Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File: jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier: wAX4ldpvjfw26/Gjh1ScXFKCnTWhi9Sa5ozxaVeUPuE=
Subject key identifier: 2A:5C:7D:6E:EF:E8:4B:8B:22:59:0E:86:5A:2A:D8:A3:9C:10:CB:14
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 019D386580A37A6F584202D633C220B97D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: HRoz101M-lrveZcnNZV2uhsvCkc.roa (hash: +IbJA51Ocg1tdb7H8y8jxMvadpEzbmCyGmXt8WGHMKk=)
2: O0FS0XMv6ih-2O0cYgo04uq_WqA.roa (hash: GwCmjRKr0uO3lcpx8t6r1Z062xMPZHx+8iaQcQfTG/U=)
3: UlPebmu1c40UOSCL-ly4OscZCUI.roa (hash: h0gF33577TsfLaBIuEPgAJQ2oPdZpB3QfyyzokMxY64=)
4: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: Lq3FumaMFl3xV85FIniXV6aLYrc4YO0joChybd81Omc=)
5: kpdwiZivq0KQEXRziSN4kbLcuPo.roa (hash: uvaVyntvMy6IR5dawncMlQjbQOllUj983tNXqJNMrIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:80:a3:7a:6f:58:42:02:d6:33:c2:20:b9:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=2a5c7d6eefe84b8b22590e865a2ad8a39c10cb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:58:bd:e7:fe:c3:e7:7a:8e:4e:e9:5b:0c:
ac:25:28:44:fb:cf:d8:d8:ce:67:fa:9b:20:7d:42:
df:ae:6d:d6:c1:48:07:19:af:9d:d4:ad:67:01:5f:
a8:d3:1f:f5:4a:05:c8:c2:59:ae:a3:28:d9:5d:60:
61:43:24:63:db:d1:eb:b0:ae:85:09:ae:01:96:06:
12:74:d9:7b:cf:6a:95:43:72:9d:c0:9f:a1:db:85:
1d:bd:03:b5:2e:a6:7a:c7:28:c4:f3:9e:89:49:0e:
d1:04:77:47:74:a9:ad:c3:a1:43:1b:2b:bf:62:f2:
19:9e:19:33:95:50:03:a4:d7:79:48:d4:71:5d:1a:
9e:37:90:82:f0:44:07:c0:83:9b:3f:e4:7f:33:95:
8e:de:fe:da:0e:47:38:d4:a8:3e:56:32:0b:f5:55:
8c:72:1f:9f:56:21:6b:28:1c:c4:d8:9f:94:4b:81:
12:c0:cb:2b:3a:9b:65:54:8b:da:46:3e:38:63:b8:
2f:99:67:7d:47:6f:59:83:74:d8:65:e8:39:e1:a3:
57:2d:43:4b:f1:76:52:ab:89:92:9b:89:64:ce:6a:
97:8d:42:65:96:6b:82:74:73:4e:a6:14:76:98:86:
b0:44:cc:b5:da:6f:c3:85:4a:f6:47:16:90:f3:b8:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:7D:6E:EF:E8:4B:8B:22:59:0E:86:5A:2A:D8:A3:9C:10:CB:14
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a9:2f:c1:2a:7a:99:88:1f:d6:34:24:c0:e8:50:67:d3:bf:
61:6f:2a:f4:a7:b5:47:83:eb:4d:ba:e1:59:05:df:81:3e:c5:
8c:b5:b3:15:70:d3:8e:b5:8e:02:d7:ba:53:ac:4f:e3:b2:cf:
cc:55:57:6d:8e:ee:28:ea:50:db:56:39:80:e8:55:4a:53:e8:
c7:88:0f:df:34:1a:5b:2b:77:39:e9:73:14:90:7e:1c:5c:06:
62:52:18:ef:f9:34:57:1c:eb:fe:34:10:5f:10:8c:9e:99:17:
20:2d:d7:43:18:80:6c:cf:2b:40:14:d7:25:0a:66:5f:3d:31:
8a:aa:6a:27:40:b6:6d:44:0d:ce:dc:01:38:f9:88:85:df:40:
a3:af:7a:33:40:ba:11:bf:87:6f:05:08:61:60:5b:5a:e9:a0:
63:61:32:82:1a:9f:e1:30:7a:44:71:78:55:43:67:33:42:09:
fb:b5:5c:5e:d1:7e:c5:af:9c:8d:1b:2b:0b:ba:25:59:fe:e0:
92:00:58:0f:45:f3:3f:62:d1:8e:fd:64:8b:41:ed:02:ef:18:
2d:22:a2:f4:b3:98:8c:c9:e2:3b:7e:6c:d2:37:1f:99:86:b4:
65:bb:9e:57:35:44:5b:9c:0f:8b:8a:c0:cf:ce:6e:ea:b3:f8:
71:62:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:19 2026 by rpki-client