Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: ZiCvJguD67KhKMKNFQQ3V6G0V6wsWwTUFGfOu/cL9PQ=
Subject key identifier: 9C:B3:B2:EE:DF:5F:2D:0C:37:7B:06:DE:58:BB:B9:06:50:CF:C6:DF
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 019D38D3B0ADA067751FB787AD6C538BD749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 0507
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 6fbN8X-Zd_3bLagCKNLcI6U0ZQ8.roa (hash: 9tQRoU2KNqyt5jisalOBz3HOC+o/8ZxBiQNdSn21t9k=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: mcRjPEYJg3Rk+qzdQNJk97ofhftGUqimXet1+vobDNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b0:ad:a0:67:75:1f:b7:87:ad:6c:53:8b:d7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=9cb3b2eedf5f2d0c377b06de58bbb90650cfc6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:95:ab:b4:ac:f4:be:bb:35:bc:7f:66:74:
f7:12:54:88:1b:1a:36:e3:d4:4c:da:fb:e0:ff:79:
ed:91:b2:26:e2:39:a3:21:82:fa:7a:e7:74:c3:db:
0d:2f:3f:c8:3d:42:a3:92:49:d4:5b:34:f1:5b:49:
17:93:33:b5:c0:f6:92:ee:57:a9:0f:a1:aa:dd:a9:
77:91:1a:a2:ba:c5:75:6d:65:fc:cc:76:8a:06:22:
52:be:5a:3d:04:04:11:2e:f9:0c:81:15:9a:13:2e:
60:da:5e:e5:b0:a1:06:b8:45:18:cf:ca:a0:f2:d9:
b8:37:87:6e:6f:39:81:7a:5e:1a:16:86:32:b0:46:
9b:c5:23:48:b5:c6:e6:10:3f:4d:92:7d:2f:40:51:
86:a0:e3:b6:93:fe:12:a8:2e:35:1b:fa:d5:d0:8b:
18:c6:cc:59:f8:7e:53:ff:5c:60:b9:12:7b:bb:13:
3d:6d:05:0f:18:ef:62:e9:1a:44:35:d0:ca:52:6c:
e2:73:fb:5a:c1:41:5e:ae:76:32:ab:28:96:16:6c:
cf:a0:7b:90:ce:ce:9b:74:84:4a:67:b3:f9:ff:a3:
af:24:14:0f:14:6b:4e:4c:eb:c4:72:49:73:90:a0:
b0:0e:32:b1:55:64:0f:ee:5a:23:5d:ff:3a:93:8d:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B3:B2:EE:DF:5F:2D:0C:37:7B:06:DE:58:BB:B9:06:50:CF:C6:DF
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:15:99:13:0a:9c:f9:87:94:be:81:96:31:a5:18:fd:21:a1:
4d:d1:09:1d:cb:ea:98:a2:8d:12:d2:d4:ce:e8:ba:6b:be:88:
fb:dd:a3:e6:85:47:4f:e3:c6:8f:87:52:6d:d1:4d:e1:f5:44:
21:cd:f7:61:a4:b7:2e:1b:52:1e:de:b7:cc:56:bf:54:fd:0a:
4b:9b:e1:52:2e:85:19:91:48:dd:df:09:94:6b:d5:a3:ab:8c:
35:2a:69:3f:a2:8c:13:79:cc:66:d5:83:40:4e:30:cf:02:73:
ba:e5:aa:3c:86:e9:34:ba:32:ad:e1:0c:b3:e5:cb:91:e3:b9:
79:a4:1e:e8:63:d8:41:bc:13:2a:2d:86:2c:bc:66:a0:ae:74:
ef:11:d5:4a:9d:57:d8:12:16:f1:61:4d:ad:67:df:be:9f:f7:
ec:a0:ac:c7:b2:0f:9d:75:7c:f1:65:d9:23:a8:ec:5c:15:28:
3b:8d:12:e9:2d:52:f7:ae:e6:ee:be:f8:e9:a5:6a:44:61:b0:
c6:70:8f:27:f8:a4:7a:ad:69:9e:1c:97:02:a9:e3:0a:c4:ef:
ef:d9:e7:cc:a1:4a:af:52:91:54:f1:6d:bd:f9:92:fa:9c:62:
8f:d4:0b:40:e8:a7:b8:52:b3:ed:f9:31:4e:33:bc:35:f1:2b:
b3:a8:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:31 2026 by rpki-client