Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: 8otz0DxGUEabj9HEy/0VnQxScRYO+FKZPJo/w76vzNc=
Subject key identifier: 31:EA:4C:11:9A:02:BD:B8:46:56:26:39:D5:68:40:64:CA:6E:8D:DD
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019CE523258B053D8CC787DCF97AF6CD296D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 147E
Signing time: Fri 13 Mar 2026 03:00:11 +0000
Manifest this update: Fri 13 Mar 2026 03:00:11 +0000
Manifest next update: Sat 14 Mar 2026 03:00:11 +0000
Files and hashes: 1: 9Ek2AgPG-IuKRn4Ap7Q4taz5tIs.roa (hash: US5wluLOurNHGWpdK09uPzxIy4dNtgDg+FM3oRliWV8=)
2: J6BzaoEADEU3mnLpaeWB28tTH_I.roa (hash: LmZ8HNRZsz6o3yc1qdlURwkpFlRv54OEGoGiLtspLgg=)
3: KvGvnsUPTXn11jrE2Q3HUL3nJnY.roa (hash: GZr/8STpN+spxS7hr5Mqyl5f4Xkr+OLbAhQcRXrsj/I=)
4: PDRXvo0P_0NveIGADmK4mqe815M.roa (hash: Rt8tDT1Yhhc7JTO2euWnUSC2nUqLohrFpJ3t3YB6850=)
5: VxDIXA6mTGbD5-82yK7aUruPsa0.roa (hash: 6ywkNg1zwWV8B8t2RNAXo9ZBmG+pbw7ReG5CtVK2wj0=)
6: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: kKguG0PHC6ixAu3FMv2OsDl8wWnqjJwJcbUEHTfVO6c=)
7: uct3FriMmJ2dsZBkcrXJVXsGDFw.roa (hash: YxoLUypivPWxn2AjW2R+K6r0FePAjOs61fBGsFzRkR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:25:8b:05:3d:8c:c7:87:dc:f9:7a:f6:cd:29:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Mar 13 03:00:11 2026 GMT
Not After : Mar 14 03:00:11 2026 GMT
Subject: CN=31ea4c119a02bdb846562639d5684064ca6e8ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:9c:f0:ce:4c:6e:f0:c2:6a:30:ad:7f:1f:
60:d4:34:c3:ec:09:bb:a1:1e:02:14:0d:93:b2:c0:
74:f3:6d:5e:8b:f1:73:6b:77:0c:ac:24:b4:7a:0c:
d0:fc:50:9d:1f:75:08:59:ab:01:5c:c9:ed:a4:0b:
eb:41:e6:88:43:27:8f:24:fb:0c:d4:6e:e0:00:a7:
7f:de:b7:4f:1f:5e:65:fc:59:6a:ff:e5:92:8c:e5:
ba:51:d6:23:70:53:d9:37:0c:b4:09:a5:9c:99:af:
0c:e0:7a:e7:93:98:a6:58:90:d4:b3:52:20:76:9b:
47:a5:3c:34:0f:92:7b:71:a4:d3:c0:57:a8:c4:5b:
c5:3e:1f:f6:78:e9:59:e4:09:81:e7:b0:ff:86:38:
5b:db:91:a4:f8:90:6c:a7:50:13:06:c4:ef:2b:17:
d2:c1:cf:fd:93:d6:d0:29:9e:82:00:ba:84:c2:96:
15:4b:d5:92:ac:9d:c7:57:1d:86:4a:0b:d2:7e:1e:
56:b1:21:4a:bb:21:84:d0:77:a9:26:0d:9a:89:8b:
79:a4:e3:ac:86:94:78:04:ad:54:ed:6f:6b:b0:94:
46:80:07:c5:f7:cf:7f:cd:27:de:c5:b0:ac:94:49:
9b:42:8a:96:64:bf:21:61:55:1a:38:83:66:b3:83:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:4C:11:9A:02:BD:B8:46:56:26:39:D5:68:40:64:CA:6E:8D:DD
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:93:a7:42:35:66:bd:a3:de:f0:01:d3:e1:00:ae:ad:80:27:
ae:f8:a6:d2:28:31:91:8f:4f:b1:47:2e:fc:a5:f8:66:f0:df:
7c:22:96:f8:c9:fd:da:9c:88:50:5c:13:15:43:9c:3d:0f:2e:
85:52:a3:c2:6f:05:c5:39:c5:26:35:56:1e:8b:dd:53:1b:11:
32:83:a4:36:a6:15:b1:cc:6b:69:00:03:cb:68:d7:40:e9:89:
89:09:fb:14:e0:c2:19:20:2e:8f:a8:95:03:a1:7a:54:4f:0e:
59:02:0a:44:21:f4:1c:39:0d:df:31:85:44:05:c5:a8:0d:30:
a6:45:89:39:b1:51:89:41:24:6c:69:dd:15:73:96:ad:cc:76:
4b:58:dc:fb:27:11:79:ff:8a:5d:f0:7d:d3:4a:90:d8:22:d4:
95:09:fa:38:84:eb:2e:1a:5a:e6:e6:81:82:5b:29:cd:99:db:
1e:14:03:2f:3b:ed:44:09:e4:18:f5:42:e2:4a:fe:9a:06:0c:
bd:ba:1a:96:fe:5f:63:73:7a:9b:ad:d2:ed:e2:61:77:46:2f:
f9:12:d5:3e:fd:92:92:c1:fb:d2:77:e6:1f:86:3d:48:cd:d7:
9a:eb:d9:27:e0:22:c7:45:e6:a0:cd:3a:a2:2b:31:16:64:c6:
7b:96:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:18 2026 by rpki-client