Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: lZqXKlIx3nPQXI7W/t43X17QXYsoyafLQdZFzH0sPPg=
Subject key identifier: 01:CD:A3:2B:E7:8B:D3:60:0A:B3:E4:60:F0:FE:81:47:76:FF:3A:E7
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 019D37C0E8F3E03DDBB4537BC799D62D8205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 0B80
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: BSU+L+siPpC07QyBrCO01iAng39kKQDeq0fYf1pfYw4=)
2: zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa (hash: Mr6zA1SBW1abbeTreFoPgkXQSAh5HCSCpxdgGGoFjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e8:f3:e0:3d:db:b4:53:7b:c7:99:d6:2d:82:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=01cda32be78bd3600ab3e460f0fe814776ff3ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:16:e3:7f:95:9c:25:32:7c:81:2e:75:b2:
8a:06:9f:3e:85:a1:0c:a5:b5:59:88:c1:9d:2c:94:
dc:c7:15:7f:28:1e:2d:51:d7:1d:17:46:b9:77:b9:
c7:67:32:a2:b9:5c:92:95:15:72:2f:44:10:0b:1f:
67:43:49:3f:4a:a5:25:b2:32:59:f8:99:52:42:77:
58:7d:d2:7b:72:30:1e:53:d7:4d:19:74:2b:ea:5e:
fe:b7:b8:5a:38:82:bc:fa:66:77:e5:11:d5:1e:52:
f1:9c:99:ad:79:eb:ef:df:d5:86:f7:96:44:de:04:
ef:27:16:ca:8f:d2:fe:3d:37:82:71:d1:81:06:2d:
3f:7e:67:ad:5f:88:dc:92:ea:99:0f:46:2d:d8:f2:
5c:3f:f9:4b:04:cb:cf:61:d0:83:b4:f1:eb:4c:ad:
1b:fa:68:03:e3:90:80:6a:8c:30:2b:e5:9f:c9:e2:
43:fa:a2:a5:85:b8:4c:73:1c:43:52:3b:50:d9:5f:
fb:32:38:2c:1f:6f:62:c1:e7:9e:e8:58:14:e2:ca:
4d:13:7c:a8:11:ed:ec:d3:0e:80:d6:46:b1:d4:1f:
9c:57:86:92:ca:ff:7b:0a:46:5c:23:17:f6:fa:e2:
be:da:2a:d5:a8:1d:3d:44:5f:b9:97:23:05:7b:34:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CD:A3:2B:E7:8B:D3:60:0A:B3:E4:60:F0:FE:81:47:76:FF:3A:E7
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9d:f6:5a:5a:44:97:d0:72:3e:32:74:b9:16:81:d2:2e:90:
8f:e8:f4:4a:cc:3a:d8:ce:97:bc:20:a9:16:fc:da:2b:d8:d9:
b1:96:16:04:62:75:c8:ba:db:eb:f0:66:67:42:6d:4c:04:0c:
8e:36:a9:ea:6f:1b:2d:07:46:6b:d7:f0:0e:54:f3:f5:51:38:
14:10:af:df:ca:c1:c9:f2:71:c2:16:19:dd:f0:96:5f:e4:42:
56:91:c4:71:b0:fd:0e:26:49:94:fb:c5:3c:61:e5:d1:e9:e4:
58:0d:dd:e6:11:7d:bd:17:29:15:7b:6e:4f:91:83:54:0b:1e:
3b:52:e0:27:89:82:18:9b:39:e8:24:db:50:e0:6e:00:ee:2a:
39:af:08:22:bd:99:56:7f:49:36:16:69:e6:2a:23:a0:bb:8c:
3f:52:49:6b:d7:e9:8e:e2:19:cf:5f:31:59:62:bf:ed:2a:88:
1d:9b:a5:a4:fe:03:fd:ee:64:40:88:e7:7e:51:a8:ed:ae:bc:
59:fd:61:f4:f8:71:7d:a9:91:5b:9f:94:be:48:d6:5a:97:94:
ab:11:d3:0e:d9:e9:8e:65:86:e5:e8:dc:df:01:7c:72:94:d0:
bd:fd:68:b1:c9:df:46:a3:f3:b6:18:7e:39:8c:4b:b2:68:92:
a8:4a:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:47 2026 by rpki-client