Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: oyslfanoHRdJXJkqSXOSVIFdt/uD5sfFdyTFFeYiwAI=
Subject key identifier: 35:0B:3D:B5:08:65:9E:09:B5:14:2C:7B:C2:11:D1:D3:7C:4C:B6:62
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019D1121C3777764DFDC609A5BACC59BC787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1884
Signing time: Sat 21 Mar 2026 16:01:58 +0000
Manifest this update: Sat 21 Mar 2026 16:01:58 +0000
Manifest next update: Sun 22 Mar 2026 16:01:58 +0000
Files and hashes: 1: j14PejNnVbSoAydM85X_n83WDgE.roa (hash: jfj4OGqg5kVl4stoIRYlf4QdlrWh6mPZAlYSQkvc8+k=)
2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: GlmeXeFwXKSAMoxuFzAF4Vx/fFtThKoQw4NSliSj/JM=)
3: nbm3hVn9hJgrdxApoYW6_LkAHBw.roa (hash: /jIkd8Myn46sgXnoD9e4Sybc8r78RdvI4H7sLK3ci9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:21:c3:77:77:64:df:dc:60:9a:5b:ac:c5:9b:c7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Mar 21 16:01:58 2026 GMT
Not After : Mar 22 16:01:58 2026 GMT
Subject: CN=350b3db508659e09b5142c7bc211d1d37c4cb662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:d7:46:aa:00:e0:a9:83:32:81:ff:bb:d5:
bb:6b:3e:72:3e:07:27:d5:32:7d:32:3c:7a:94:90:
73:08:fc:7a:53:64:e6:ff:05:6c:08:56:6b:3e:c7:
dd:9d:07:2c:25:c1:54:c1:34:8c:51:23:1d:90:b7:
0a:1d:90:fa:a3:ca:65:77:e9:01:81:59:f7:de:ed:
de:4a:6b:8e:03:b0:2a:28:7a:f4:f4:80:7f:39:90:
4b:43:8e:1c:a6:79:94:b0:e3:8e:60:25:8c:09:85:
33:9e:7a:df:6f:75:13:4d:1e:66:57:eb:d6:9d:92:
53:94:ef:ab:e8:f1:54:2e:f2:ed:34:99:45:21:74:
47:6b:62:be:1f:55:8b:2d:d9:fe:9e:7e:fb:11:04:
02:72:e3:4b:1f:5b:f7:71:31:d6:48:8f:f4:75:c7:
f3:26:30:48:f0:1f:1f:ac:bd:24:b0:67:8d:e0:06:
47:46:f3:79:69:59:99:8f:73:f7:99:a3:66:ad:b0:
de:f7:f7:ca:4f:f5:b6:bf:7b:70:39:76:1c:b6:a7:
24:c6:46:35:70:ae:a0:b9:99:db:6a:c6:53:88:25:
91:ea:aa:ba:15:16:c2:a7:94:3f:e9:aa:d0:10:fe:
df:bc:89:c9:24:0f:0c:25:8f:1d:65:9b:9b:87:7c:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:3D:B5:08:65:9E:09:B5:14:2C:7B:C2:11:D1:D3:7C:4C:B6:62
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:38:ab:d0:bd:27:14:96:89:02:7b:5a:eb:0e:14:43:02:62:
e2:e8:6e:c8:69:4f:c5:49:05:bb:7f:af:5b:5b:b3:a0:2e:b1:
fd:94:3f:c8:d2:ec:4c:91:cc:f4:20:ad:37:eb:41:a0:0b:d3:
18:c1:1d:9b:27:10:3f:13:7c:cc:15:ef:1b:a2:10:9b:46:96:
c9:5e:4e:30:6a:31:67:b1:77:05:99:c6:08:60:e3:ef:c7:01:
b1:39:04:44:75:be:c9:f8:89:51:88:18:8b:2d:e2:55:47:a7:
ae:36:c1:e5:83:7f:3c:ec:62:a1:e0:7a:03:85:ba:e3:cb:a3:
79:32:41:98:29:90:4c:5e:43:85:c6:bc:a2:8a:5c:b8:77:00:
f7:7f:6f:d8:db:6d:c6:8d:0e:6b:cf:8d:27:c4:8c:47:2a:f9:
cf:f6:69:81:c2:3d:a7:82:f9:88:df:56:72:a1:1b:63:93:51:
a6:ad:d3:68:8f:23:27:73:e7:c6:95:c4:c0:de:84:46:2f:da:
cf:57:52:c5:f3:bc:27:a2:8b:60:a9:37:87:ce:93:18:a3:aa:
d7:2c:5b:7e:db:ec:32:ff:4b:5a:ec:28:83:0b:12:67:ed:c5:
84:cb:8f:08:87:77:e1:85:80:d5:91:94:c3:f4:7c:93:74:72:
b1:0e:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:12:42 2026 by rpki-client