Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File: jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier: uD3+hmsHCh87+dqkTCV+pEwhMGewz1Yry5SAfGpVgUg=
Subject key identifier: 97:DB:E0:CF:3F:28:D1:42:55:A1:74:38:4D:29:4C:24:5D:20:65:4C
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer: /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial: 019D31191AB83F49FB2583F3447071875255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number: 1E
Signing time: Fri 27 Mar 2026 21:00:21 +0000
Manifest this update: Fri 27 Mar 2026 21:00:21 +0000
Manifest next update: Sat 28 Mar 2026 21:00:21 +0000
Files and hashes: 1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: rBZ8TAydx7oNkWyO0nEh479iCOUr5sv66Np6qwheZkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:19:1a:b8:3f:49:fb:25:83:f3:44:70:71:87:52:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Validity
Not Before: Mar 27 21:00:21 2026 GMT
Not After : Mar 28 21:00:21 2026 GMT
Subject: CN=97dbe0cf3f28d14255a174384d294c245d20654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:88:bc:d4:32:04:8f:05:c5:5c:83:68:ab:
65:9a:89:95:bc:ca:af:f1:0b:40:91:41:28:5d:04:
8d:66:3f:c2:4e:f4:12:44:8a:7a:3a:51:d3:19:93:
b8:c6:fa:fc:bb:32:cb:79:25:83:20:ee:19:8f:34:
a3:90:1e:62:05:e3:49:fe:c1:95:2a:3d:b0:41:bf:
69:77:61:24:7c:f4:f5:14:c4:cb:35:ab:34:8d:74:
c3:79:46:99:21:61:3f:76:31:f8:6e:8b:cc:49:1f:
d8:b1:b2:3c:db:23:0a:41:03:4b:46:92:3c:05:37:
c6:05:a4:88:b4:de:8c:44:93:54:2b:85:99:de:57:
4d:5e:7b:64:ad:98:08:19:98:6f:a4:b0:28:54:6a:
e1:4c:93:3f:4b:5e:0f:e3:57:41:67:3f:d5:7f:10:
63:94:9b:01:2b:15:24:77:02:15:75:9c:db:5a:47:
b1:7f:e3:87:24:d1:37:12:9b:97:fa:80:d8:24:d9:
49:14:6f:fc:6e:bd:ae:2d:d1:4c:6f:84:04:68:aa:
3b:6e:ef:53:91:5d:ea:fc:dc:0e:67:79:cc:12:ff:
9a:89:86:8e:91:88:41:fa:93:b4:4f:ab:10:8c:44:
02:25:99:73:7d:86:e1:23:fb:1e:21:1a:db:7f:45:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:E0:CF:3F:28:D1:42:55:A1:74:38:4D:29:4C:24:5D:20:65:4C
X509v3 Authority Key Identifier:
keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6b:f8:fa:e0:49:f8:28:6c:9b:13:50:8e:88:e2:57:db:34:
3b:7d:90:c9:1a:54:17:96:e4:4d:ef:2e:30:92:99:25:00:2d:
fe:07:0b:eb:b6:53:99:02:49:a1:30:60:d9:cf:82:cb:b0:e7:
51:32:28:e3:8b:48:76:a0:25:69:66:22:85:7c:6a:3e:57:99:
d5:88:70:f1:f1:11:a0:ca:b5:61:14:46:38:bd:95:4b:87:26:
74:2a:25:6e:ac:be:36:3d:52:bf:64:c1:16:29:c2:6f:ae:ee:
86:ec:33:fb:1d:69:99:5e:18:e3:2a:2c:5a:50:d6:3d:b2:af:
b4:ae:16:4a:85:dc:e4:4a:7c:4c:36:28:82:98:7e:ad:0f:29:
f8:54:a6:8d:b0:77:72:3c:71:a2:a0:20:3f:56:2e:4f:1f:6d:
df:9c:4a:3a:bd:71:d6:3f:c2:f6:55:de:0c:fb:96:98:02:f4:
ee:27:1f:d7:3b:5a:af:52:c2:d9:6a:6b:1d:71:d3:f0:78:51:
df:db:68:3a:5f:02:0d:1b:8d:5d:f3:02:00:3c:03:a4:06:89:
9d:f8:02:6c:47:cd:2e:a3:4e:c4:d2:79:dc:c5:12:29:a8:c4:
3e:4f:e3:13:99:5e:6b:be:72:50:40:38:6c:89:c0:35:d4:a7:
38:83:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:40:43 2026 by rpki-client