Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: cQXlxhpIx3pxl25hBRiIj2UOnIDnQGDSUTZrw/qbyvk=
Subject key identifier: BD:22:36:BF:E9:64:D1:E6:62:05:1D:A8:29:83:9D:B0:D5:67:AA:29
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019CE36BBCC92644365EF0B095A3FF3AB35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 15D1
Signing time: Thu 12 Mar 2026 19:00:14 +0000
Manifest this update: Thu 12 Mar 2026 19:00:14 +0000
Manifest next update: Fri 13 Mar 2026 19:00:14 +0000
Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: zmgq9AL948UsrZvsU4mcB2RCSjItqbnzxp4x2Qc19Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6b:bc:c9:26:44:36:5e:f0:b0:95:a3:ff:3a:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Mar 12 19:00:14 2026 GMT
Not After : Mar 13 19:00:14 2026 GMT
Subject: CN=bd2236bfe964d1e662051da829839db0d567aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:dd:c3:15:7d:1c:a8:85:d9:b0:3e:7c:da:
d2:2e:48:0f:34:67:00:44:fb:c9:43:20:40:5f:1d:
52:08:e1:09:19:c5:eb:25:fa:fc:b4:6e:1a:32:7c:
93:cb:5d:ad:d5:df:ab:ac:9d:25:93:84:83:d1:79:
c5:44:c5:5b:89:15:22:83:53:03:08:8b:cc:7a:26:
81:1f:6a:67:0a:3c:e6:7f:ae:89:25:22:a6:93:5d:
09:2e:5b:5d:9c:98:5e:27:9d:d4:82:49:cb:a0:ee:
8b:98:3c:9a:1a:20:bc:c1:16:e6:18:b2:cf:c3:9e:
8f:6c:46:fb:ca:30:c8:a4:8e:de:43:21:ee:6c:30:
68:95:3b:f2:bf:00:45:7b:22:fe:36:45:6b:c6:81:
da:2a:04:56:85:66:8d:3c:a5:ea:a1:7f:ef:1d:95:
67:ff:a2:96:0a:67:b3:a0:65:49:c1:dd:32:c2:48:
aa:fb:08:15:67:f5:79:53:d8:6d:6c:33:f6:81:c7:
e1:e9:e4:59:15:b3:d4:4b:40:f4:fd:2e:97:74:ca:
9c:e4:4f:be:06:82:fd:e1:4d:4f:09:f9:8a:0d:a0:
07:5d:f1:92:a1:65:97:7b:d8:59:63:87:c2:c0:1c:
9c:ab:59:c1:f3:5b:9c:6c:df:14:52:ad:8d:a5:f8:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:36:BF:E9:64:D1:E6:62:05:1D:A8:29:83:9D:B0:D5:67:AA:29
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d3:70:01:6c:12:9d:4a:4e:62:03:6b:c8:25:51:b4:e1:4d:
1b:57:63:43:70:3b:b3:1f:09:5f:e2:78:5d:3d:6c:7e:fc:e4:
ef:77:d7:26:31:dc:72:3d:92:57:d8:68:79:02:d9:2e:9d:2e:
39:d0:9e:7a:59:d3:f4:f9:1a:79:f0:a4:c1:d9:61:53:35:37:
5e:b6:65:43:c9:40:de:e7:5c:fa:da:2a:b9:cc:af:c5:d2:24:
8e:44:92:78:e7:37:e9:31:6e:8e:21:98:b2:af:ea:13:1d:c1:
66:9c:ba:ab:c0:b6:5b:33:86:b8:5e:76:d2:90:a2:bc:49:1f:
4a:8a:b9:b4:04:40:89:ee:fa:12:d9:e0:78:d7:54:55:df:9c:
b3:90:c5:4f:2b:2d:38:ae:6d:7d:06:4b:7e:9c:21:ce:c3:6a:
f5:cd:71:ff:41:87:d0:04:63:1b:c3:8b:6c:7e:ff:89:3f:8f:
1f:8f:24:66:fc:05:3e:07:1d:31:85:3d:e0:6f:c2:7d:e8:a5:
bd:62:4f:8b:40:da:cf:e3:0e:d4:a2:4e:2e:4a:91:9b:4b:ef:
13:78:a3:44:5e:a4:e4:2d:49:ce:d7:7b:8f:8c:2b:8b:5e:8c:
89:9d:b5:a0:29:be:f5:f1:c3:c8:c2:29:91:1c:a9:58:30:00:
5c:30:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:30:41 2026 by rpki-client