Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: xBak/qjvu2lopRPS21cMVmVhbrKVXRl+wNaOyz1KS4g=
Subject key identifier: 5F:6B:31:EC:06:E3:91:4A:6B:5F:62:96:54:1C:D0:49:E2:B2:D3:66
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 019D37BFF8370B7E90DE9A9BF3DCA597843E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 09B3
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: GDYQT_SfN5tMHZpuub3a8jDMqOU.roa (hash: H7jT70GlU7Stcvy2ABi9zYCoyueoBEvW2I5oAX+8wHc=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: OvtSndDIQVdOOB5H9aPmiTYXeaS4JSnERiL4k8UplEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f8:37:0b:7e:90:de:9a:9b:f3:dc:a5:97:84:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=5f6b31ec06e3914a6b5f6296541cd049e2b2d366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:12:aa:5c:5a:8f:2d:86:ac:e5:7e:28:cd:
2c:82:59:a6:2c:ce:2a:4d:e7:88:6d:93:be:a0:6d:
4c:a4:04:75:6b:85:d2:a2:f7:72:33:c9:0f:c4:a5:
b4:6b:e3:31:42:4e:2a:5c:21:31:e9:87:45:77:de:
17:3e:a8:e4:01:62:d8:4e:bf:44:c6:23:21:a9:2f:
65:d3:54:c7:0a:e0:da:7c:a1:9e:88:70:de:b4:31:
eb:19:ee:98:62:12:ac:0e:91:c5:a0:86:63:0f:e6:
3e:a0:f8:d5:7b:82:5e:9f:65:7d:cb:1e:42:17:ee:
d5:cb:80:e2:c0:9f:d2:44:96:7e:dd:15:69:ed:7d:
ec:2c:ec:a8:02:57:01:e3:03:9b:ab:33:70:a3:f3:
3d:d3:b7:bb:df:b2:76:81:80:10:b5:b7:08:df:0a:
d5:97:10:62:63:dc:2a:ff:f3:14:c1:ba:18:c1:9c:
ca:a4:42:1c:60:c8:f6:4b:4f:d1:2a:19:f5:38:22:
e4:8e:8a:a8:cd:7c:dc:5d:2c:56:5f:fb:73:39:3d:
e6:5e:2c:64:7e:18:4e:b2:04:a8:11:15:43:3c:50:
ff:0c:88:af:9b:55:a7:4d:1b:a1:b5:99:00:57:ca:
0a:83:b1:16:bf:93:1e:0a:ec:51:79:3f:2b:fa:4c:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6B:31:EC:06:E3:91:4A:6B:5F:62:96:54:1C:D0:49:E2:B2:D3:66
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e2:fe:a2:be:69:42:7a:55:76:62:81:6b:f7:b3:ce:61:b4:
90:20:cb:5e:1d:42:35:57:3a:08:e6:4b:28:ba:c3:92:66:be:
e4:05:b9:44:1e:67:46:40:50:eb:6d:47:dc:87:78:fa:a4:9c:
2b:6f:3d:34:b6:cd:0c:b1:b9:4a:4a:73:5e:e2:c3:37:09:6c:
dc:74:18:21:ec:27:cb:9b:ab:e9:b6:b9:29:1f:4a:92:18:fa:
01:e7:47:8e:34:58:65:da:c8:e7:01:3f:7a:ce:42:20:1c:15:
62:cd:c3:83:0c:e0:91:c6:9e:ef:d4:62:34:2c:22:fe:ec:eb:
11:3b:6f:72:d6:36:15:28:54:e2:19:4e:f4:7e:84:e7:66:1f:
ea:bf:ca:fa:0d:25:fc:cb:9b:75:da:25:cf:08:65:6b:00:3f:
e3:cf:bd:f9:6d:22:42:79:82:8a:2e:05:f9:d7:a9:55:6c:a7:
ce:c8:30:a9:7b:28:09:d4:dc:12:01:66:a3:11:f1:2f:f9:14:
ea:0c:50:62:b0:14:df:33:d9:be:d8:d6:46:64:9a:bc:be:79:
cd:9c:4a:26:ff:94:60:f9:da:a7:20:3c:e4:6e:bf:b0:28:15:
75:80:2b:9d:47:94:e3:e3:8a:51:d4:6e:c3:1d:62:6f:ab:2d:
d4:48:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:21 2026 by rpki-client