Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier: AT76Giz9rHClEMgMAKYXTOQ9OXOA+q4BIVK9XmI32e0=
Subject key identifier: 0B:F2:06:47:46:EF:41:B5:07:A8:30:35:ED:C4:7F:DC:4D:D4:06:65
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 019D389C20E890603935E67A30AD4CAD3B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: 8cg2nEVG8Xzu0RX4ymhKb5woKRk.roa (hash: kcwFv0RR8Ptv5DePTusLmAIEM0ACWY+zBbPUnnsVU90=)
2: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: f9x+PMSjxQ4QtAw0PPhvXzozVr9mNMesj4+un/Nmd+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:20:e8:90:60:39:35:e6:7a:30:ad:4c:ad:3b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=0bf2064746ef41b507a83035edc47fdc4dd40665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:4b:08:47:75:ae:24:42:53:6f:a8:a2:01:
98:e0:d3:6d:3d:25:86:aa:46:07:6a:07:f7:fe:02:
fd:2a:2e:ae:4b:61:2c:c7:87:0a:6e:c4:8e:9c:6a:
05:5e:db:c3:b2:21:40:5a:16:74:c9:65:db:8b:f1:
47:8e:92:4a:7e:f3:3a:0d:71:49:de:15:16:eb:31:
23:0c:ae:63:df:f5:68:5e:1d:ce:6b:a1:90:e4:22:
c1:4d:45:4a:e1:69:35:94:0b:ba:d1:72:5e:1c:92:
6f:77:9a:3e:c2:df:88:e5:d6:09:4b:e5:6f:a8:36:
a3:f2:ab:e6:5c:51:1e:82:14:3d:e5:05:d7:88:42:
36:8d:8d:38:2d:8f:ab:ce:3e:6f:16:af:d9:3f:69:
76:65:fb:fa:1c:db:16:fc:e7:16:57:e2:30:b5:8a:
b3:75:25:0a:fb:27:32:8a:a3:c0:2a:f9:c6:a1:49:
14:f2:ed:a7:55:28:6a:70:0a:32:53:c0:19:c7:e4:
1e:8a:a1:1e:4a:ed:2f:98:bb:48:82:81:63:6a:27:
27:30:ab:6a:8a:f7:89:3c:8d:2a:e4:13:78:5e:7a:
09:60:04:7c:54:6f:4f:02:e7:25:bf:14:e5:7d:58:
5a:fd:dd:bb:62:ed:60:ee:99:fe:8d:e9:52:b1:02:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:06:47:46:EF:41:B5:07:A8:30:35:ED:C4:7F:DC:4D:D4:06:65
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:46:71:a8:47:c9:84:17:c5:f2:a5:36:8d:51:91:15:b0:74:
ab:2b:43:1d:1c:c4:7b:93:97:6f:b5:a4:46:aa:04:10:6d:cb:
39:c8:0e:02:83:3f:1b:7f:87:17:9f:35:ee:cb:6e:fe:d5:be:
39:ba:49:88:19:64:d0:9e:35:27:dd:59:25:5e:2f:7d:2d:15:
07:b3:a0:2e:ff:c3:03:55:b4:aa:d0:49:11:55:30:1b:e3:2e:
31:88:49:3e:c1:6e:57:f6:2a:b3:e8:12:e2:f8:aa:79:b8:8c:
cc:81:c4:b2:8c:be:6e:41:d2:3c:b3:fb:de:50:39:ae:3e:7d:
3f:3d:55:ea:75:43:24:fc:a3:85:a3:9f:4c:6e:5d:25:52:ab:
6b:2b:66:13:d6:3b:b6:0f:fd:ef:39:d4:03:e2:a0:7c:2a:f1:
d7:6c:24:a8:ac:0a:d6:3e:24:03:ad:fc:d1:f7:5e:a7:60:46:
48:45:a1:e3:48:b3:6d:73:81:fd:b2:6b:10:ab:9d:a2:25:3d:
56:1c:93:05:f2:47:16:ea:60:ae:c4:0e:e4:f4:14:03:44:a8:
ad:4b:fd:d0:de:4a:35:88:4a:fa:9b:8a:d6:c3:95:f0:38:d9:
d9:12:ae:61:aa:af:c7:c6:8a:79:15:76:62:a3:27:e8:93:f0:
c0:9a:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:16 2026 by rpki-client