Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft
File: jKRJngTEZs_ph5p6BXMt80AVwZM.mft (raw, json)
Hash identifier: WjUwGmRfeynl40nnTxC0Sx6/a+BR+0nZjMESzpJJoOQ=
Subject key identifier: C6:2B:F3:C2:FF:AF:BE:B3:45:91:E2:4E:20:84:96:48:2A:70:57:E2
Authority key identifier: 8C:A4:49:9E:04:C4:66:CF:E9:87:9A:7A:05:73:2D:F3:40:15:C1:93
Certificate issuer: /CN=8ca4499e04c466cfe9879a7a05732df34015c193
Certificate serial: 019D37F6EFEB1CB89C3D7C0E2AB7EC122A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft
Manifest number: 0162
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: dfKTFGfTs10YftYU8pRXD2L4Sc4.roa (hash: 9Go0Cy2c/hUxG6kI2Y4JKXgcTmA81NqlWJty/FdvMfs=)
2: jKRJngTEZs_ph5p6BXMt80AVwZM.crl (hash: wBGtdY5m87xsO7WMhbTQZrKPMuqNDZGWX0lTVjnx+aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ef:eb:1c:b8:9c:3d:7c:0e:2a:b7:ec:12:2a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca4499e04c466cfe9879a7a05732df34015c193
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=c62bf3c2ffafbeb34591e24e208496482a7057e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:eb:29:68:3f:b1:f4:f1:25:7a:d2:66:4b:
31:28:a4:b1:a4:de:a5:bc:8d:89:5c:0b:6c:f0:cd:
6e:4f:d5:3b:9e:2e:a7:c2:0b:b9:83:93:e5:68:16:
e5:51:0e:29:a0:b8:0e:84:6c:34:07:9f:5b:5f:42:
65:5b:bd:70:0b:2e:12:6d:67:c8:79:c4:4d:b5:a0:
15:03:62:6c:61:b2:36:8b:49:87:0a:45:6d:fd:27:
5e:31:72:ca:f1:ce:13:7b:da:7b:43:92:3f:20:dc:
0f:af:7f:d1:48:12:59:50:b1:cc:e4:a2:bf:02:ce:
a6:a8:88:ae:49:12:c3:7f:5f:b5:97:8b:3e:8d:ab:
0d:ad:d1:67:4e:be:9d:4d:3f:07:7f:a2:34:14:1e:
1a:f3:c9:a2:77:61:50:03:0d:e8:a5:4a:7a:e6:5e:
da:19:1d:3f:65:87:d5:72:5e:48:5f:05:cf:7b:31:
4f:be:48:08:4f:6a:13:45:d8:76:1b:9a:42:0c:62:
f7:65:01:5f:5b:13:65:4d:e2:47:1f:41:a3:c6:9f:
f8:ed:2c:76:e7:b8:cf:c2:56:f7:5c:32:4f:ae:c2:
b1:cc:11:55:80:cf:ba:68:8d:03:8d:c1:93:dc:21:
1b:23:67:f9:36:a3:45:a1:28:0a:92:65:92:32:0b:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:F3:C2:FF:AF:BE:B3:45:91:E2:4E:20:84:96:48:2A:70:57:E2
X509v3 Authority Key Identifier:
keyid:8C:A4:49:9E:04:C4:66:CF:E9:87:9A:7A:05:73:2D:F3:40:15:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKRJngTEZs_ph5p6BXMt80AVwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/65d42e-832b-4eba-98d8-6529270b8bc5/1/jKRJngTEZs_ph5p6BXMt80AVwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:da:0f:55:3b:46:b9:00:36:d5:c7:57:32:92:70:33:aa:
8c:49:f2:cd:31:22:fe:c6:fe:4e:ff:0d:8e:d5:91:47:8c:40:
83:9d:d9:29:99:81:e7:ad:89:98:6c:97:9e:92:25:b6:06:00:
b7:c5:cc:ac:b0:e4:6c:00:b4:74:fc:db:4c:c2:bc:a7:26:b6:
23:3b:ea:93:55:6d:6b:9c:9f:d6:52:ac:ba:6d:88:df:f0:01:
7e:4c:01:17:36:23:53:b3:21:23:94:d6:27:40:29:ac:b0:c8:
62:36:ea:29:f9:d5:52:df:bf:e3:3e:c9:e2:f2:84:f9:df:27:
11:55:1c:50:97:6d:d1:26:f9:c7:fc:e1:3d:00:9d:e0:35:c2:
fa:ec:5b:a0:73:ed:07:ea:42:c3:a9:17:58:28:89:43:4b:da:
08:b9:c7:2d:53:05:3c:e8:70:55:a0:ac:92:53:02:8f:f6:51:
5e:c6:cd:7a:98:df:aa:b5:89:55:97:9b:b4:dc:1b:08:dd:e6:
11:35:87:49:75:d9:34:c8:cd:d5:30:28:b5:22:85:00:57:8b:
be:83:d0:c1:af:c5:0a:e2:f4:fc:ff:6f:a7:c2:5a:54:0a:55:
ad:ff:2d:fa:28:54:4c:25:76:01:18:2d:d7:f5:8f:48:5d:de:
ec:8b:b0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:05 2026 by rpki-client