Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: KerjsIA2IPdCPf0/bbtVPB0SvC6erEHR/Nm/bZc5b8k=
Subject key identifier: FD:35:C3:FE:5C:A2:9A:BA:A9:6C:7C:AE:B3:EC:1B:FD:AA:5D:E4:80
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 019D37C0D0B649CAB2D9B35EED66F3973F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 04:01:16 +0000
Manifest this update: Sun 29 Mar 2026 04:01:16 +0000
Manifest next update: Mon 30 Mar 2026 04:01:16 +0000
Files and hashes: 1: 0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa (hash: 9FNLm9UezI9LWG0EYY6elTehFhNHqrh8PSFbqazgLkI=)
2: aIB-U74XOsh4LFFeV56dHmApdhA.roa (hash: n4BldvZSrWCDo/is34Mdq/Joj399xGxxHCi8O5qGXUc=)
3: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: Rd3EPLzIXuLex8gwHCduMax0Fva/TzLmKiWrxG25BoY=)
4: jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa (hash: USL2VyfF57jrtGEUdroIYIf6KJtLy3Xo1q4FTmoA1+c=)
5: kft59b0FPyvt41ZJ7c7rkDRzMdo.roa (hash: rnkG/kK1GbP5ThmnLvK6djMuJiao91onEPjk3GN8OV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d0:b6:49:ca:b2:d9:b3:5e:ed:66:f3:97:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Mar 29 04:01:16 2026 GMT
Not After : Mar 30 04:01:16 2026 GMT
Subject: CN=fd35c3fe5ca29abaa96c7caeb3ec1bfdaa5de480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:63:70:fd:32:d8:da:7a:16:83:b6:bd:ad:
18:f9:7f:07:c7:e6:cc:f5:c2:82:69:5a:e0:39:ab:
b4:f6:d1:96:08:ca:79:f1:93:0f:1d:b3:6b:af:4b:
f3:db:86:16:1b:6b:5e:ce:78:27:e7:57:3b:83:c1:
38:bf:ba:9a:bd:a1:26:49:47:8c:fb:13:b3:8a:b7:
27:46:b9:99:a7:a3:80:ca:98:97:6f:b5:72:49:68:
06:ac:59:82:a9:63:a3:95:57:24:51:fc:8a:b3:d5:
cc:86:d4:76:1b:68:5a:b0:50:ff:be:78:4b:20:24:
b3:b0:47:ca:72:ad:5c:94:a1:20:01:1e:49:e6:7d:
f4:85:21:21:53:c4:07:ea:84:48:a9:0d:f2:37:23:
0b:63:4c:96:da:ad:da:e4:e7:ae:27:a0:96:91:73:
6d:76:b1:10:bb:66:27:df:1a:aa:78:8b:5a:c3:40:
6b:1b:6e:de:55:e0:3a:4d:f7:90:0e:9c:c5:24:24:
aa:20:18:c7:57:ad:f7:ed:20:d4:66:b2:1b:d6:2b:
d0:a5:ef:0c:53:ab:41:79:b1:69:1a:9b:f7:88:72:
de:74:bf:aa:89:6d:72:76:36:3e:5b:08:4c:e7:91:
62:8b:11:64:a3:ce:97:74:8f:a7:f0:6f:6c:af:d2:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:C3:FE:5C:A2:9A:BA:A9:6C:7C:AE:B3:EC:1B:FD:AA:5D:E4:80
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ce:75:a7:ba:a8:9c:54:20:81:71:d4:50:67:64:33:b7:04:
b9:cd:ca:d6:8d:af:e2:ff:5f:cd:31:cf:d1:39:75:af:6b:8c:
36:1c:99:80:84:75:c8:48:5e:f1:80:4e:c0:5a:43:bf:59:62:
c4:71:56:80:bc:d2:37:6d:8c:cf:d9:39:23:ac:6f:16:b8:69:
bf:9b:b8:39:17:08:d8:2e:4d:27:3e:dd:d4:42:ff:5a:8b:b8:
83:c9:d2:8b:3d:fa:15:5e:89:85:19:4c:f3:98:b8:6f:61:d1:
fe:86:fc:9b:1b:f4:b2:5c:9b:a9:8b:fe:15:b3:c6:e6:80:31:
5a:22:aa:f8:89:07:a2:f8:21:6b:48:4d:52:d9:97:4e:46:29:
1e:a8:e5:42:30:e1:bb:5f:2d:8a:46:da:2c:df:f9:6b:20:27:
18:75:e3:5e:e7:61:16:c4:4e:51:39:64:5f:92:b9:24:b3:95:
60:e1:54:56:77:d4:09:e2:75:03:06:0d:98:3a:31:ae:98:c9:
7f:e1:13:f0:82:c3:20:16:6a:8e:7f:da:24:72:d5:e0:11:33:
1b:3e:46:51:89:5e:83:e2:2b:d6:40:17:cb:7c:1b:c1:b4:40:
78:17:fb:f3:ce:1c:22:a8:76:89:20:85:b0:3a:be:74:23:2c:
c2:df:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:38 2026 by rpki-client