Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
File: jZCoyIbumsQjhhb5JjHruLx243E.mft (raw, json)
Hash identifier: 2MM37A+kQIW/J77RQapYvC7ieD3sI/SPy7CfxugLDbQ=
Subject key identifier: 45:53:90:64:B5:64:90:FD:67:F2:98:93:59:BA:FF:40:23:9A:5F:1D
Authority key identifier: 8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
Certificate issuer: /CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Certificate serial: 019D397799E9EDADCE0BA6BBEC9A67CD9A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
Manifest number: 024E
Signing time: Sun 29 Mar 2026 12:00:32 +0000
Manifest this update: Sun 29 Mar 2026 12:00:32 +0000
Manifest next update: Mon 30 Mar 2026 12:00:32 +0000
Files and hashes: 1: PwmzQDtdQKKkIkWKrZGRcmah5dQ.roa (hash: ITm5p27lwo8RsG8igl1Cc79jjfq+F5jXkYNhSwGUmmE=)
2: jZCoyIbumsQjhhb5JjHruLx243E.crl (hash: a7A8CS0xqZnNcslP3qPa0xVZPVqcXibAaveGwHPGi5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:99:e9:ed:ad:ce:0b:a6:bb:ec:9a:67:cd:9a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Validity
Not Before: Mar 29 12:00:32 2026 GMT
Not After : Mar 30 12:00:32 2026 GMT
Subject: CN=45539064b56490fd67f2989359baff40239a5f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:df:06:c4:da:67:5e:ce:c5:6f:97:eb:48:
50:49:57:b1:68:03:b4:1e:ad:e4:46:ae:22:14:a5:
0a:be:08:9c:ff:57:9a:41:b9:d6:14:64:11:84:05:
84:e6:a8:c4:8f:c3:ff:b4:47:7c:b6:28:f5:0f:f9:
13:2d:01:71:e5:62:d4:27:58:49:72:41:ca:8f:fc:
d1:11:89:e8:9e:5a:41:17:a3:bd:24:c1:2b:fa:0d:
d5:bf:15:32:b0:8b:c8:fc:65:e6:9e:b3:1e:6a:41:
98:a0:ed:97:ab:90:50:42:85:06:4e:86:28:08:2c:
11:08:76:e6:a5:b5:6f:2a:9d:92:0b:ef:9a:96:61:
62:a9:e4:ff:d8:43:49:f4:0c:a0:b9:9e:d7:cb:ed:
65:00:b8:79:79:b4:82:37:7c:0d:a3:94:9a:50:f3:
c8:1e:c1:62:b4:64:49:2b:59:49:4d:00:4b:f1:7c:
5d:dc:97:b5:3e:4a:c9:60:d6:93:74:a6:cb:67:71:
cf:01:77:06:29:c7:47:8a:64:4f:cb:8e:27:d2:45:
48:20:12:a2:e4:7d:48:57:d7:a5:89:33:d3:01:12:
eb:7b:60:6f:36:d6:f7:09:2b:85:68:36:8d:ff:dd:
0e:64:d6:51:75:53:1d:30:3b:0e:f8:06:64:4e:a9:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:53:90:64:B5:64:90:FD:67:F2:98:93:59:BA:FF:40:23:9A:5F:1D
X509v3 Authority Key Identifier:
keyid:8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:66:6a:14:c0:18:e3:5c:8f:0c:5f:2b:99:da:40:b3:e3:35:
59:aa:2e:dd:dc:d2:71:b2:53:75:6c:04:4f:7e:00:31:38:74:
8d:8d:49:18:8e:e0:a8:bf:4a:01:87:ed:71:29:be:57:3e:93:
ee:6c:97:05:42:f2:1d:60:2f:46:df:a1:17:de:ea:2b:8a:f6:
39:73:3c:2f:12:39:af:4b:91:1a:0c:32:56:4c:18:8e:e9:2c:
18:aa:5d:18:25:3e:41:b7:25:68:2c:84:35:7d:4a:5b:75:88:
b2:d6:ac:6a:e3:72:fc:ee:c1:63:b9:e1:54:c5:8e:cb:86:27:
95:c4:0e:2c:9b:7c:f4:b5:46:12:72:ee:de:5d:d3:54:20:dc:
cb:6c:35:88:91:23:af:b1:b5:aa:34:9f:58:39:f2:ef:98:64:
71:bf:e6:e1:9f:92:47:64:b4:0b:fb:de:55:95:88:2f:c8:8f:
d3:9d:1b:52:50:7e:9d:6d:b2:78:eb:f6:e2:f3:0f:e2:c5:ad:
ce:9c:7f:a2:7a:e9:9d:07:a3:0a:5a:79:78:a9:8b:cd:77:0c:
68:d0:b6:a2:2e:a1:5a:70:f4:21:8c:4c:f1:50:19:d6:73:d5:
48:8a:fd:6e:e3:4d:24:93:7d:ba:8b:a5:4b:8c:07:dd:29:2e:
21:96:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:44 2026 by rpki-client