Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: Tm7LdlFrPy6nzXSn9Ai+FoUbhwIOjM7z/4/PZ7Shdv8=
Subject key identifier: 5C:0D:22:32:6C:61:FB:6B:B4:17:45:D9:CC:AA:C3:E6:9D:A1:C2:20
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019D37C0542D47C93D3552EE2F03EBA664A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 0641
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: LJcjHozXofDzGGpFnMrj2XjpsN0Kfi88VquWfLuIS7I=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:54:2d:47:c9:3d:35:52:ee:2f:03:eb:a6:64:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=5c0d22326c61fb6bb41745d9ccaac3e69da1c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:fc:99:eb:76:84:86:b7:2c:a7:c4:0b:94:
34:dd:be:73:53:91:15:f3:b9:cc:53:d3:56:67:e0:
83:64:49:fa:47:c3:19:ec:fe:82:49:fc:f5:71:3e:
12:50:1d:10:0d:09:a3:cd:20:e9:22:42:d5:dd:f9:
cd:41:8a:c8:d9:40:b7:3e:87:44:6a:f3:bf:2d:03:
04:79:aa:68:73:e4:2a:54:be:db:6f:c1:7e:64:27:
d0:90:85:8b:86:37:b9:81:55:fa:59:ec:be:a0:7c:
51:a7:03:8b:2d:44:ea:7a:ca:a3:0f:85:06:81:dc:
6b:3a:f4:4c:d6:7d:6e:fb:2b:eb:29:ee:9a:4e:53:
0a:8d:b3:cc:b1:df:65:65:70:5d:a5:f0:c8:ee:a6:
71:e7:d2:d3:02:0a:b4:d4:4f:3c:0c:74:05:20:28:
36:ca:08:1b:14:e4:bd:4c:de:16:e7:ca:85:9d:22:
15:5c:73:48:19:57:b3:95:a5:da:04:ce:42:22:20:
18:6f:71:6a:86:08:9f:67:4d:1a:e1:0b:78:28:ce:
7d:87:b4:7a:87:5b:f0:b0:e3:a8:3e:3a:a7:00:c0:
fc:01:2d:ca:1c:89:b4:e7:1d:fd:aa:e6:a2:9e:25:
8f:2f:b6:9c:e9:af:6c:5b:ea:cd:79:c0:f6:13:9b:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:22:32:6C:61:FB:6B:B4:17:45:D9:CC:AA:C3:E6:9D:A1:C2:20
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4e:30:81:c3:18:b7:39:e9:b8:f6:33:f9:0d:c7:87:a0:c2:
6a:1f:f8:eb:94:bb:4a:8a:6e:78:8c:27:d2:5c:a8:f3:82:3e:
c8:4c:9b:36:a2:a7:d2:0c:c6:67:ba:21:f3:7e:49:7f:16:94:
6e:52:f0:a7:ec:a7:41:a6:0d:cb:20:09:fe:05:e0:bf:91:a3:
c8:90:da:83:03:30:2a:be:27:da:46:d5:15:7d:f1:47:e3:52:
4f:2a:bc:34:b8:6b:72:fa:f1:fd:c2:7f:48:0c:49:47:b5:ef:
51:db:41:0e:6b:c9:eb:dc:72:ac:07:8b:3a:6b:d6:e6:87:c0:
1b:20:3e:47:c8:d2:5e:97:4d:eb:ec:55:3e:c4:52:79:f6:fc:
00:c5:3b:8b:c4:3a:d0:6e:a9:00:78:be:1b:59:5c:06:d1:96:
2a:79:06:2a:14:9a:dc:f3:f3:9a:44:26:a5:9b:40:bd:61:fc:
03:c7:77:26:64:82:61:11:b2:b0:80:c9:17:8a:d0:d7:ee:67:
7b:10:58:cd:6a:89:79:eb:15:5f:ac:a8:eb:44:8c:57:3b:8c:
39:7b:03:a3:8c:e5:4c:b5:57:2c:6c:3e:a0:cc:8e:dc:ae:6c:
02:50:8c:38:c9:bc:d7:e2:f1:18:b4:ed:4c:f7:9e:ef:f0:36:
b6:92:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:26 2026 by rpki-client