9d:32:f0:85:
ee:07:7f:c8:f7:02:16:12:cd:a5:54:92:fe:e3:71:9f:ab:23:
4b:76:4e:bc:21:e2:d1:a2:c3:44:ff:c6:93:65:ef:b1:07:e9:
9a:e7:18:ab:e5:a0:7b:eb:e1:9b:a6:31:55:d4:e9:e8:5e:e7:
f3:8a:c0:fd:45:74:9b:57:1a:98:b9:a8:42:6c:8e:3e:08:e0:
0e:7b:41:91:ef:87:b7:19:ac:0c:b1:c0:52:4a:13:da:9a:8b:
50:bd:45:1f:0f:1c:74:f7:e3:dc:3b:02:b8:8a:53:46:1a:6b:
d6:9b:bb:20:cc:0a:5c:e2:04:9b:6b:c8:70:36:57:e8:fb:4e:
d9:d8:f5:fd:27:aa:67:60:8b:c3:73:e2:da:8c:29:aa:94:89:
35:1f:70:bd:cb:2c:4b:ef:19:a3:5d:f8:e8:92:24:af:0e:39:
f0:69:bf:20:37:dd:d2:3e:c9:1a:b0:02:d5:5f:36:e6:d3:d8:
c3:6d:df:a8:65:91:cc:4f:71:77:c9:d6:4f:d5:91:9a:c1:32:
2e:9a:9a:91:b3:f0:8a:f3:20:8f:f5:86:bb:1e:e8:e2:a5:9e:
32:4f:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:48:28 2026 by rpki-client