
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier: T8M6Tq7iy3HHVj+JOzOnvVlbc8FZJzZe0qwyicKsYB0=
Subject key identifier: 98:35:50:DB:EB:3F:F7:10:EF:55:81:33:BA:C7:1B:15:41:12:AB:36
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial: 019D394182C579F1CBE89F69D8110B39F7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number: 07AD
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: kNP/Hm7kYW8x/9pFu95TSSWMZUyRz4KXMqhxzohm/JY=)
2: nyskGSMyjznwMN2wb3tRAEeMLcE.roa (hash: PX/bA+AaDD7Kn1LegVS7xXR8J6c1hlmfLAOwmDLgfNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:82:c5:79:f1:cb:e8:9f:69:d8:11:0b:39:f7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=983550dbeb3ff710ef558133bac71b154112ab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:8d:61:9d:f3:46:41:1a:69:e6:7a:12:83:
d7:aa:6c:91:7a:7c:5c:33:e1:e4:d2:da:c7:92:d8:
d1:ab:6e:14:81:51:01:8f:9b:df:8b:70:8a:3b:0d:
f8:92:21:df:40:e0:87:84:a0:7d:38:86:19:48:20:
01:7a:18:80:4c:a4:96:03:19:53:d3:b9:3a:fd:bd:
71:0d:5c:16:07:f8:92:48:56:e4:05:60:93:89:01:
33:62:c6:24:73:35:d1:07:8f:f3:bc:b0:e0:52:cc:
3a:76:39:9b:f2:a1:69:6d:b1:93:38:6a:77:f1:d9:
b3:64:29:48:da:c9:e7:19:4b:27:a9:97:df:7d:00:
bc:5d:56:cc:2e:2d:0e:5b:2b:6c:e1:fb:24:9b:25:
5c:42:a1:53:bf:bc:8f:54:85:1a:dc:49:d7:e2:46:
9d:3d:0a:84:3e:77:c6:05:53:ae:a1:e8:45:15:99:
28:5e:79:2e:6d:10:f9:08:b4:52:0e:be:4f:a5:2d:
68:43:79:4b:52:52:fd:b0:4a:f8:a9:fe:9c:ce:36:
6e:4b:92:f4:3b:07:14:fa:7e:e2:4c:01:d5:d4:fb:
7d:a4:63:9a:65:fd:46:88:2e:2a:aa:69:cc:d9:77:
33:2d:d6:1c:e1:c3:9a:2b:f1:58:99:8f:74:8f:f3:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:35:50:DB:EB:3F:F7:10:EF:55:81:33:BA:C7:1B:15:41:12:AB:36
X509v3 Authority Key Identifier:
keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:18:c8:f1:96:44:76:96:df:ee:f9:41:bf:d6:f8:00:fd:58:
f9:74:9b:a8:33:bd:54:ad:83:15:9a:ed:aa:41:ae:a6:7c:20:
f8:7a:01:43:ae:b1:64:1a:81:08:3e:0a:3d:c7:7e:40:66:a7:
22:0a:81:e6:19:59:18:e5:64:32:a3:e9:fe:6b:99:6a:b2:b0:
6f:96:07:1a:60:5a:0f:18:a0:f4:ad:21:99:9f:f9:4c:21:c7:
4d:7e:e2:22:04:8f:70:e6:28:e8:a2:c5:4f:e2:45:aa:86:21:
d4:85:a1:8e:d6:f9:a1:bf:99:51:60:28:c5:40:e0:09:5a:74:
36:06:39:3c:9e:7f:77:94:6c:b4:d1:11:19:a5:20:2a:49:95:
db:92:db:59:dc:5a:11:b1:fb:8b:36:10:93:68:14:4a:19:23:
a3:59:d6:93:f3:a0:c1:3e:34:e5:ac:40:e5:bc:22:25:ab:75:
76:a3:5b:ab:fb:a3:ae:4f:62:cf:67:e6:ee:42:24:19:df:63:
9d:2e:29:7f:7f:4e:c7:c2:f1:78:db:06:94:c2:b8:02:b8:6a:
d0:14:97:18:82:37:2f:ee:e4:cc:40:7d:21:16:16:d3:a3:54:
c4:ab:54:26:1d:fe:23:f4:06:af:69:ee:e8:a8:ea:74:7a:76:
33:f2:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:31 2026 by rpki-client