Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: Sho+p3pyIpQUNMEgSSVsAeDFv8PFs27QGxIVxT+GN1Y=
Subject key identifier: 3B:09:0E:C8:BB:32:41:CB:CD:7C:B3:CC:05:18:82:5B:FC:30:7E:C9
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019CFCBE1EFDE4433D69DC632A8B3B9BD8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 187B
Signing time: Tue 17 Mar 2026 17:00:43 +0000
Manifest this update: Tue 17 Mar 2026 17:00:43 +0000
Manifest next update: Wed 18 Mar 2026 17:00:43 +0000
Files and hashes: 1: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (hash: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs=)
2: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (hash: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: pOGiuq8GtHbja8OIEqHsxTynRsvRgmVtyWdBzWIcHTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:be:1e:fd:e4:43:3d:69:dc:63:2a:8b:3b:9b:d8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Mar 17 17:00:43 2026 GMT
Not After : Mar 18 17:00:43 2026 GMT
Subject: CN=3b090ec8bb3241cbcd7cb3cc0518825bfc307ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:c5:f9:3c:02:ba:2f:7a:2f:4a:d7:ae:5f:
00:12:d3:86:64:17:9c:55:da:7a:00:e1:d8:66:fe:
78:b1:c6:44:47:d4:5d:f3:d6:fd:2a:94:7d:97:76:
af:eb:e7:24:a7:5d:79:e8:7f:63:94:dc:c4:b5:d0:
0e:3f:5c:e6:eb:3a:88:d5:ed:05:88:35:24:3e:24:
e0:ae:a6:40:cd:d9:0a:06:70:c6:ba:c1:ee:68:0f:
9c:ad:32:7b:8f:4b:f2:d3:4a:bf:5c:80:fc:7a:a0:
01:80:61:08:a6:77:4b:f8:64:ce:9b:22:8e:b7:9d:
fd:a7:64:43:48:de:f0:19:a0:79:2a:2d:2c:fe:dc:
c8:d6:05:b6:8e:c2:a2:f9:e7:9d:26:73:d4:a7:92:
e2:59:f3:81:d2:3b:b2:4d:a8:9e:4d:fa:21:3a:0b:
54:63:f1:2d:ce:20:10:0e:2a:8b:0f:da:18:ed:e3:
5f:81:15:5b:28:f3:aa:3d:8d:ad:9b:83:5e:3e:e7:
aa:43:45:1d:d6:3c:99:23:e5:39:0d:b7:23:62:ba:
a7:8d:a7:26:ab:12:92:61:33:ac:8e:fb:6b:30:92:
42:a5:85:e6:e4:65:b4:67:59:46:b7:da:86:9e:99:
fe:8d:9e:89:c7:bb:4c:73:04:41:6c:4b:25:d9:ad:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:0E:C8:BB:32:41:CB:CD:7C:B3:CC:05:18:82:5B:FC:30:7E:C9
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:35:b3:28:e1:c0:9a:d2:33:8f:13:72:ad:ee:94:de:7f:fe:
ab:9b:b6:34:17:6a:8d:74:37:dc:f2:de:ab:12:f7:08:dd:51:
e7:0f:8b:08:51:08:a6:05:04:01:b0:94:3a:3a:dc:30:a4:b5:
71:15:66:23:94:dc:9f:ac:5b:13:ce:e0:f9:e6:81:bf:18:99:
e1:7d:93:1e:be:bd:95:13:44:90:4c:29:5a:53:73:0e:58:59:
dc:7e:7d:5b:2e:60:8f:e8:f4:8e:0e:b2:10:71:52:be:4f:02:
f0:b8:8c:00:f0:8c:92:24:ce:81:81:ba:b8:09:49:55:8c:4e:
dd:9b:4d:d9:e2:7e:b6:d7:d4:4b:4f:cf:8d:c8:1b:e6:18:e3:
c5:62:49:df:d8:0b:c1:67:78:08:3c:23:9b:4f:3e:83:f1:bb:
9f:f8:f9:fa:58:f8:e8:8b:14:f4:60:52:d4:06:5f:eb:78:17:
c3:80:94:27:c1:24:fa:be:09:aa:df:56:25:10:8e:c9:95:01:
9c:aa:70:26:b8:7c:cd:a5:fa:fd:fb:7e:e4:52:e0:67:74:77:
8a:96:85:ab:ab:90:26:f4:57:6f:38:76:0a:ca:34:de:29:6c:
bd:e7:86:77:0f:49:8f:ec:c6:9d:51:2c:97:1d:10:f4:41:b8:
bd:0d:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 23:13:53 2026 by rpki-client