Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier: 2zYzngUPabyvpoFF1niO0MAtLCgNF8SIPXer0Q+kFLM=
Subject key identifier: 42:F4:F8:33:F2:22:E7:A9:2C:09:E5:02:A5:DC:FF:B0:D9:C1:AB:DC
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 019D386621873B39BB24EAEBE06371BEC487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: 4X9bzbTjxxEC-csNdknM31iR6Vk.roa (hash: g5Y0JUJxW/m2Y8F30up7Txp8xJPm4qz4gVK4xJRO0QQ=)
2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: +upcliMTCJz4T0y5rIhI21wP7hYONFajT6Fbh6DmSsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:21:87:3b:39:bb:24:ea:eb:e0:63:71:be:c4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=42f4f833f222e7a92c09e502a5dcffb0d9c1abdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:aa:a5:be:9b:1e:18:28:a1:d5:9e:db:fc:
c6:13:5f:a3:79:d4:f3:7a:77:d3:f2:0e:b4:87:23:
54:dc:a0:4f:9f:b3:b9:0c:ee:bd:42:61:3f:75:13:
54:51:63:2e:89:fc:07:ea:ae:1a:94:df:cd:53:be:
65:cc:25:85:4b:12:88:86:3b:00:d7:47:ad:db:8c:
70:cc:16:c0:c8:f0:3a:8d:58:15:ef:e6:b1:25:e2:
0b:c3:d4:b7:ff:bd:9a:4b:6f:62:8b:3a:bf:87:eb:
3c:a5:12:bc:61:36:e3:47:cd:23:14:e5:5a:22:8d:
40:08:3f:61:c9:78:67:25:50:70:5f:97:b1:9b:6a:
94:f2:24:84:c1:42:c3:ad:d4:fb:18:c6:bd:d1:7c:
20:96:7a:1b:77:b2:3f:19:b7:41:52:d8:ef:62:ad:
9b:0b:b7:5c:39:92:46:5b:f0:85:f8:41:9e:cf:ce:
92:6f:cb:8c:f8:39:74:a9:97:ff:a6:d2:74:6b:0d:
82:16:7c:e8:8e:59:6c:71:7c:6b:ca:d5:4d:5f:4e:
bb:6d:ee:62:52:ff:bf:a8:21:e1:d7:ab:18:18:a7:
98:fd:a1:74:fc:24:9f:b1:92:7f:f8:6b:14:25:05:
9c:fe:fe:12:6a:d0:23:c5:d1:08:be:af:b8:19:6d:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:F8:33:F2:22:E7:A9:2C:09:E5:02:A5:DC:FF:B0:D9:C1:AB:DC
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:7c:d5:33:09:88:ee:50:8e:eb:d8:dc:d5:f4:d3:3e:2e:
9e:3d:65:7a:a7:d0:7a:e0:ed:bd:26:d4:0e:6d:2b:11:52:d5:
3d:a4:f1:59:a6:54:66:46:07:e9:ad:7e:0c:8e:b8:a4:f3:3a:
07:50:b1:3b:eb:e5:4d:74:05:49:f7:a6:f9:01:71:87:d4:c1:
62:ef:ee:d4:a3:38:98:c5:2a:a7:38:b0:f1:d8:4f:a8:f0:45:
00:c7:78:20:44:6d:9f:a3:46:a4:80:1b:91:2f:78:4b:c6:6b:
5a:7a:80:04:95:97:ef:27:c0:35:cf:4c:ff:f4:04:b3:e1:0c:
a4:26:30:07:77:ad:36:61:a6:df:17:0b:09:ac:85:f3:18:7b:
5b:2e:2f:16:9c:43:32:c7:6f:1a:09:25:b0:89:17:c5:b7:b7:
07:aa:02:b7:dd:8c:ca:61:f9:32:59:cb:85:c2:a6:09:cb:89:
3e:ef:b0:16:69:b5:19:b2:f2:f9:fd:d6:f4:1c:5a:17:76:18:
bd:62:66:9a:06:d8:76:28:97:f7:d4:da:16:ed:3a:5f:7a:c2:
47:40:d7:46:d8:80:2c:ab:12:89:27:ff:c0:01:cc:7e:70:e4:
c4:90:c4:dd:f0:1f:0e:7e:20:23:e1:d0:b1:e3:f0:01:04:50:
5a:aa:50:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZiGHOzm7JOrr4GNxvsSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjQ5YmFmMTdmMDZjMzY0YTAwZjhlNjRjODkxYzUzNzI5
ZjdhMmYwHhcNMjYwMzI5MDcwMTUwWhcNMjYwMzMwMDcwMTUwWjAzMTEwLwYDVQQD
Eyg0MmY0ZjgzM2YyMjJlN2E5MmMwOWU1MDJhNWRjZmZiMGQ5YzFhYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttOqpb6bHhgoodWe2/zGE1+jedTz
enfT8g60hyNU3KBPn7O5DO69QmE/dRNUUWMuifwH6q4alN/NU75lzCWFSxKIhjsA
10et24xwzBbAyPA6jVgV7+axJeILw9S3/72aS29iizq/h+s8pRK8YTbjR80jFOVa
Io1ACD9hyXhnJVBwX5exm2qU8iSEwULDrdT7GMa90Xwglnobd7I/GbdBUtjvYq2b
C7dcOZJGW/CF+EGez86Sb8uM+Dl0qZf/ptJ0aw2CFnzojllscXxrytVNX067be5i
Uv+/qCHh16sYGKeY/aF0/CSfsZJ/+GsUJQWc/v4SatAjxdEIvq+4GW3LkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL0+DPyIuepLAnlAqXc/7DZwavcMB8GA1UdIwQY
MBaAFI20m68X8Gw2SgD45kyJHFNyn3ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQt
ODUxNzNlNTdlYjUyLzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQtODUxNzNlNTdlYjUy
LzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgF81TMJ
iO5QjuvY3NX00z4unj1leqfQeuDtvSbUDm0rEVLVPaTxWaZUZkYH6a1+DI64pPM6
B1CxO+vlTXQFSfem+QFxh9TBYu/u1KM4mMUqpziw8dhPqPBFAMd4IERtn6NGpIAb
kS94S8ZrWnqABJWX7yfANc9M//QEs+EMpCYwB3etNmGm3xcLCayF8xh7Wy4vFpxD
MsdvGgklsIkXxbe3B6oCt92MymH5MlnLhcKmCcuJPu+wFmm1GbLy+f3W9BxaF3YY
vWJmmgbYdiiX99TaFu06X3rCR0DXRtiALKsSiSf/wAHMfnDkxJDE3fAfDn4gI+HQ
sePwAQRQWqpQcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:50 2026 by rpki-client