Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: K5aWAsIG14C05dNzy6KNGPbZTX1sFav3rSwp5M9v+dU=
Subject key identifier: DE:6A:7C:A0:58:90:50:20:3A:80:45:5F:E8:E1:FA:DA:88:98:8B:9A
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 019D382DE7C45671226F981B6C57D0992E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: j+mz6VkrqXtFZX2Y7ENw35N//GxUqoutw4tBs1Xfi8Q=)
2: p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa (hash: V5+8Cu1ZSU54lkDzthadhaeHWXQzx9+t4lsqXq/ECiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e7:c4:56:71:22:6f:98:1b:6c:57:d0:99:2e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=de6a7ca0589050203a80455fe8e1fada88988b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:77:f9:b6:e5:09:4e:04:4c:eb:14:a8:05:
c5:ca:08:bf:77:7e:69:2d:ec:4f:15:01:bb:df:25:
11:df:49:5c:48:ec:ea:74:2b:6c:f5:39:df:4b:59:
2a:29:e8:59:d7:47:36:4b:f1:28:35:99:b4:66:8f:
b6:73:b6:f7:55:98:3a:d3:39:a3:a7:e2:5b:b3:a1:
a4:3f:fc:d9:e0:87:31:c7:64:e7:5e:66:3e:72:dc:
42:18:d5:93:d4:b3:a1:11:33:30:8c:e6:5f:cf:1a:
a6:24:d3:47:3d:31:92:77:fa:b3:3e:1a:fe:12:2d:
61:ad:b5:b7:3e:0b:56:c6:e3:77:e3:68:01:29:4b:
6d:f2:05:db:5d:01:e2:2e:20:5a:97:81:e2:ea:98:
79:84:8c:44:98:c3:7e:92:2c:3b:3e:1c:3c:19:52:
0f:7b:4f:51:53:cc:c6:1c:69:2d:8f:56:13:15:a1:
8e:fc:df:ec:94:ec:5c:34:41:15:fa:a1:0a:8a:28:
bf:a0:af:dd:e6:ed:cb:dc:e3:a2:c5:ca:b2:1f:70:
49:5d:ce:00:3b:5f:4b:66:c1:ce:0d:bb:99:e0:fb:
23:54:89:83:61:33:b9:e6:bc:e0:09:82:10:94:8f:
fa:0b:8f:a3:02:a2:3b:11:a3:ab:85:46:cd:d2:6a:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6A:7C:A0:58:90:50:20:3A:80:45:5F:E8:E1:FA:DA:88:98:8B:9A
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:61:39:1f:47:3e:13:46:a7:a4:a8:e7:8e:70:46:41:33:9f:
47:fc:45:4e:4a:9c:1d:20:d5:6f:2d:95:d8:6a:2d:d7:22:f0:
74:2a:8e:a5:6b:b3:07:31:57:a7:29:43:e6:da:06:3a:66:a9:
44:8b:b2:e3:f2:73:e9:de:39:22:48:7a:2d:48:81:8c:58:92:
c5:9c:ba:bc:59:11:01:c8:1a:05:8e:8d:c4:8d:36:8c:90:58:
b8:85:4f:1e:d5:4e:ab:3f:38:de:03:38:f7:5b:cf:92:d6:f8:
b6:35:06:f1:92:9b:61:ab:5d:eb:43:d0:a0:df:32:61:3a:f3:
8c:ad:3f:88:13:61:d6:1a:69:ff:46:1f:c8:b5:27:fd:59:0f:
09:64:12:43:09:4a:56:af:c6:5b:79:bd:37:b1:c7:13:71:81:
72:dd:ed:6c:5b:32:8b:ac:03:f8:10:ef:17:9f:fa:d8:7a:a1:
bb:6d:4e:fa:bd:69:16:21:81:8d:04:b6:54:c5:b1:83:6e:8d:
86:2f:bc:db:53:54:e3:13:ad:b7:38:1b:b4:94:4d:aa:8e:9a:
a5:2a:e8:b7:73:be:1d:a1:d3:84:49:59:e9:9e:b9:b0:ea:3a:
21:f5:08:04:7a:53:66:84:a7:91:63:84:44:0f:51:13:35:b6:
38:3d:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:13 2026 by rpki-client