Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: CNTXUuFYMqqMOnqgfJkVDLZjIW8mLtCslGqacqYRxZo=
Subject key identifier: 73:E9:DF:0B:85:34:59:CD:6B:61:43:30:6A:97:22:8C:53:42:4D:09
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 019D389C161D5BCE6B175EBB0FEE03D79BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: bxe8_OOghXeeJNBS1LJite_JTKQ.roa (hash: SNnvmAY3MhgDBPaAU8BXN9WC/xup6duxDsZh0j7XDCs=)
2: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: BFLQLkofB2wvxRQuvMH51p1SxrZWcnBuV7sBuVK9K+Q=)
3: yHADJb6BZs2ak9yCDQIwsQB2apk.roa (hash: Qk1v22VZ27KbOG3oqvgp5v/wTns71MuCYehYFMsTHqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:16:1d:5b:ce:6b:17:5e:bb:0f:ee:03:d7:9b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=73e9df0b853459cd6b6143306a97228c53424d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:f9:e7:1d:87:8b:d3:75:b9:f1:23:2a:87:
38:43:a0:a9:e8:46:eb:3e:03:9e:97:4a:31:5d:e3:
e8:48:fd:4d:3c:84:84:a9:4c:10:b4:dd:47:2c:48:
a9:fd:43:05:21:ca:3f:a8:70:6f:c1:e2:25:c1:2e:
06:39:d1:93:31:d9:e5:c2:b2:11:f2:e0:df:ba:6d:
4e:6e:42:86:93:6f:1c:c1:8c:7a:88:d3:f3:4a:9d:
b2:c4:c8:a1:dd:2f:aa:9b:7e:48:8e:70:b3:0a:84:
7a:56:9f:ca:38:96:9e:e0:99:e5:e8:99:7c:c8:96:
07:a3:ad:4b:93:02:35:7a:f5:80:26:53:64:9c:c1:
85:2e:3f:40:6c:b4:a1:bb:be:a1:d9:3f:2b:dd:4b:
19:c7:4b:51:d5:b2:60:67:a4:05:38:80:a7:e0:d4:
a2:e0:6b:11:42:1f:cd:dd:a2:29:7b:d6:9b:a4:40:
32:4c:74:10:58:f1:38:24:f8:cc:38:92:fb:4a:66:
5a:43:25:16:6e:91:f4:c4:4d:ad:9e:da:16:87:79:
5c:84:09:47:3c:b8:c0:ad:79:a4:fb:ef:80:45:0a:
37:42:83:b6:4c:ca:1e:d3:75:61:53:fe:2d:b1:56:
71:93:d0:e4:cc:87:74:b2:55:49:ac:1a:4e:bf:8d:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E9:DF:0B:85:34:59:CD:6B:61:43:30:6A:97:22:8C:53:42:4D:09
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:f3:07:b8:25:7f:26:03:38:29:de:66:73:bd:15:c2:8f:
9f:ac:71:94:b3:b9:e5:c1:f9:2e:c9:05:77:cb:a3:5d:c3:c3:
35:fd:d0:c5:c6:a1:99:9b:1c:b5:51:da:24:59:7f:aa:17:a8:
36:8a:b2:07:5c:3f:5d:7a:d2:2f:af:2b:59:02:c2:4e:f6:04:
d6:61:44:7f:f3:e2:23:44:a4:ee:8a:de:41:62:f5:6a:5b:09:
06:6b:37:a8:7a:49:c4:9c:93:74:9f:4e:d7:c2:9e:cb:90:1d:
44:c2:d5:37:93:fb:5b:3d:25:7c:f7:91:ab:79:2d:a5:dc:45:
dc:fd:2b:d6:95:4c:8a:77:3b:99:08:1e:26:6a:fd:66:f6:7f:
ac:85:97:6f:2d:03:44:7e:48:80:85:e4:11:6e:42:9f:eb:08:
7f:2c:11:3c:45:f5:c5:58:0f:29:ce:55:c5:29:da:35:83:0c:
f4:84:e1:6a:c4:a4:14:9c:17:34:58:00:d2:5c:1e:8f:c7:37:
7f:1a:48:e5:4c:b6:c1:3f:87:ab:07:81:96:12:9a:f0:c2:c5:
2b:9d:0d:48:ee:49:90:f7:23:7f:88:55:70:15:c2:65:a2:cb:
ee:a4:76:2c:49:d7:97:fd:ff:50:35:64:fc:72:2e:09:cc:5b:
1e:a8:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:25 2026 by rpki-client