Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
File: js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json)
Hash identifier: uhthpMhsTixPPsBzTVG7PbFT2BAwDzYG/3FfS3ZWqoI=
Subject key identifier: BA:0B:42:C2:5E:F1:23:00:E0:07:AB:24:72:5C:C8:C9:81:57:34:C0
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Certificate issuer: /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial: 019D39411F96C2D2B62E2274EC9909E91009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
Manifest number: 0ACE
Signing time: Sun 29 Mar 2026 11:01:02 +0000
Manifest this update: Sun 29 Mar 2026 11:01:02 +0000
Manifest next update: Mon 30 Mar 2026 11:01:02 +0000
Files and hashes: 1: 6jRqKVuODTj7RE21wNslnYzfKPk.roa (hash: Zs62FflRnG2r2QTuVznrFZu5JhE4Zt4az6qrBtPJYrM=)
2: LAWT8-8DrVGXo-g5H4GZO3z7fS8.roa (hash: Na6k/8EGssv/5DxPGxpYhkk2M4Z1QcQ+K49dXTrHKUI=)
3: LJlzTJtg6FQBljsIQ42l8hu1ry0.roa (hash: 8VVphXmiTF2MkpBn69wXWh0vVMpRcQmyTL7499d+b8Y=)
4: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: fiUjdWxPEm0S+Iup3UVlf76MriuCAIES/0Dptw5syA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1f:96:c2:d2:b6:2e:22:74:ec:99:09:e9:10:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Validity
Not Before: Mar 29 11:01:02 2026 GMT
Not After : Mar 30 11:01:02 2026 GMT
Subject: CN=ba0b42c25ef12300e007ab24725cc8c9815734c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:9a:8d:60:df:e6:16:7d:a2:ea:47:03:12:
8d:ec:e0:32:29:68:ce:e0:8d:f2:73:e5:21:1e:ad:
f4:a6:4e:6e:bf:e1:c3:e7:70:50:aa:48:c5:40:d6:
25:99:1a:bf:52:c3:10:48:7a:77:6e:14:18:1b:7d:
78:2b:10:1a:3c:f1:92:d1:02:3b:4c:98:56:3f:be:
43:18:ef:b8:94:0a:79:fe:a9:6c:60:4a:8e:fa:f2:
d1:ab:11:23:04:00:af:24:72:36:d9:2b:d1:da:c0:
28:36:25:c1:12:d6:3b:96:3b:3b:b7:ff:81:08:27:
49:83:62:db:74:22:29:ee:04:02:f8:21:9d:8c:28:
c3:8a:0d:4c:9b:d0:b3:0c:b2:37:d8:05:3e:77:c7:
e0:84:2e:18:09:e2:92:3c:0a:3b:86:63:20:fe:42:
96:51:db:51:4a:84:67:89:d4:37:de:8c:57:00:8e:
2d:fb:b0:2c:90:de:30:d3:83:56:58:36:47:1b:a1:
95:f8:03:7a:5e:2d:f2:0d:c9:f9:c1:a7:82:6b:94:
6e:f4:94:b2:2a:5b:5d:99:9f:a6:37:2f:2c:ea:19:
66:58:80:47:1e:79:e9:1b:32:5f:37:ea:a1:91:72:
23:19:71:73:a6:e2:db:f8:ff:63:1d:b5:7f:d3:1b:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:42:C2:5E:F1:23:00:E0:07:AB:24:72:5C:C8:C9:81:57:34:C0
X509v3 Authority Key Identifier:
keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:80:36:ae:cf:fd:64:86:88:2a:29:2f:3d:4f:07:9a:09:ae:
06:52:45:23:79:2e:e3:0f:de:f7:e4:a3:ae:fe:4f:da:24:3e:
c6:1c:cb:b3:99:37:fe:9b:47:35:d1:5c:a1:cf:f8:fd:1a:43:
e9:dd:a9:3b:c0:bb:90:23:14:12:b7:08:4a:69:b2:86:e0:a6:
a8:6d:14:c7:e9:6b:d0:62:73:fc:ec:eb:57:95:75:b0:5f:f5:
0c:45:e0:f9:8f:77:d8:a8:ad:2f:64:90:b8:db:a5:3f:45:8b:
6c:3e:45:d9:f9:8b:8b:77:50:1b:e1:6e:08:94:c3:0c:fd:72:
49:b6:5e:64:8b:4b:30:2f:13:f1:b1:72:bd:3a:63:69:4e:ba:
87:f2:25:8a:68:13:66:26:99:55:1b:65:60:a6:1f:7d:3b:26:
06:d1:50:15:67:f5:53:ad:4d:3b:1c:dd:e2:0f:ab:4e:ff:2a:
a4:0a:ff:aa:b9:f7:1b:aa:fd:66:27:6d:35:ef:eb:10:e7:8d:
f2:68:ca:25:e8:1e:21:ba:f6:9d:6c:a8:ab:c5:80:3e:0b:c4:
6f:9a:39:2e:24:55:64:cd:ef:dc:09:b1:79:78:2e:d4:56:f8:
dd:80:5e:0c:30:59:75:44:dc:fb:4d:70:1f:f4:47:f8:97:a1:
f4:0e:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:15 2026 by rpki-client