Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: x6VH6PaR4profNdmjoCsIqsCLVz1+mxdKP0PHMh2+M8=
Subject key identifier: 16:91:89:13:1E:99:AA:0E:3E:AD:E5:D0:0F:11:97:6B:DA:0B:7E:5F
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 019D37BFFF4BD9AF8474F58ABF48641DE484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: UnTOjQEZ4O0L5YaWb-Giu8CUXKA.roa (hash: s7GA4eqf5DoRRiNJRrEX+zAJuNz9IR335s9XPM6efIU=)
2: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: /Gg+IYY3gr28EmIOmrD7rByoKsCCyO/qBtwnNwzk/SM=)
3: uh159NPLsutfBxTfVmBXo6jRKfI.roa (hash: cuRJ8cZbX6qurWVTG+A5l4bJsxobrXuPMyOmp4NalQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ff:4b:d9:af:84:74:f5:8a:bf:48:64:1d:e4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=169189131e99aa0e3eade5d00f11976bda0b7e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:ff:41:98:a7:83:28:5d:96:d4:7d:a8:af:
ac:a0:90:9e:60:e2:c7:be:f1:ef:54:62:b5:45:0b:
22:68:eb:1a:db:5f:81:9a:62:a4:c2:b7:25:11:b3:
4f:aa:18:12:65:bf:c1:02:f1:01:aa:3e:a7:32:04:
3b:e4:de:c6:81:0e:cc:77:5a:9f:8b:83:98:23:31:
e0:55:d3:5b:23:a9:90:aa:38:bc:fb:ba:53:9c:04:
1f:56:54:46:9f:09:66:c5:64:aa:58:6d:de:a9:02:
a0:e3:1c:2c:ea:d6:53:0c:04:c3:d5:a3:44:d0:56:
9e:3f:21:e8:df:03:44:d9:40:22:48:3f:09:56:7b:
11:66:c1:6c:8e:b8:10:33:d1:a3:2b:fd:c4:22:ff:
1f:11:3e:fe:bb:88:b4:2c:59:02:4c:30:ef:5c:71:
86:2f:b6:34:c6:f6:4b:43:70:d0:b1:e4:06:72:eb:
e9:83:04:0e:ff:64:09:bf:55:11:ec:ef:2f:ca:c3:
05:b3:e2:c6:1d:06:49:48:50:79:e4:ff:37:7d:88:
98:60:31:82:f9:a8:48:5a:6c:18:21:65:7f:ef:df:
43:92:97:fd:b5:dd:7f:5c:1a:15:9b:05:28:6c:78:
1c:5c:82:26:6b:f4:c9:ca:45:23:cd:b2:00:6e:cb:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:89:13:1E:99:AA:0E:3E:AD:E5:D0:0F:11:97:6B:DA:0B:7E:5F
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:da:70:f3:73:a0:dc:2f:35:31:b7:d2:81:34:d3:30:b7:16:
66:25:87:1c:8b:0e:38:7c:6e:b1:c3:6b:b3:b1:e6:b4:16:3e:
b1:98:88:27:fa:37:8d:89:6c:c0:11:83:6e:f3:59:b7:ee:0f:
d8:22:90:1d:a7:39:71:8b:aa:e2:73:6c:5f:46:cf:e3:8f:e2:
ba:fe:2c:9a:75:04:0e:73:b1:e0:98:5a:ad:85:d2:a6:5c:4c:
59:76:68:95:50:64:38:56:d7:fa:07:59:78:cf:93:32:72:b2:
98:c1:bb:b4:26:ab:65:4f:5f:3e:96:50:a0:17:9a:40:32:ab:
02:91:80:9a:44:e4:0d:d8:db:bf:1b:c7:9a:0d:d3:81:e4:86:
ea:a1:7b:54:4f:4e:98:ef:dc:9b:fc:cc:18:36:bd:28:be:fa:
83:f9:94:61:e9:6b:0d:98:65:96:96:c9:5d:b5:bd:f4:11:14:
03:91:1c:b8:64:5a:a4:29:a2:15:10:1a:f4:2c:db:81:42:50:
07:ad:c7:1c:33:eb:28:9d:02:6a:79:6a:97:c9:4c:97:53:41:
90:2a:7e:e9:44:38:3a:a8:a0:ca:ac:3e:92:fb:cd:0b:9b:21:
c0:58:d2:4d:23:71:37:42:92:cb:5a:33:66:b0:a9:fb:df:7c:
a3:1b:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:44 2026 by rpki-client