Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: OQtQteKbioVG4lCqKO8d4jAaYe0adGGmsxMayEHlQLQ=
Subject key identifier: 2B:B0:95:4B:D0:4D:39:B6:D9:C4:FC:ED:B7:9F:1F:AA:35:E1:4B:9C
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019D33E44C332DADCA1EA83CF67F165E5C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 119C
Signing time: Sat 28 Mar 2026 10:01:32 +0000
Manifest this update: Sat 28 Mar 2026 10:01:32 +0000
Manifest next update: Sun 29 Mar 2026 10:01:32 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: DR+qWPw07lMhoAzRn34sHB2qESvimzwkwMWW138SMT8=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:4c:33:2d:ad:ca:1e:a8:3c:f6:7f:16:5e:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Mar 28 10:01:32 2026 GMT
Not After : Mar 29 10:01:32 2026 GMT
Subject: CN=2bb0954bd04d39b6d9c4fcedb79f1faa35e14b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:ad:86:19:9f:ac:f4:6b:a2:a3:e7:58:8e:
36:9b:de:ca:b1:6c:1f:e4:1b:06:c1:8b:97:4e:4b:
47:79:d2:f3:69:b7:04:1d:e3:7c:4a:78:8c:be:ee:
fd:3f:a3:8a:58:44:f6:c2:59:f1:ad:2c:c1:0b:0e:
b9:26:1f:c4:78:a4:50:cc:2c:a7:cb:e8:14:10:eb:
ea:e9:07:14:a7:7f:a0:7a:a6:bf:f1:2e:52:f0:1c:
80:1f:c8:60:db:6f:3c:74:ff:1c:d4:dd:a3:97:0c:
21:d7:94:1c:eb:64:95:b3:73:48:1d:54:17:32:ad:
ae:02:eb:ca:b1:a4:c9:61:42:39:fb:2f:f7:0d:72:
03:5e:60:c6:43:eb:d8:33:5c:8d:98:bb:22:1f:6d:
5a:d3:d4:60:7c:56:44:1d:32:65:7b:43:f4:1b:d4:
23:be:a3:e3:2d:0d:f8:64:e8:2e:40:87:40:b1:e5:
a9:ff:a5:f4:f4:66:fd:b3:82:3d:98:a4:e9:ce:36:
50:30:5b:e8:74:a1:02:4f:66:65:6d:95:5c:8b:4d:
0d:d5:80:b4:d3:a1:c1:e6:87:09:54:e6:15:bb:1d:
eb:17:4e:63:71:01:9d:5b:56:55:ea:71:e9:43:81:
0b:a1:86:61:23:2a:19:09:31:b9:69:21:bf:8f:0f:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B0:95:4B:D0:4D:39:B6:D9:C4:FC:ED:B7:9F:1F:AA:35:E1:4B:9C
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:6b:58:70:ce:72:9c:d9:3d:32:18:6d:9e:1c:88:da:13:6d:
3f:7e:7e:72:22:f2:2b:d1:bd:e2:69:e7:02:3a:be:59:f4:57:
60:80:a8:05:ed:12:2e:87:3d:95:a5:8a:27:83:e6:2f:fb:57:
1e:2b:b2:b2:ba:e7:ac:4e:1b:6b:20:c2:24:95:47:92:bd:89:
eb:2d:a4:75:53:bb:0a:bc:65:d3:53:2e:e6:43:34:32:58:b7:
7d:fa:52:ab:6d:43:2b:f7:d3:3f:b2:7e:ae:ed:10:fd:28:a5:
c8:c9:87:ee:c5:23:34:0e:d4:9c:9e:a5:7b:6a:be:c6:96:12:
e7:04:6e:e1:83:fc:b0:8d:c3:77:a9:3f:33:75:eb:fa:f0:64:
43:55:f1:41:e5:30:44:04:f3:ec:ee:a4:52:70:6c:d9:ed:7f:
63:4f:71:4a:f0:5a:c6:93:b6:fb:5d:d5:d2:86:1e:a6:85:41:
f6:b5:49:4a:a7:0e:23:d7:eb:a7:0d:ee:23:07:1b:b4:10:50:
1d:87:30:d4:e4:ac:43:a7:79:a5:66:24:f8:54:5d:b0:84:52:
72:8b:09:7c:fc:c1:75:33:b7:22:24:97:a1:c9:ef:3e:cf:94:
03:33:ea:e6:fc:2a:4a:5c:eb:f6:fc:04:90:a2:c3:2f:ed:f4:
fe:bb:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:24:23 2026 by rpki-client