Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier: UEeRWzqHgSpN8FvM4caOpMzQl4+Jy5b8mHDjrfQvTR4=
Subject key identifier: BE:79:C6:6E:F3:6F:FB:77:39:2B:44:92:A6:10:A6:04:57:34:FD:BF
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 019D38D361F0DC73CE94946AF0FC4B93DDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number: 05BC
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: Np2VeCA0za46WaMwCq5AiCS9fps.roa (hash: lQMOEsMg/PNxQNTWDe3yj7HDtXyMvTPb38KH4IbDlUE=)
2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: dNuMQ7Eha9sTteG/EBWPAGNXksSyOKLwGQehYBb3hfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:61:f0:dc:73:ce:94:94:6a:f0:fc:4b:93:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=be79c66ef36ffb77392b4492a610a6045734fdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:55:94:e0:d3:0a:b3:52:c8:ea:4d:f6:e1:
68:0a:52:37:ea:46:0f:db:37:68:0b:79:25:d8:38:
56:b5:7c:89:d1:69:f2:5d:26:35:d3:e3:4a:c9:62:
7a:21:86:20:4a:aa:ff:e8:8f:12:c5:dd:93:b2:54:
bf:e4:57:2b:1a:3d:20:0b:19:63:98:e1:0d:a3:9a:
d9:b8:b9:08:86:d4:7c:6b:5f:e5:10:e7:15:79:36:
f0:41:d2:11:c0:37:ad:2d:0a:76:cf:c1:11:ba:77:
f1:ec:d9:06:08:c4:0b:7e:5a:bd:43:a7:59:52:16:
89:a3:66:45:14:60:26:da:78:8f:02:4b:b3:d5:3f:
d9:4c:16:4f:47:b3:23:0d:79:6f:15:c2:43:9d:d8:
a1:74:48:27:33:b2:e3:df:b9:7f:00:60:8d:06:be:
69:f2:f8:48:e0:dc:9a:09:16:40:a8:e5:ea:6b:e8:
5e:0d:42:a6:79:29:ad:68:c1:d4:81:06:a3:fd:e2:
13:cf:3c:29:0c:bb:b3:a2:f6:4a:38:ab:73:47:79:
13:5f:53:b6:ae:74:7b:c8:8b:89:ff:93:ec:9d:57:
1e:b9:00:a6:2a:db:11:76:9c:45:9b:1a:7f:3f:01:
e5:5d:a5:4b:c7:e2:2a:a6:f7:1e:98:4d:20:c1:6a:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:79:C6:6E:F3:6F:FB:77:39:2B:44:92:A6:10:A6:04:57:34:FD:BF
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c0:b8:69:aa:85:62:9c:e8:db:0c:c3:6c:00:cc:98:cd:83:
9f:d2:2e:2a:45:06:8f:20:c1:e9:b9:02:1f:9c:2f:58:46:53:
ec:07:3a:1a:1f:0a:f4:ec:0f:eb:a8:df:d3:c9:fc:38:60:02:
47:a1:3a:c7:aa:f1:12:34:4d:e7:b7:44:bb:bf:cf:23:0d:bf:
5b:01:54:ed:b9:4a:a6:96:12:68:76:5a:c8:0e:cb:a9:31:7b:
58:18:e0:f1:89:c2:2c:14:43:ae:01:4b:16:fb:41:ec:6b:08:
4b:86:85:ca:43:d9:62:cc:90:d3:ae:76:0f:20:ad:e3:9b:73:
4c:ff:f4:98:f9:fb:c8:95:66:2b:2e:0e:70:4d:00:85:c2:08:
55:b6:b9:77:ef:e6:c2:4e:5f:e6:15:d6:da:3a:28:be:36:ea:
d3:1d:60:8c:27:95:41:4b:fb:98:ab:08:a3:20:fd:0c:47:e4:
58:92:d7:2a:6b:f2:bf:2b:96:ae:ca:30:b2:c1:44:9e:aa:62:
85:94:26:8f:ff:dd:7d:22:02:b2:ab:07:dc:06:75:57:a1:fc:
14:a1:be:e7:30:ab:96:b3:ed:7a:ab:ed:29:fc:8c:c9:6f:d0:
15:09:6b:dc:c1:38:5c:25:e1:00:fd:5d:39:d0:c5:42:5d:c2:
7c:17:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:08 2026 by rpki-client