Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier: DK3AJx/Mru1XaYnSkAz0RiGz98237zgAu9/KvKZeTrI=
Subject key identifier: 68:F6:F6:52:B7:BD:3C:22:2F:60:F2:D9:55:54:17:70:E9:1C:AC:A7
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial: 019D382E3B03877821466ECAA294E96EA733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number: 090C
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: M6Gr8xkxePSh0S+rlMTQlTXyPEFCiPAaaUO3gWaWTYE=)
2: bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa (hash: mlGeYAkzIiaMQu2uNg0bx5zSdfDctbxIGGNO6WnD0zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3b:03:87:78:21:46:6e:ca:a2:94:e9:6e:a7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=68f6f652b7bd3c222f60f2d955541770e91caca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:11:93:d7:aa:f4:b0:39:bf:18:90:e9:ab:
d1:ca:36:3d:4c:ea:1b:14:15:81:22:e9:f9:b0:1e:
74:20:1b:01:47:d9:00:ec:f6:6d:e2:2d:d5:50:1f:
91:9e:6b:35:6f:53:df:da:22:44:f6:43:51:2b:24:
85:33:b8:b0:d3:10:87:aa:bf:37:12:53:6e:48:30:
a8:b7:b6:75:89:f2:d8:0e:0f:c9:c9:ea:bf:b3:af:
0f:61:3f:65:e3:a1:f6:76:25:f1:72:3f:f6:43:db:
23:cb:0e:9b:6a:ce:3d:08:31:4b:a9:a9:6e:f3:dc:
a3:ef:9e:88:f6:94:d7:07:04:54:e9:d6:19:a0:18:
7e:f4:a5:b2:73:8d:55:34:55:d3:b0:e0:67:db:5d:
7b:e4:41:0d:89:ff:1c:5a:be:28:25:47:ff:05:7a:
aa:2c:7f:48:98:ba:04:76:de:ba:36:cb:dc:42:d1:
c6:1d:cf:a0:41:f1:bd:bd:3c:8b:79:ef:59:b2:17:
1a:a4:0d:20:43:f8:1b:7d:de:55:83:58:04:98:cb:
ed:b9:b2:da:21:e6:23:f9:0c:ba:e3:41:6f:fa:fa:
9e:d4:f3:bf:9e:ce:6f:43:2c:be:c5:d2:4c:15:95:
00:6c:88:35:23:d7:0b:fa:59:83:11:ad:a9:fb:7e:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:F6:52:B7:BD:3C:22:2F:60:F2:D9:55:54:17:70:E9:1C:AC:A7
X509v3 Authority Key Identifier:
keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8b:32:e4:3d:60:cc:69:d9:fe:c1:aa:25:83:1a:7e:f8:0a:
b4:43:09:fc:77:da:7d:03:c8:0c:a9:89:1b:33:d7:c2:84:11:
df:cb:39:f4:89:a8:44:15:43:74:19:67:df:76:f9:59:a4:20:
25:3b:66:dc:11:80:04:40:e5:51:71:5a:b8:9b:4c:e9:c0:9e:
7e:56:6a:5a:c5:8b:fe:d6:6f:98:56:34:bc:79:64:d8:a1:88:
46:39:ec:20:4c:e0:7f:c8:5f:3f:91:14:65:f7:dc:6b:93:17:
c3:59:3a:df:ea:6a:97:9b:98:83:9e:b1:02:68:46:19:97:8e:
08:fd:e3:36:da:e1:88:72:13:6a:7c:73:8e:41:c2:50:42:14:
58:b9:2a:8e:34:07:d7:9c:f6:72:d0:3e:2c:6c:65:84:62:02:
37:dc:61:22:11:2f:f2:cf:84:83:19:c5:98:92:b2:70:90:fc:
20:dd:9e:95:5d:cd:77:bb:4e:b3:ea:ab:7a:a3:40:7b:1f:11:
9c:47:ea:92:a3:7e:1f:12:99:13:3d:4a:bf:14:3f:b7:84:80:
85:f1:df:ca:33:82:ef:69:90:46:08:03:ad:c0:8d:15:4e:68:
24:b0:a7:2c:1d:84:d9:b1:6b:ed:a0:1c:52:95:8a:7e:99:33:
a2:86:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:08 2026 by rpki-client