Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: EWcrlt9QokDFAlO5hIGQeZ8e88hCn1LVbfGlXkQA36Y=
Subject key identifier: 72:74:FD:D3:0B:43:82:BA:43:03:48:3E:57:C9:DC:2A:29:2B:0E:BC
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 019D37525E0C20B234FBDDF781638EA8F077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 15C0
Signing time: Sun 29 Mar 2026 02:00:37 +0000
Manifest this update: Sun 29 Mar 2026 02:00:37 +0000
Manifest next update: Mon 30 Mar 2026 02:00:37 +0000
Files and hashes: 1: LL_AxmtYZZoPVDJOgngQ3xheZAg.roa (hash: SlYQb5afBreMgIamUgnc8eCfbQSDhHvoVK81024PSGE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: WNGdX0oU7NYzR3maX5zeyVfl1hcdnELCcQKxitxFvRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5e:0c:20:b2:34:fb:dd:f7:81:63:8e:a8:f0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Mar 29 02:00:37 2026 GMT
Not After : Mar 30 02:00:37 2026 GMT
Subject: CN=7274fdd30b4382ba4303483e57c9dc2a292b0ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:9a:c3:be:a6:78:18:8e:b3:e0:70:96:c1:
6a:df:87:de:69:3d:61:ac:bd:2c:fc:b2:8c:21:af:
d9:48:69:c3:56:25:b6:15:08:a6:9a:6a:3e:60:3a:
56:38:35:74:bd:82:f4:64:a8:7d:63:ea:be:3e:7e:
51:c0:64:52:ec:25:ef:df:99:6a:81:75:be:b2:f3:
e4:31:02:93:c2:99:6a:5d:35:18:39:cd:e4:61:b0:
78:9e:0a:df:01:45:7b:15:55:e5:8e:e8:c9:8c:f5:
e6:a1:91:92:7b:21:7c:33:fe:24:94:27:dd:02:32:
6c:9f:31:b9:08:3a:89:05:1e:c9:2b:45:a8:a4:a8:
7f:32:0c:a2:c1:9a:48:04:62:aa:ce:61:21:b1:b9:
d8:db:73:22:5e:0a:27:d4:41:df:38:d8:45:fd:e0:
c7:c6:e4:07:92:c0:82:98:be:04:b7:69:f5:76:28:
0d:5c:0c:8c:7f:e5:65:ed:a7:67:40:fc:a0:08:1b:
1f:1d:6a:b7:65:21:39:5f:d3:ca:7d:6d:17:42:59:
19:de:4a:3b:53:32:0b:de:61:b1:ba:d5:39:6a:d2:
10:5d:da:d2:74:de:35:89:ba:c4:2a:13:1d:83:b1:
51:1b:7d:84:95:91:bc:e8:3a:c6:39:e2:e3:51:a8:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:FD:D3:0B:43:82:BA:43:03:48:3E:57:C9:DC:2A:29:2B:0E:BC
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a1:da:95:d2:e1:c8:07:e0:97:ac:b4:e1:37:8f:37:a6:df:
46:f1:3a:04:56:a7:ef:15:7f:46:e0:55:8e:70:02:af:e0:45:
3e:4b:1d:63:20:fa:39:80:3c:37:e2:ff:2c:82:d9:1e:3a:e1:
e4:ca:e6:ce:83:8c:0b:62:c6:2f:d4:ae:9d:8c:94:c6:09:25:
01:60:54:6d:cc:c1:a1:bd:e2:29:3b:12:77:aa:58:ac:75:76:
b2:54:bc:4c:ed:db:ba:45:df:5a:ca:11:d8:6a:0b:e2:a5:d6:
39:67:86:05:bf:45:84:66:ef:51:db:b3:54:23:b7:b2:b0:e2:
0d:90:4e:19:75:b8:95:c9:e5:1f:37:de:b0:25:3a:ec:10:b1:
29:91:1c:2d:4f:95:7e:38:63:33:32:cc:74:ca:60:30:a4:72:
cf:be:df:6a:4d:75:ff:47:1a:7c:3d:3a:4e:89:dc:48:96:0e:
47:a6:e2:35:3c:2e:37:3b:c3:ab:89:16:93:4d:69:2f:7f:15:
c3:a2:72:a0:0d:6f:09:00:67:fa:10:d1:8b:00:6a:5d:7a:c2:
4e:82:92:37:16:6c:42:4e:6a:b3:a7:b9:ad:42:fe:9a:4e:ad:
75:04:f2:82:5d:89:e1:b2:11:f1:8b:6d:df:34:fd:74:36:87:
b5:cc:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:24 2026 by rpki-client