Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: bEPC4g3gfDjWOhg/rhjKrfK8RRi7nKzmhW4+54ZRjhg=
Subject key identifier: 1C:7A:14:6E:D1:46:21:1D:CF:F6:87:9A:45:71:FD:61:A7:EE:9F:33
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 019CE0D97781CB42F1D91AD30FB036FB8EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 1356
Signing time: Thu 12 Mar 2026 07:01:14 +0000
Manifest this update: Thu 12 Mar 2026 07:01:14 +0000
Manifest next update: Fri 13 Mar 2026 07:01:14 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: rqWvR4I5ptPF+96o/IGaOT05oY1W/V7a9Dxh23XQK4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e0:d9:77:81:cb:42:f1:d9:1a:d3:0f:b0:36:fb:8e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Mar 12 07:01:14 2026 GMT
Not After : Mar 13 07:01:14 2026 GMT
Subject: CN=1c7a146ed146211dcff6879a4571fd61a7ee9f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:47:09:91:e0:cc:d2:ab:66:b1:57:06:dd:
04:73:ca:a1:2c:4e:54:64:f3:7e:d3:5b:c3:95:cf:
38:c7:18:0b:16:88:ef:ac:6a:0c:2b:a7:cf:3c:ec:
f6:67:7a:00:e2:2b:c4:f5:7a:43:a6:a7:df:52:f6:
41:ec:d1:d6:5e:d9:2c:ed:ff:b8:d0:e9:b8:d3:4d:
41:b9:17:10:14:e3:4c:4c:1c:62:7d:ee:39:2e:14:
5e:6b:a4:24:f6:59:e1:fb:1f:12:44:ac:66:cd:f8:
63:f8:ed:93:b5:4f:42:53:57:61:80:c6:52:e1:e7:
df:ef:5d:52:57:25:05:ee:c4:22:ed:e8:0f:fa:fd:
81:65:4e:36:05:b7:97:ce:01:ec:32:d7:e9:bf:1a:
e4:90:5a:c0:42:5c:6b:62:75:45:07:e7:27:32:64:
89:3f:78:a8:10:6a:d6:e2:83:6a:b1:42:44:e2:64:
82:51:86:3e:7a:8f:24:1c:ed:37:a9:58:4b:9f:86:
01:a7:01:02:d4:dd:0b:f1:36:54:fb:d0:31:92:d9:
7a:47:16:80:2a:d6:de:28:cf:5f:4a:f9:5e:5f:7e:
15:3f:ac:8a:d7:ad:e6:c5:73:5c:49:a2:9e:af:8e:
a6:57:00:f7:69:58:9e:a8:21:06:88:8f:fd:0b:47:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7A:14:6E:D1:46:21:1D:CF:F6:87:9A:45:71:FD:61:A7:EE:9F:33
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:b5:fb:b5:34:a7:f5:bd:38:92:d2:ce:41:71:ac:34:7c:
1a:06:e5:e8:41:c7:e0:ac:55:7c:bd:8d:cb:71:b1:35:e2:c2:
e3:83:dc:51:72:fd:65:32:6a:3a:0e:5f:4f:92:8a:39:c4:f7:
85:91:a6:84:9e:77:50:d6:ad:43:3a:11:0e:a3:cd:ea:47:7f:
6a:e1:6f:68:ca:05:31:5a:72:5d:ff:0e:f6:6f:15:2e:4b:e8:
f1:d8:fb:07:58:04:23:1b:c1:0f:b3:20:69:84:21:79:b6:22:
f3:fb:74:17:cf:53:d7:8b:c8:33:ee:06:ec:62:7c:81:2a:cd:
04:88:e8:69:5f:cb:27:e7:e5:c0:5b:b5:bb:e0:f1:b3:2c:8e:
8e:2a:ee:91:65:66:7b:91:9d:39:9b:04:8a:b5:ee:04:7c:81:
7a:77:81:00:44:f0:f3:dd:87:be:21:1a:bb:ac:17:84:a4:f7:
56:d7:9b:3a:7a:99:4c:a7:eb:4b:0b:8b:eb:fd:14:e2:2e:97:
41:e8:57:f6:9d:37:f4:c1:67:c6:bb:d5:8d:cc:15:b2:79:0e:
d3:7e:ab:e6:25:b0:60:e4:7c:1e:18:9c:3e:f0:94:8c:1b:58:
9c:20:c5:9e:45:f0:0b:39:9f:18:70:f9:16:fc:cd:29:8f:75:
c3:d4:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:17 2026 by rpki-client