Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: w8LUW50Rq2i+eFMOUVCogQvaXStVDyOqXDbLKrWGF14=
Subject key identifier: F3:D1:95:08:8C:73:16:A2:6E:6E:5C:32:59:69:D6:CF:19:1F:41:9A
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 019CBA39795E9E9CF42AD0555E8A73BD6F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 0436
Signing time: Wed 04 Mar 2026 19:00:54 +0000
Manifest this update: Wed 04 Mar 2026 19:00:54 +0000
Manifest next update: Thu 05 Mar 2026 19:00:54 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: o/fPaQDC3ImTmeu1Y6wItJFJVQHqpJgjJJvSDLkZEg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:39:79:5e:9e:9c:f4:2a:d0:55:5e:8a:73:bd:6f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Mar 4 19:00:54 2026 GMT
Not After : Mar 5 19:00:54 2026 GMT
Subject: CN=f3d195088c7316a26e6e5c325969d6cf191f419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:a1:cc:1d:77:57:d4:5f:36:29:ae:63:05:
69:84:b2:ce:53:a4:2f:6c:91:77:67:bb:f5:f7:ce:
f2:d9:c1:59:49:4b:6f:57:84:8e:26:c4:12:c9:c4:
b4:33:bb:f0:c6:d8:a4:86:a4:5b:a1:82:ac:d0:63:
a3:82:43:02:e3:96:ea:88:94:be:f6:6b:d5:8d:67:
95:5e:8c:36:56:b8:14:2c:20:52:0c:b7:a9:be:e1:
d1:ed:98:d2:64:ad:ba:09:62:f2:6e:e9:7b:bd:11:
2c:33:71:a8:2c:1f:65:4f:14:cf:17:aa:d8:61:d2:
fb:f4:4e:c8:8f:3e:eb:ed:9b:9e:2c:66:a7:76:7d:
d0:cb:f5:12:7b:3f:7a:ed:35:02:9d:70:4e:d6:4c:
9a:1d:0b:55:f7:95:28:cb:42:45:f9:7a:e1:b4:27:
93:94:12:62:e6:c3:d8:32:33:5e:c9:8b:18:ec:72:
5e:4a:ad:0e:81:29:92:4a:5e:3c:d4:ba:ec:e4:4e:
1b:b3:f4:6b:a6:3b:ac:c5:98:36:69:0f:93:65:16:
e1:c3:92:4c:1d:f6:a0:09:f5:dc:20:b4:f0:cb:62:
8f:71:92:41:3f:96:15:96:6d:d6:72:e8:1c:d3:ce:
15:bf:32:8f:42:8e:a6:8a:ac:20:a4:55:b5:04:12:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:95:08:8C:73:16:A2:6E:6E:5C:32:59:69:D6:CF:19:1F:41:9A
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:97:c7:df:ab:fc:37:d6:26:7b:68:ea:d2:7c:cf:d6:33:5c:
3c:e9:37:f1:96:76:27:98:f8:16:7e:88:4d:f9:a1:6c:13:57:
98:4d:cc:4a:fb:e6:78:40:06:b7:26:ce:f7:a1:ed:2c:b7:51:
1e:bc:87:ff:a2:d9:09:a0:98:62:8a:92:b8:f5:ab:4e:a6:f8:
da:57:30:5d:90:c4:e1:78:83:3d:89:e3:73:f0:3c:a7:3a:ca:
76:ee:0c:8c:a7:d9:df:f7:9f:e3:58:28:43:36:86:07:2b:1d:
76:59:c3:6f:01:6f:4b:b8:d6:25:e8:f5:e8:de:7c:fe:29:e8:
ca:66:b4:7e:d4:bd:6b:60:54:ce:a5:c3:c8:4e:d8:0e:8b:45:
70:bf:72:af:4f:be:dc:f6:4b:9f:6a:f4:55:4d:f3:d7:22:b4:
f2:57:45:0f:d1:d0:25:a9:70:37:78:6d:c5:87:22:90:3e:3d:
09:16:b1:85:72:4f:cf:39:78:48:8a:b9:65:35:a7:70:79:f0:
ff:02:cd:7e:cb:79:3c:95:37:85:28:15:52:71:ee:63:09:e7:
2a:a6:99:31:de:7a:8b:27:1c:7a:99:b9:8a:29:52:62:56:86:
8a:96:fe:06:bc:3d:9d:71:0d:0e:62:04:19:0f:02:7e:f4:8e:
79:7f:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:04 2026 by rpki-client