Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
File: jaArHaSqceZbb7m-I6ayCMJcV9g.mft (raw, json)
Hash identifier: UHtuBuOXAD5tO5RFAOixCOHfdoYbgdkIphvbOyQ+2bs=
Subject key identifier: 2C:D9:3A:5F:EC:08:5E:D5:98:E9:B3:31:56:5A:56:E2:01:F1:DD:18
Authority key identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8
Certificate issuer: /CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8
Certificate serial: 019D382DF5FDAE2BB20E873DF80DA4823380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
Manifest number: 0350
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: 6kJ3PBkCijr-A9yGAIjkT0Whnvg.roa (hash: x3SAqnSBCxLWGRsChpxh6sJhNMm33GnNhcEkBfSZ2pk=)
2: jaArHaSqceZbb7m-I6ayCMJcV9g.crl (hash: ihuxZpQSAg2lQc7JoAnln5cgBfjNzIYXUaEXh8DBICE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f5:fd:ae:2b:b2:0e:87:3d:f8:0d:a4:82:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=2cd93a5fec085ed598e9b331565a56e201f1dd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:5a:2d:33:ea:ee:18:67:e9:01:dc:bf:b0:
f5:4e:aa:53:c4:f9:a6:25:c7:54:48:78:c8:98:f6:
2e:dc:fc:57:2a:89:f5:04:2f:39:b6:4f:76:f1:0a:
96:43:c7:bb:37:b2:bc:14:7d:d6:19:c5:84:4e:f8:
15:1b:07:87:d9:1d:cf:46:63:43:a1:37:14:ed:af:
a2:da:12:be:cc:8a:a4:48:28:04:f7:56:84:81:db:
64:b4:5e:2c:67:9e:ad:74:a2:c8:53:a4:d3:03:cd:
db:0f:c9:ea:39:ab:56:50:6f:30:81:d9:b7:6f:49:
74:03:9e:47:e8:3c:24:c4:ef:f9:f4:7f:8b:8f:4d:
30:08:09:5c:54:71:fd:79:4d:03:f0:66:04:14:59:
87:8a:82:ba:00:ed:2b:c1:1d:df:5b:8b:f9:b8:ec:
ee:21:68:70:99:b6:19:11:b2:c9:91:e6:09:34:98:
37:4e:0c:5e:f6:c9:68:27:b0:60:9b:24:69:0b:37:
47:e5:3f:29:1e:0f:2b:a6:e3:7e:f1:67:23:e5:ea:
e2:21:ed:0b:3c:dc:7d:fe:cb:38:42:2e:1d:83:95:
6f:a1:57:0f:0a:58:41:10:a2:c1:b0:1b:6c:01:1f:
a4:63:bc:54:c9:7c:f5:89:e3:41:0a:30:a4:b0:28:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:3A:5F:EC:08:5E:D5:98:E9:B3:31:56:5A:56:E2:01:F1:DD:18
X509v3 Authority Key Identifier:
keyid:8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:38:bc:37:33:0f:cc:e7:b5:0c:f6:8d:17:de:48:ab:8c:
27:f8:72:8b:fc:5b:9d:42:f3:a6:c5:50:a0:d6:97:d9:52:d7:
0d:6c:18:b5:3f:62:46:da:cc:d2:7b:13:d0:40:db:c0:a5:d9:
f9:ac:98:69:9b:bb:9e:80:ba:05:a4:35:84:82:2d:54:17:60:
a4:2f:1c:b3:53:2b:2f:5b:da:e2:91:55:dc:ff:43:df:5e:b7:
ae:02:8a:a3:a2:a6:eb:ca:47:9b:4f:11:74:01:2d:8b:22:59:
67:6d:87:8e:61:82:a0:d5:1b:06:0a:38:de:24:dd:65:55:c5:
cc:43:7b:8e:00:28:b6:1a:a1:a9:c9:25:37:32:32:68:52:7f:
3a:6e:02:1e:fb:d4:77:30:ce:f0:a0:ce:73:37:52:80:3c:e2:
69:da:fb:b4:aa:3b:0c:6a:b9:84:95:05:ee:92:aa:f0:c6:28:
cd:36:a0:28:11:e7:b3:d2:2b:c6:48:2a:77:73:fd:96:e6:71:
95:12:e3:ee:b3:9b:86:28:ce:cd:5b:c7:a9:f7:df:a0:56:14:
c2:2f:f6:36:22:5e:33:4d:d2:b7:98:c8:3d:71:85:d0:cb:9c:
04:82:cf:e7:4a:6a:b0:c9:2f:bb:1d:ef:9d:fa:62:cd:4f:d1:
2c:a4:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:10 2026 by rpki-client