Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json)
Hash identifier: arCvE4xFhg5gcJ1sKBdcb5KTSqhAICYHG5RfFdltM4c=
Subject key identifier: 89:7C:A2:C1:AA:B3:12:4E:EB:EB:9C:BA:36:D4:9B:76:8F:90:6F:79
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial: 019D37523F5C44EF2549E680F89BF1287B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
Manifest number: 120A
Signing time: Sun 29 Mar 2026 02:00:30 +0000
Manifest this update: Sun 29 Mar 2026 02:00:30 +0000
Manifest next update: Mon 30 Mar 2026 02:00:30 +0000
Files and hashes: 1: 2Kmu0cLG-L1kMQzDBhEI947wC7k.roa (hash: bDHuJC+CusB1PkTp9s9X+HAoLv5WHt/aI7X+YlNDFLc=)
2: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: maS/+CFraeS4mh798Rz9OC3HiR0RNHR8+HgY0W1MEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3f:5c:44:ef:25:49:e6:80:f8:9b:f1:28:7b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Validity
Not Before: Mar 29 02:00:30 2026 GMT
Not After : Mar 30 02:00:30 2026 GMT
Subject: CN=897ca2c1aab3124eebeb9cba36d49b768f906f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:f5:42:31:49:87:c2:05:9c:b3:57:fb:1a:
18:66:7c:87:42:78:00:d7:c6:2a:d6:1e:19:67:ee:
19:84:53:1b:5d:8f:04:85:8a:86:21:2c:67:8f:30:
55:ab:1d:8a:0f:7d:eb:b4:67:a6:d7:a2:c7:2e:29:
5b:99:53:47:18:ff:4d:21:63:b7:23:95:b3:e3:6e:
50:fd:60:5d:41:0d:a5:38:06:04:c2:80:8b:e7:96:
00:9d:07:5d:94:44:a7:3a:99:eb:fe:b2:29:ce:18:
77:39:e5:94:ef:4a:30:a6:9e:64:e0:31:fc:4f:f1:
21:8e:af:40:88:68:52:16:62:9d:28:f3:23:96:0d:
0a:52:c3:99:d4:9f:a5:b8:22:df:98:17:75:5d:d8:
d2:eb:a9:64:4a:27:93:21:2a:9d:f0:1d:34:9b:ab:
f6:ae:2b:70:f7:38:76:7a:87:94:98:de:ff:4a:eb:
ad:74:62:a1:31:6b:3d:9b:9e:bb:f0:68:2d:16:09:
1d:a9:fc:8c:c8:be:d1:e3:c9:76:51:e3:f8:10:bf:
5e:76:2a:86:77:82:32:3e:9b:d8:eb:63:72:f8:1b:
f7:b4:1a:72:ff:c9:d7:33:90:43:15:ec:c8:66:64:
5d:02:51:a3:3f:e6:06:06:62:29:31:5c:20:e0:40:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:A2:C1:AA:B3:12:4E:EB:EB:9C:BA:36:D4:9B:76:8F:90:6F:79
X509v3 Authority Key Identifier:
keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fe:64:1a:21:45:15:e5:53:66:7d:33:0c:3c:14:e0:4e:94:
1d:e3:7f:0c:b6:95:35:f7:cb:2d:40:a2:2c:3e:a6:fc:89:ad:
27:8c:e0:78:98:a6:f3:23:ab:84:ca:91:33:0a:e1:51:65:ef:
3b:f7:a5:02:ec:1b:6c:32:a3:e9:f3:7f:bb:3a:b1:c9:74:6a:
ef:db:89:fb:a7:a9:e6:ee:6f:c2:ab:22:ca:48:42:84:62:36:
2a:fc:92:33:bb:bc:21:a5:d9:b7:b6:7b:c8:7b:a2:3f:36:eb:
58:e8:6c:57:50:7c:b0:da:84:f1:ef:7b:c1:0a:30:73:9a:98:
98:07:61:8f:5b:4b:f3:31:42:5f:ae:09:a2:55:81:8b:c0:1f:
48:2a:d4:20:cb:42:26:e5:b4:b9:99:ca:09:d0:4e:8b:20:7a:
db:28:1f:55:98:d4:43:c0:b5:61:10:f8:77:8c:10:16:ad:29:
df:d0:22:98:45:40:2e:6f:15:9e:99:11:8d:7e:31:92:cf:f1:
c3:a4:e0:a3:82:6a:5b:5f:1a:bc:a2:32:63:9c:cb:79:0e:51:
1f:fe:22:98:01:14:99:d8:51:c8:b1:08:cc:65:09:af:a3:ab:
ed:03:c1:fd:1a:00:ab:60:82:52:2d:d8:9a:30:e7:25:d4:94:
13:23:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:06 2026 by rpki-client