Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: bCcm7wxsKDizYhKbNgjZD6+9crWbbKTlHqSqZGPD40I=
Subject key identifier: DE:4E:D5:A0:B7:41:B2:77:68:63:41:2B:A2:BD:7F:CF:49:61:07:81
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019CE2C7B0EA558D5CE37DF87EF8CD0973DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 18AE
Signing time: Thu 12 Mar 2026 16:01:03 +0000
Manifest this update: Thu 12 Mar 2026 16:01:03 +0000
Manifest next update: Fri 13 Mar 2026 16:01:03 +0000
Files and hashes: 1: 7M11WAr8ASMmTsOpEXXftqbLZKI.roa (hash: Hy7iKCS/PTOuaQ4Hy/XwhYj+Mf9Lpbiz3nTqAU+v+KA=)
2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
3: _gRsaSao0vaUMwc0x3LyFobrYg8.roa (hash: NuZeEvpoAsVGvJOhf6lMpbCZ6vhyLjtVLY0IuaaWnsk=)
4: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (hash: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw=)
5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: 1oJUCqZ1bjJSou4ioP0QF6HsHLf2kMPTwiOCy8kqamw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:b0:ea:55:8d:5c:e3:7d:f8:7e:f8:cd:09:73:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Mar 12 16:01:03 2026 GMT
Not After : Mar 13 16:01:03 2026 GMT
Subject: CN=de4ed5a0b741b2776863412ba2bd7fcf49610781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:c0:ce:d6:2d:52:9d:6a:24:d6:1d:61:fc:
6e:84:1a:03:5c:85:01:1c:7d:ce:76:b9:2e:6b:ae:
43:c8:df:73:7d:67:5c:e8:00:8b:74:70:6e:ec:5a:
b5:a5:2a:ab:77:64:81:cf:ed:08:61:7b:4f:91:52:
d4:90:b6:24:1b:32:0c:3f:48:17:4b:eb:03:92:4b:
db:27:97:08:c1:05:39:9c:fb:12:6e:9d:93:c6:6d:
18:e0:af:59:42:2c:d5:01:14:ca:4e:3c:11:50:a9:
49:c2:19:d9:61:cb:72:7c:4a:be:22:c5:fa:9a:78:
b2:1d:49:08:71:3d:80:0a:15:d4:c0:6f:95:17:02:
80:d4:f7:c5:ff:d3:7a:46:e2:6e:72:5f:10:f8:37:
81:ec:a6:b0:d5:0a:59:50:c2:da:90:91:74:6d:f3:
b1:83:ed:c2:6e:5e:34:39:35:89:f6:d0:dc:f1:b9:
46:2f:2b:e7:0b:bb:4d:aa:6d:be:01:39:86:af:1f:
24:9f:41:84:5d:f4:ba:aa:16:89:49:04:83:53:20:
b3:fd:cc:21:6c:87:fa:68:77:c4:1c:11:1d:b7:57:
84:5d:32:4d:dd:f0:a4:8b:ee:03:ac:2b:00:ca:84:
5c:a8:d5:7c:bb:5c:2f:e8:f6:80:a9:d3:b8:8f:43:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4E:D5:A0:B7:41:B2:77:68:63:41:2B:A2:BD:7F:CF:49:61:07:81
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:b4:e7:9a:67:20:d5:62:af:52:30:21:1b:71:3b:5f:78:23:
f5:7d:ab:03:25:43:b7:6c:9b:5c:3e:b9:ac:cc:f9:b4:27:00:
98:70:02:4c:ec:8f:d7:17:0e:ab:33:af:e9:db:af:1f:b0:b1:
63:11:c5:28:03:18:e8:ab:6f:94:f1:47:92:66:13:81:16:31:
c7:54:39:71:c2:39:4f:3c:a1:56:62:45:60:bf:88:04:e4:6d:
e1:6a:99:85:64:c8:db:88:2d:f0:cb:fe:c7:e2:a4:a7:98:37:
4a:4f:b7:42:6d:9e:ed:6a:e9:b8:06:c1:c0:20:76:1e:81:39:
ea:57:bf:ae:25:88:ce:1e:56:3f:93:cd:93:21:f0:c2:35:6a:
ef:55:f8:1e:9d:83:85:f0:29:07:83:14:eb:4c:5f:d3:7c:dd:
01:51:73:75:f3:8f:dd:a4:34:d2:9b:1a:b3:4e:55:26:79:38:
92:df:f0:03:88:59:69:ca:09:7e:33:f9:66:41:8f:3a:36:01:
56:cc:f1:92:0f:1d:91:e5:6c:cf:e9:05:7e:d8:6b:60:fd:f2:
70:cd:c1:93:31:cf:34:75:2f:ab:7d:5c:b2:89:a9:7d:f9:88:
80:8e:cb:3d:29:ed:ed:ea:6e:5e:7e:55:f8:a5:49:d7:69:2a:
f0:b9:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:06:23 2026 by rpki-client