Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier: gj6wb9gVyCsZ/a1GUZU9E6WoyzYpzktsL5HhZE0J1S4=
Subject key identifier: 5B:96:9A:D2:A2:5A:B4:35:61:AC:58:34:4B:32:AC:8F:43:93:5F:8D
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 019D38D2A63F24CE9102EDD97595181FB13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number: 0C7C
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa (hash: 9nj7uwXDpwi4IaoN4BLsfOwzpOwzS34nmfQiM2vUZE0=)
2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: sTqyBJqw+JRtX0RS5MahDxNUChB8gaopNHLlLJ5GPms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a6:3f:24:ce:91:02:ed:d9:75:95:18:1f:b1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=5b969ad2a25ab43561ac58344b32ac8f43935f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:e8:15:aa:47:be:ba:47:d3:fd:85:a4:20:
9b:09:88:d6:20:cb:58:f6:82:9f:31:26:ee:f6:92:
9a:17:20:b3:a4:f8:d2:0f:0f:e9:cc:65:1a:7a:6c:
db:67:b8:3f:df:02:53:ee:2b:84:fc:23:3d:09:47:
21:b7:9f:10:72:11:23:c6:63:19:f0:20:6f:7a:63:
0f:6d:77:b5:90:34:fa:12:dd:45:c3:ee:77:0d:4a:
cb:3f:8d:9a:87:20:d6:db:a8:49:7f:e2:14:84:cc:
bf:06:50:f9:97:e6:e3:80:79:ed:03:ca:13:75:6b:
e2:02:ce:6f:e3:ea:07:50:9e:f2:d9:66:d7:bc:28:
f0:11:80:ab:3b:75:c7:c2:cb:aa:46:32:49:c0:4f:
e9:95:99:34:99:fe:09:59:e4:f6:91:65:30:72:d3:
a5:80:8e:a6:91:a1:7e:82:f9:18:5d:da:dc:4a:45:
ef:54:35:27:e0:8a:57:51:18:db:f0:12:c9:82:ee:
53:64:76:89:49:30:9e:7e:7e:b9:77:f7:42:ff:da:
f3:2c:c6:c1:cc:64:84:99:39:33:75:4b:5c:c7:8f:
9f:17:43:1a:3b:42:28:31:dd:8e:ad:50:8e:89:cd:
a1:24:bd:12:9f:4a:cd:ad:8b:03:ba:25:7d:d1:84:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:96:9A:D2:A2:5A:B4:35:61:AC:58:34:4B:32:AC:8F:43:93:5F:8D
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:07:ca:7a:39:52:9c:83:d0:ff:9a:93:61:ef:1a:16:a1:5b:
48:58:73:41:78:fe:c8:f6:fa:61:0f:a0:bf:4c:7d:60:dc:46:
f3:10:a8:c5:42:26:4d:b1:d8:3a:56:49:71:a4:0f:40:a4:f1:
94:12:c9:62:42:30:ff:ef:6d:a8:7b:a8:2a:0e:8b:5d:2c:a9:
b7:b4:03:9e:d8:8a:06:c1:b4:cc:48:db:91:77:b3:c9:fa:52:
d3:d9:db:d4:95:bf:f5:28:e9:95:4e:49:4b:3e:3b:d4:a2:5d:
5a:b4:21:24:a4:cc:16:4c:47:b6:01:bc:e9:0f:d9:99:47:38:
60:aa:e5:e3:9b:98:8e:45:d4:e5:0f:41:f8:9e:43:b3:36:0d:
f0:e3:5d:a9:be:b3:b0:48:23:28:e8:58:47:b5:e3:8d:6e:1e:
74:c0:c4:6a:f1:7e:ac:ad:2c:70:da:cf:20:8d:eb:31:dd:3f:
10:f6:c8:02:34:b4:ee:8c:30:df:1e:d2:2f:59:51:b0:5b:a2:
32:0d:2a:fb:0f:50:bc:c7:9a:e1:d0:2b:0e:87:27:ca:82:7c:
65:9e:a9:57:0c:ee:a3:43:59:22:48:bb:01:19:ea:a5:4c:1b:
34:61:7e:5d:de:3c:c2:20:0c:ea:52:a0:53:cb:80:a3:30:f3:
c8:64:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:49 2026 by rpki-client