
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: jT2lGhJuT1v2pUEbSyQ955gesr2kI1tux6cd8bczads=
Subject key identifier: 61:EF:C9:57:97:C3:5B:58:D4:E4:3F:FB:6E:1A:B2:B6:FB:62:5A:59
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019D37C0D645B73E049B096BA37E1E41248C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: 0484
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: TnQKWeQupyg_M_HldmwYeDDgvhk.roa (hash: M0Vpxy4Nn+gAxwO25JaUvS5hbetyj91H/ndxZ7DoUCo=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: COh3HSAw3FOX+uDbeOq7L+SZGF+skQ5oDWdlrou2JfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d6:45:b7:3e:04:9b:09:6b:a3:7e:1e:41:24:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=61efc95797c35b58d4e43ffb6e1ab2b6fb625a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:2e:b2:25:5a:99:99:9e:40:82:14:a1:90:
d1:92:4a:a0:46:e7:30:0e:27:a4:d5:d7:19:ab:de:
bc:ca:a6:bd:c9:3b:d7:ee:48:2a:6e:b8:75:8a:ba:
cf:5f:eb:9a:3e:ac:84:37:b0:22:12:74:59:fd:b7:
49:30:09:95:51:5d:a4:5d:74:f3:e4:ed:f3:67:de:
da:19:94:cb:57:36:89:bb:0b:33:69:9f:b1:bf:ce:
58:40:9d:6f:2f:44:ae:2d:f3:89:91:93:b1:f5:7e:
63:48:d0:97:40:58:af:ac:e7:fe:42:eb:14:8f:a4:
89:73:d2:a6:7f:a8:a2:af:36:5f:ab:d8:09:5e:22:
32:5b:46:58:0b:02:af:64:6a:8c:aa:e3:49:fc:3d:
f5:24:4a:f4:6a:0b:40:2c:40:b3:36:f5:01:42:55:
86:7b:82:78:55:66:23:9b:ce:33:ab:b9:42:e4:7c:
91:f5:23:de:c4:1f:66:c1:ba:8c:f9:7f:17:56:19:
b6:df:94:02:20:d6:00:d5:80:54:b7:69:b9:e4:20:
82:5e:1a:54:71:b1:bf:69:2f:9f:78:0c:7e:cd:82:
da:24:67:c6:68:56:84:a9:e5:78:aa:01:74:40:64:
33:88:78:1c:c9:0a:31:23:64:eb:fd:36:80:d9:54:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:C9:57:97:C3:5B:58:D4:E4:3F:FB:6E:1A:B2:B6:FB:62:5A:59
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d9:b1:83:42:ce:3d:82:af:d3:14:7d:f0:cd:41:11:9b:d5:
0e:23:bb:8a:89:b7:40:3b:ec:0d:bb:0d:62:f5:d2:d2:65:93:
36:ba:65:b2:19:01:ad:b8:01:d1:c9:67:3e:df:7b:7e:31:b4:
fe:0b:a3:ce:b8:cb:69:de:59:de:6e:0b:7b:09:dc:14:ee:fe:
3d:f3:44:b7:e3:46:0e:61:c9:b7:da:a9:82:eb:18:6f:df:5f:
2f:b8:bb:c4:47:0c:f1:87:8a:de:89:f7:43:81:19:db:3e:9f:
97:12:60:85:da:7c:9c:64:48:09:3c:bc:d2:b1:8d:0a:f9:5c:
da:4e:1e:f7:62:6e:7e:a4:9e:e9:1e:c3:31:26:b4:5c:1c:b0:
57:0c:b1:b1:13:d1:8c:6b:63:be:6d:10:f1:fd:56:fb:eb:0f:
83:2f:87:db:51:2d:f6:3b:23:b9:62:b3:bc:3f:58:cb:e9:21:
7e:cd:64:58:6f:79:bc:82:82:b7:2e:80:a4:e1:98:60:85:1e:
92:3c:99:c9:d4:18:30:a9:eb:27:c9:fd:d0:39:61:47:43:03:
da:60:37:6a:de:86:95:4f:ee:8c:b5:83:10:64:d9:14:f0:16:
a7:d8:7e:2e:b0:c6:84:f9:99:4d:c3:6a:bb:d5:04:f5:9a:e2:
59:23:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:24 2026 by rpki-client