Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: IduoZxa+uXEohBxgdpNcmWuYCSANldjnDjL7RLkvBTo=
Subject key identifier: 16:9C:5D:F4:76:E9:DF:BB:0F:B6:27:AB:1B:0B:C3:77:C3:0E:80:42
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019D38D3D073CE21D736E9939521A6818BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 143D
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: V2PFsZ8l6pqiZV87s+JW6xPYPe/NfXqfgLmFYXdJfKU=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d0:73:ce:21:d7:36:e9:93:95:21:a6:81:8b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=169c5df476e9dfbb0fb627ab1b0bc377c30e8042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:48:ee:74:5a:3e:fe:19:98:ca:d3:65:8a:
28:51:27:04:4c:77:20:4a:a1:d1:cb:48:34:d8:28:
08:66:9e:49:27:48:41:86:25:eb:eb:ae:5b:75:e5:
0b:34:01:f6:5e:86:a4:4f:39:57:ea:83:e4:44:f6:
8f:dd:de:41:c7:8e:66:89:7f:15:c7:43:19:6e:3e:
f8:50:88:fe:d0:94:ab:3d:21:2d:1e:fa:ae:6d:c4:
1f:48:6d:41:bc:3f:91:e6:b6:29:da:61:40:35:2a:
ac:0c:05:22:44:b1:17:6e:96:f7:e6:16:3c:7c:33:
49:f8:ed:78:6f:8e:1c:79:19:fb:3f:74:6e:09:ba:
7b:67:cb:d9:e8:d2:3f:0b:95:29:f1:fa:ff:26:59:
e6:0f:17:a5:06:f6:6a:8f:60:ed:6b:b2:10:f6:c6:
3c:28:a1:48:af:b7:32:1b:e1:da:d6:dc:7b:fa:d0:
53:f1:83:be:b9:af:39:a9:cf:b8:7d:44:7f:ae:a7:
f4:ca:ba:f9:e3:55:c6:15:b1:6d:fe:7a:a6:62:69:
a6:92:09:3b:e7:30:15:69:62:95:6a:57:0e:a7:93:
65:56:3a:46:3a:f7:a0:b2:35:a8:69:d6:fe:fe:3e:
59:07:e2:a8:1c:4b:ae:9d:f4:0c:ec:64:18:e3:99:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9C:5D:F4:76:E9:DF:BB:0F:B6:27:AB:1B:0B:C3:77:C3:0E:80:42
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:19:09:ed:13:eb:9f:57:91:11:bf:30:ba:7c:9a:88:a9:20:
b6:fa:e7:fc:14:f8:69:2b:77:53:15:16:60:7a:fa:25:6a:7f:
20:8f:bf:11:9f:7d:d3:6d:51:8f:20:b0:69:d4:40:c9:73:40:
e6:da:58:8a:a4:19:c0:f1:2e:dd:a9:ee:e9:d6:eb:f2:e6:21:
31:b9:b8:25:5e:55:a2:d3:9a:bc:1a:c1:f5:a9:5c:74:da:a2:
a1:01:f2:6c:59:85:79:13:a2:c2:97:8f:41:83:35:8f:b5:5a:
9f:a0:76:dd:7e:a3:7f:15:c1:56:5b:df:97:91:5a:ed:85:77:
eb:b6:84:3d:ae:52:57:50:eb:37:b7:13:e8:5b:27:16:c9:b2:
ea:4a:0e:24:93:56:7a:24:c2:8a:ca:6a:e5:63:54:95:92:95:
d4:b0:8d:2f:d9:a7:b9:b3:bc:60:7f:31:85:b7:4f:00:c7:36:
4a:b2:bf:c6:94:6a:90:68:0b:66:9e:d2:49:17:f3:91:91:2b:
3a:b1:f0:98:1e:3b:3a:b7:9e:ce:9c:50:97:0f:f0:90:bc:80:
06:2a:7c:6b:d8:51:70:37:35:af:b3:61:36:7e:19:ec:4f:30:
91:9b:91:c1:42:ab:6e:99:00:cf:05:49:c7:ce:0f:71:29:4f:
d3:9f:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:42 2026 by rpki-client