Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: KqLZv2on2MFZJ1C/FAGRR9hyq4f+Heqd3Xa6UXsFioM=
Subject key identifier: 11:37:D8:47:0A:64:34:55:61:ED:70:EF:3B:4E:2C:EA:31:E3:6B:3B
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 019D3789460067A3048F7F233AF3797DDE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: OQ9Hd0aNbo2NqKQaJbOywBhZIsI.roa (hash: 2qz4jxI2YE3EpG4tgKD3UnEwvItdboMyeyLo8EjTciU=)
2: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: AvTNOx6y32tIXN6IQ0t2OuMMXi2Dpn5kyd7eMOKQxN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:46:00:67:a3:04:8f:7f:23:3a:f3:79:7d:de:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=1137d8470a64345561ed70ef3b4e2cea31e36b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:98:ad:fd:06:24:fb:6a:67:e8:63:d9:ba:
16:80:e8:a4:1d:5e:85:01:88:9f:89:a2:96:ad:a2:
9c:7d:18:0e:cd:8a:6b:6f:5e:d6:58:ba:8c:e0:df:
7a:96:72:ad:c1:06:7a:b2:68:a0:00:91:2f:6a:b6:
8d:a4:0b:60:c0:e2:c0:73:66:0a:51:8f:8c:fb:9b:
af:4e:1f:48:62:93:d5:36:8b:76:f7:8f:3c:8d:5f:
d2:c2:8a:8f:0b:77:23:6f:41:38:6e:c7:5f:b5:07:
06:1d:36:f1:0d:cf:00:0f:37:b6:84:d5:68:ec:86:
f5:75:5f:3a:10:93:23:3a:2e:a6:e0:31:0d:c3:75:
c7:15:ae:8e:f9:20:88:3a:d1:cb:6b:3e:e1:20:2b:
f3:48:3e:96:a5:5b:0d:bb:03:9e:f2:05:94:77:9b:
0a:1b:f7:61:19:61:c9:84:da:f5:33:9e:3b:5c:3f:
13:25:7d:cd:87:d2:0f:b2:da:c0:3b:9d:8c:cf:3c:
04:aa:9b:31:08:2d:6b:99:4a:00:18:b3:bf:9a:77:
76:ca:ed:85:79:4f:58:17:53:8f:07:30:b5:c1:3a:
e2:12:9e:63:e9:ef:8d:a9:27:fa:e6:37:de:f5:10:
11:1e:71:bb:58:fa:58:81:3b:78:29:bf:c1:74:6c:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:37:D8:47:0A:64:34:55:61:ED:70:EF:3B:4E:2C:EA:31:E3:6B:3B
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d9:6e:d5:ed:03:0a:63:dd:de:0b:17:0a:2a:d5:72:08:3a:
3a:2e:d3:49:0b:ec:d0:4e:42:e3:51:5d:52:82:eb:29:a8:7f:
b7:a5:9e:f8:87:59:71:b8:37:2b:17:25:6b:b8:1f:1a:d1:9d:
0a:61:85:57:18:3f:7a:4b:34:d3:f8:2f:91:bf:c0:12:4d:07:
c6:c6:e0:33:0b:a9:46:93:f8:08:f1:73:d0:cd:bc:36:c6:22:
0c:bb:5b:38:10:bc:98:14:60:78:93:fb:9d:a1:74:a4:04:18:
c7:0d:24:5a:25:eb:95:27:f9:95:aa:bf:83:2d:87:de:05:ab:
fc:48:50:5b:c2:01:36:14:46:90:13:4d:c9:2e:ee:76:64:26:
4b:04:4e:58:95:28:5a:50:e1:05:11:c9:ce:36:58:a0:b8:73:
26:a3:45:70:16:b0:68:81:0c:be:a5:1d:e1:13:46:fc:36:3b:
08:a3:83:f5:8e:de:7b:ea:5d:ed:d5:4e:f5:01:11:5b:04:54:
03:f6:6a:d8:f7:7b:fd:22:87:8f:2f:f3:b0:23:70:29:bf:80:
63:d2:2a:a8:70:8e:f4:6c:9b:63:e2:ec:9b:98:09:e3:d4:ee:
5c:ac:a2:77:57:df:c7:a8:ef:ef:49:5f:be:9b:b9:18:fd:1e:
aa:fe:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:41 2026 by rpki-client