Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: JhRGHv6fBg9KfKwtwQMaSQIiUCzgCG4N+K3szOcd1Cg=
Subject key identifier: 37:43:EC:0F:82:51:69:47:32:99:6B:1B:1F:C8:C1:78:BC:F6:C8:FD
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019CB9CBFE77FD864413D2EA9158B843E958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 184E
Signing time: Wed 04 Mar 2026 17:01:19 +0000
Manifest this update: Wed 04 Mar 2026 17:01:19 +0000
Manifest next update: Thu 05 Mar 2026 17:01:19 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: Dj3VMGw9BDt4pgol0hb2Icn5NrKUh89gyzSQ70Urn24=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:cb:fe:77:fd:86:44:13:d2:ea:91:58:b8:43:e9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Mar 4 17:01:19 2026 GMT
Not After : Mar 5 17:01:19 2026 GMT
Subject: CN=3743ec0f8251694732996b1b1fc8c178bcf6c8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:cb:ef:a4:42:47:4d:8f:14:4c:79:66:87:
69:27:da:62:4b:5c:b7:9b:f7:f6:f3:31:eb:2e:c0:
f0:ba:f6:84:16:5e:63:a9:48:96:95:41:c3:dc:1b:
21:d3:82:49:63:c5:7e:4c:45:14:ca:7c:07:75:4e:
9f:2f:6f:3e:3e:55:2c:5f:10:7a:17:ab:1d:61:dd:
90:cf:59:5a:64:36:dc:f2:88:60:31:46:4e:97:8c:
33:cb:b1:00:07:61:d0:9f:f4:3d:6d:f1:f6:34:8e:
7a:cb:25:4a:3a:c6:54:d3:66:f3:37:74:c0:b3:f7:
d0:2c:52:2f:93:53:12:d1:bb:6a:37:8e:67:aa:4d:
16:9a:c2:94:1f:ec:21:99:3a:b8:23:65:7c:ed:00:
c6:a9:e2:45:1f:d3:54:d9:e5:6e:74:59:2c:91:80:
92:04:da:62:cb:c2:f3:f4:cf:ea:e7:8c:e9:e6:64:
82:e5:bd:ef:d3:7f:5b:5a:24:82:33:a4:11:ae:01:
06:da:e9:85:66:c3:9c:80:8e:cc:2a:1a:ef:1b:21:
ab:21:25:1a:de:2a:69:6e:ba:6f:4e:c4:f4:54:46:
a9:12:c1:44:0b:5a:b0:42:94:bd:95:c5:21:4c:83:
28:e4:7f:39:a2:29:9b:5e:5a:68:c3:13:8d:e3:8a:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:EC:0F:82:51:69:47:32:99:6B:1B:1F:C8:C1:78:BC:F6:C8:FD
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:69:cf:ff:69:f7:04:a0:15:46:62:8c:c1:b8:89:af:bc:
c9:92:3d:1a:f3:d9:b1:29:58:a6:17:17:ae:c7:40:66:ea:2f:
e9:3d:80:2f:be:5f:2f:83:f7:7a:6f:70:7b:3a:27:94:5d:06:
76:97:f3:2c:d0:c1:60:d9:7b:ca:b2:cf:d3:e7:b7:67:6b:73:
dd:16:25:8d:6a:93:93:dc:46:ab:74:03:bb:7e:e5:af:03:e7:
72:ad:6c:c4:29:c3:9e:55:64:66:ec:c2:f6:fa:ed:98:2d:4a:
df:46:14:5f:d7:88:ea:68:91:24:48:55:f4:04:25:99:b8:1d:
83:c6:38:c4:d1:b5:af:ba:c5:28:6d:02:8a:5e:83:70:22:45:
cf:b7:bf:8e:95:53:a8:e6:5f:21:66:d3:bf:5e:c8:c2:ea:b8:
84:6b:ed:c4:cd:ff:a1:f8:ba:91:ca:88:2b:74:4c:3b:ef:d8:
b6:96:7c:5d:d4:8d:f1:32:d5:7e:ee:79:5e:f1:38:69:ff:64:
74:1c:5d:5e:90:eb:e7:79:e0:1d:23:7d:31:29:29:b2:db:c3:
83:79:ee:c1:31:e3:d5:a7:fc:36:e1:3e:dc:25:75:4a:f6:0e:
2a:d4:37:8c:f0:14:b6:36:8c:9a:54:5f:92:84:2d:b6:83:a8:
d8:db:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:48:32 2026 by rpki-client