Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File: JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier: qSKMakN/2TN4BVZ7k6L5abubSyxoMyV7SskEOATEVRk=
Subject key identifier: 8B:25:80:58:2E:AA:2F:0F:C0:C8:F7:C1:12:90:DD:14:9C:A1:61:D2
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial: 019D3909B332FE2C9FC74D531F859DC47329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: t/V6EmuzEOFQbRDK0QaxBmvFE08JwbMEoSDMlGT68yg=)
2: waZwL5p70K3eubkjn4rt16lrpmo.roa (hash: Yb1Set22MMS78/VHLDK1SdDRV6cNd11Qc3kiWPaHjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b3:32:fe:2c:9f:c7:4d:53:1f:85:9d:c4:73:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=8b2580582eaa2f0fc0c8f7c11290dd149ca161d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:22:34:1a:b0:97:ca:2e:58:3f:b4:ad:0b:
ca:93:f0:a5:2f:03:8a:42:61:9b:e3:c9:4f:2d:2b:
e4:47:b7:e9:46:ac:7d:b1:9c:ca:34:5c:ea:ca:f3:
7a:a6:d6:0a:28:ef:a1:56:a1:7a:d3:61:ac:81:36:
05:08:47:eb:f8:4d:d2:cd:05:a0:36:5b:bf:56:ce:
ca:a7:c9:fc:c4:87:66:47:d5:4d:9a:26:f9:a6:46:
4d:f5:79:2e:d4:ba:d4:df:25:98:71:90:73:ab:27:
ec:a2:81:be:a2:63:9e:9d:fe:68:b1:ae:1f:d7:77:
62:89:bb:f9:bf:44:a0:5e:0d:02:cb:d0:9c:32:f1:
b3:b5:30:88:58:27:5d:39:bb:a8:6c:8c:13:45:68:
ee:f5:b1:25:3c:fd:77:11:a2:62:a2:b8:bd:de:42:
4a:94:36:5a:42:40:d1:cb:63:30:08:00:49:7c:1b:
a0:a2:16:54:f5:8b:86:5a:2f:89:e4:8c:0e:c9:e3:
6b:ad:46:b7:63:40:f1:b9:8c:77:9f:99:ef:08:97:
15:7b:13:71:41:05:5e:00:f5:e0:0a:45:65:59:c5:
fc:bf:56:bd:a8:5f:03:0d:5c:ca:38:91:17:97:67:
c4:ff:e8:29:de:f2:63:6a:7b:a4:f1:84:c2:35:06:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:25:80:58:2E:AA:2F:0F:C0:C8:F7:C1:12:90:DD:14:9C:A1:61:D2
X509v3 Authority Key Identifier:
keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a1:39:a5:8a:36:58:5b:0c:3e:2e:f2:e1:7e:b6:43:50:f2:
f5:83:08:df:15:22:ea:a0:9b:1a:04:83:50:03:3d:cb:d1:99:
53:c6:33:33:6f:d2:d4:1e:79:42:d6:47:ef:73:86:88:f6:f6:
f3:3b:53:b1:95:5e:de:b7:fa:43:ba:b5:05:b1:21:f8:d3:22:
e4:63:9b:e3:f1:f3:82:5b:b3:cd:b3:6e:67:25:50:9b:af:0c:
60:8a:a5:04:56:6b:a7:4c:ed:a2:0e:75:e7:c8:5b:8c:18:85:
98:56:ab:48:be:84:ac:47:b9:19:9c:d9:23:dc:1d:a6:52:17:
ed:2c:70:12:1c:60:ba:16:0a:59:a7:90:9a:75:cd:ab:40:f4:
9e:85:ab:92:65:43:93:f7:47:9f:42:77:ed:08:58:0a:e2:b4:
a7:0f:71:32:8b:9e:a4:ca:64:82:72:ba:7b:8f:cd:ac:14:5e:
49:c0:63:6f:0b:a3:2d:f4:3d:0b:3b:7f:62:6b:b4:4f:87:c3:
60:3b:33:8d:76:15:32:1f:9e:35:14:09:75:d5:09:42:bb:33:
27:a3:05:a5:79:82:82:a7:ae:94:b6:66:00:95:08:80:19:5b:
a5:d4:fe:d2:38:4e:a4:cb:20:13:c8:8f:b3:fc:2d:65:e4:77:
0b:a3:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:36 2026 by rpki-client