
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File: jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier: JlMn1fNrtXdPC9Wv3a5S+iuUESuIw16cp8j5HOKZrks=
Subject key identifier: 09:04:CD:D5:FA:E6:47:3D:0A:16:FC:46:A1:CA:3A:AB:84:C5:B5:25
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial: 019D12A165114628CB05E48727FA5520B931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number: 0957
Signing time: Sat 21 Mar 2026 23:01:00 +0000
Manifest this update: Sat 21 Mar 2026 23:01:00 +0000
Manifest next update: Sun 22 Mar 2026 23:01:00 +0000
Files and hashes: 1: BmoelkPQt4i3BlkcahPvi7qWXN4.roa (hash: z9IVfQbmn+DFxr8Krtk/I8KiP3Zb6ONjO0YjL8dGC3M=)
2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: IjsJuoT+jRm/yeJXDcMLZpyFc7uu8IeSCZ0BaO/Qwb4=)
3: mNu3U5HOimkLMXrE7Xd3w0-SVZA.roa (hash: Q8HW68vvE5dt2JCgiuU6uY8uDN63CVOq6IX7sRD6oHI=)
4: zzcGdYNOZhe1jEco9OqFbyYvT9k.roa (hash: J+hhTkidSQB0Te9LHI8bfOqIwkK9dHKinjSyKGXTXTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:a1:65:11:46:28:cb:05:e4:87:27:fa:55:20:b9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Validity
Not Before: Mar 21 23:01:00 2026 GMT
Not After : Mar 22 23:01:00 2026 GMT
Subject: CN=0904cdd5fae6473d0a16fc46a1ca3aab84c5b525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:3d:b0:12:33:13:29:05:d2:6e:57:82:af:
cd:2d:12:04:e6:c1:56:3c:5f:01:8e:5a:ec:32:e6:
68:31:76:3f:46:a4:8c:c1:f7:99:14:03:58:e9:57:
53:8b:f1:b8:e9:83:4f:26:42:8a:30:82:b7:6b:a7:
9e:bc:60:3d:83:96:ce:89:cb:11:b9:be:06:b8:4b:
bc:7e:d4:80:9f:a9:80:a3:ba:f1:24:b9:2a:67:48:
cf:c2:24:5e:ec:12:9f:0c:be:e8:ce:f5:a0:94:a6:
c4:7d:cc:bb:41:dc:04:53:8b:a5:93:c3:dd:00:82:
00:be:48:f7:11:3a:6e:1a:e8:1d:f9:ad:cb:6a:45:
7e:d8:6a:a6:83:e9:ed:c3:df:8c:79:10:87:3e:27:
44:3b:b2:53:0b:a8:d5:76:08:8e:b4:33:f7:1c:96:
98:4e:83:e7:4a:1a:74:67:20:18:94:ec:1e:05:44:
a1:e7:1f:fe:43:75:5a:04:35:d4:d6:ad:bd:ae:c8:
4e:98:d9:e4:59:b3:39:39:0f:30:70:5a:6a:56:b7:
3a:5e:02:b2:a6:cf:15:11:7c:4e:e6:af:00:52:f2:
a4:e7:43:37:d6:b1:27:47:7d:4a:8f:1e:55:be:e1:
bb:75:61:a5:80:27:ca:cd:5e:83:e8:0d:8c:aa:26:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:CD:D5:FA:E6:47:3D:0A:16:FC:46:A1:CA:3A:AB:84:C5:B5:25
X509v3 Authority Key Identifier:
keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c3:bc:5a:7f:83:46:68:ea:0e:5d:e8:71:dd:43:4f:23:20:
19:9b:0c:3b:b8:88:ea:b5:1f:6d:5d:76:6c:20:03:2d:5a:fe:
19:02:1d:be:ae:78:a4:ae:7b:6a:7d:30:b1:ac:c4:8f:e7:2b:
f8:b9:a3:4f:fa:05:44:0e:0f:61:9c:ca:82:54:cc:fb:b7:e2:
4b:38:c0:bc:90:44:e2:64:39:d1:69:20:3c:e5:ef:d8:85:3f:
45:68:2c:36:bc:0a:c7:03:9e:c6:9d:01:b6:71:eb:b0:28:ba:
e2:46:a9:ed:e6:65:cc:ee:2b:bd:cc:63:52:09:95:b6:09:47:
78:d0:08:2f:c7:0e:78:1d:14:10:d7:ef:8c:dc:75:e9:b2:7a:
b3:91:e4:8b:21:8a:58:78:80:c3:17:06:d6:87:7b:ea:f5:59:
bb:d3:c1:92:00:88:c8:f5:58:f6:af:b7:e5:ba:c0:6d:68:46:
7a:4a:09:9d:c9:59:7f:33:69:c3:88:14:be:fa:9c:d7:05:07:
da:b2:1d:3b:d4:91:f4:68:38:82:45:68:ec:d4:8a:03:62:b1:
a8:dc:36:2d:4a:dc:72:fc:50:f1:b0:46:a6:c6:f8:75:c7:3d:
f8:98:22:27:81:35:27:5e:01:84:05:0c:96:97:9c:21:da:be:
6c:99:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:47:41 2026 by rpki-client