Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: uwRDnS5OkDfgtmvrvDcN5xcvkbLQyvlns+hfrGFcZps=
Subject key identifier: AD:0F:50:BE:AD:E2:C5:80:5D:B2:AC:ED:58:54:45:1C:82:63:89:2A
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 019D39AEC957120E57105003FF2AF93AB970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 02B3
Signing time: Sun 29 Mar 2026 13:00:49 +0000
Manifest this update: Sun 29 Mar 2026 13:00:49 +0000
Manifest next update: Mon 30 Mar 2026 13:00:49 +0000
Files and hashes: 1: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (hash: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0=)
2: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: QfbdanLZ8CGdJw4v2CyzYlBQRzfW906jzOMjvOaiUAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c9:57:12:0e:57:10:50:03:ff:2a:f9:3a:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Mar 29 13:00:49 2026 GMT
Not After : Mar 30 13:00:49 2026 GMT
Subject: CN=ad0f50beade2c5805db2aced5854451c8263892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:d1:48:55:1c:d4:d0:e3:54:c6:e7:e0:52:
d9:7d:52:30:dc:4f:79:06:f5:77:af:46:fa:62:7f:
16:23:c3:51:58:17:55:02:df:45:a8:b7:ce:c9:d4:
30:e5:91:e8:a2:dc:02:f8:dc:1d:f0:aa:0c:7e:63:
5c:a3:e3:43:72:30:8d:64:e4:11:31:ef:be:56:62:
e3:64:d6:dd:9d:ed:3e:aa:05:12:5b:7a:5d:ef:47:
ca:37:c4:7f:40:eb:92:6a:7d:94:9a:d9:bb:f3:b0:
f7:36:19:38:4b:2e:94:90:c5:67:e8:8e:c2:c7:56:
fb:ab:82:c1:35:60:bc:dc:ad:53:6f:6f:63:1c:03:
f5:c2:e9:ac:6e:9e:b3:73:40:8f:f7:3e:07:13:51:
51:d2:7e:3d:6b:41:ae:3c:ea:86:11:9f:1e:03:f2:
94:d0:19:e7:dd:0c:30:c1:0e:1e:90:51:31:98:93:
f2:ba:b0:ae:6a:fd:c9:d9:35:92:b2:6b:13:4a:98:
3b:91:cc:be:d2:73:17:b5:2c:aa:84:43:b2:a5:7e:
24:57:01:ad:c5:cb:7f:44:f7:35:6b:75:44:30:2d:
86:64:95:fc:5c:8e:bb:49:3f:46:d2:7e:97:90:c2:
86:a5:29:af:a6:7f:3c:d4:80:cf:a5:e3:e3:87:90:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:50:BE:AD:E2:C5:80:5D:B2:AC:ED:58:54:45:1C:82:63:89:2A
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a9:6b:8d:74:a7:cb:e9:1d:94:16:a6:cd:f3:af:6d:43:27:
83:a3:e6:e9:f3:e9:70:e4:d2:74:8d:75:84:01:84:bc:64:2b:
46:fb:97:c1:61:8d:ca:f8:17:d7:3d:7b:f5:41:7f:b3:ad:f8:
9a:20:48:59:9e:8e:75:4c:fe:32:8c:fc:42:ad:29:74:5c:be:
b5:d1:f5:5c:a6:68:06:00:1c:55:b7:ba:7b:63:4f:13:77:ba:
19:17:ba:6f:49:17:3f:14:54:07:e8:5d:9e:b1:b2:49:18:71:
95:7a:c9:da:b5:a9:25:ba:50:da:c6:57:e4:5f:c1:64:4c:08:
43:2b:97:d0:3c:cd:97:f3:15:da:6a:94:6a:c7:72:14:06:fa:
a7:6e:ee:ee:6d:6e:5a:a8:9f:3e:47:7c:f2:1f:b3:4d:29:dc:
47:b1:76:83:52:a0:5e:7e:d8:94:dd:a5:bb:5b:ce:81:ce:28:
cc:27:bc:0b:9c:94:9e:d6:e6:bd:2a:b5:b2:ef:26:e3:ca:5e:
2e:e8:0b:f6:31:fc:d4:de:3f:9c:fb:65:b4:4f:fb:f2:d2:69:
cf:82:36:2e:48:a6:12:cc:6f:8e:ce:8b:ce:f3:dd:a6:59:37:
95:d2:78:5d:0f:10:c9:92:4f:eb:53:f3:dc:cb:89:37:88:c4:
f7:5c:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:13 2026 by rpki-client