Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: kh0cKKnNIe2EKqE2UDk4BMXS1d1FQQp9XPKILzjEvnw=
Subject key identifier: 5D:E9:0A:F3:5A:61:F5:CC:1F:8A:A7:6F:53:B9:CD:0B:DF:38:05:97
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 019CEC38D5A377B814489B5A7EBA7AA7C674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 17FB
Signing time: Sat 14 Mar 2026 12:01:13 +0000
Manifest this update: Sat 14 Mar 2026 12:01:13 +0000
Manifest next update: Sun 15 Mar 2026 12:01:13 +0000
Files and hashes: 1: albAVH6lwfzmwVJzDmkpKh655KQ.roa (hash: BpL6bwg3t5pCu5LLatPQum4u8725IbG+PO63ipkITdM=)
2: i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa (hash: gL8PqoF8vFY4ZSfQKB1yxJH42nNfNmgI+ETePYwGBJ0=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: kj0PcWwNcUV8+qEwttMoY93Nq8p4QjtAq8ei/VJKW/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:38:d5:a3:77:b8:14:48:9b:5a:7e:ba:7a:a7:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Mar 14 12:01:13 2026 GMT
Not After : Mar 15 12:01:13 2026 GMT
Subject: CN=5de90af35a61f5cc1f8aa76f53b9cd0bdf380597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:a7:00:6b:5f:f0:bb:44:78:36:47:0c:68:
4b:33:a3:66:eb:52:0c:9c:78:99:4a:44:07:84:e6:
0b:5b:5d:ab:e5:57:40:82:a1:d6:23:d8:2e:2b:3c:
b8:04:28:15:03:4b:31:ce:f2:dc:1e:51:b3:ac:fe:
59:52:43:2d:d5:98:48:2f:96:4a:0b:93:58:96:e6:
2d:b9:85:50:47:da:96:d8:b1:8c:b1:51:d6:11:51:
db:c2:62:0b:aa:d4:a7:6f:41:20:9d:ee:ff:70:2e:
ab:00:96:49:c0:e7:0d:dd:0e:a7:2b:1a:83:f1:61:
d3:6e:49:a0:fb:64:8b:56:9d:2c:b3:45:34:af:75:
39:bd:75:45:51:31:fb:5c:8f:89:c0:e2:02:48:03:
db:cd:1d:91:ad:33:7b:26:f1:9e:f9:51:83:d0:f7:
68:6e:a8:66:bf:95:a6:05:53:f3:ac:4d:aa:59:dc:
f1:d3:f8:4a:6a:ad:a0:42:ec:c4:8d:bd:06:ef:10:
d2:3e:7f:14:4e:01:42:b7:02:b8:27:23:e6:61:59:
b3:bc:b1:2f:e2:04:47:e7:77:fc:5c:82:f9:54:29:
a8:7a:d9:f5:97:3c:e6:ad:86:e6:94:0a:94:2c:9c:
df:38:45:42:5d:a8:12:c0:10:51:14:2f:62:0d:69:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:0A:F3:5A:61:F5:CC:1F:8A:A7:6F:53:B9:CD:0B:DF:38:05:97
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:35:2d:2a:e8:3b:bc:69:13:0b:56:a1:a9:13:bd:57:6f:6c:
08:ee:70:3c:51:34:e9:d1:64:04:2c:99:ad:19:94:33:ba:ba:
8d:fa:dd:e7:1c:fa:14:b2:07:db:20:8b:68:c2:bc:0a:f0:94:
b7:45:80:21:c8:61:df:50:d1:80:c5:3e:1d:65:c2:81:2a:8d:
a4:6a:b3:12:77:17:99:35:14:d6:b5:0b:bc:ae:53:ed:0d:28:
50:e3:6a:aa:63:9c:e8:c8:bb:d1:13:1b:f8:3e:b7:be:56:1b:
af:27:38:ac:13:79:8b:48:61:27:db:d1:48:c3:67:77:c9:d0:
74:67:24:17:72:88:06:92:72:06:3a:08:17:cd:d9:ee:3b:82:
2c:69:24:3d:50:44:5f:84:97:6b:cf:ee:f6:1f:37:c6:ff:4d:
56:68:5c:c4:ac:e4:c2:11:ec:8b:af:d8:3a:fb:05:95:a1:84:
e4:dc:4f:76:3b:05:53:55:0d:57:98:fe:dd:63:4d:23:24:38:
fd:8c:0b:f3:8d:b0:6a:81:91:18:01:a3:7c:ce:7a:65:7a:33:
e3:3b:10:a8:9c:d1:dc:cc:9f:dd:2b:2c:f1:64:8d:68:25:72:
f0:cb:1c:df:35:9f:79:b3:98:1d:46:f0:5d:74:58:be:b2:92:
10:60:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:40:29 2026 by rpki-client