Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: ibwk3ZD1pVKAe9vOWGCixV9RjlKL/Eb4NG66w21DRDw=
Subject key identifier: 71:98:08:8B:64:3B:42:E2:75:94:61:8F:0D:5E:A9:50:FA:DF:5F:ED
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 019D389C28FB1F206BA0964BABE85736777B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0D07
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: FToKPOJf45meT+rfIYGA1TI4wNMB6vYCZdAI40YJa+4=)
2: uIfxedIoPtI6sFt6tLFbdFhBmow.roa (hash: Q+T15udJmpOitf8fa/5KOsL5hhkwGZ8F5qC5MKVKRFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:28:fb:1f:20:6b:a0:96:4b:ab:e8:57:36:77:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=7198088b643b42e27594618f0d5ea950fadf5fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:99:04:ea:7f:f9:1e:74:83:03:95:d5:5e:
28:30:39:e0:10:2e:22:52:54:8e:a7:4f:a8:ce:69:
ae:56:43:9a:79:22:31:e5:d2:b6:36:68:0b:81:a8:
bd:a0:2e:06:42:73:fb:42:2a:dd:8a:19:ea:e1:1a:
31:98:e5:0e:bf:d3:ae:51:f6:39:eb:3f:c0:07:4c:
87:98:d8:25:83:52:be:07:a0:7c:95:12:f7:36:78:
d4:b3:ca:44:9c:44:f7:bc:1b:61:c3:d8:59:25:bf:
5f:0e:7f:e2:25:64:b3:64:ed:e9:85:17:48:f5:15:
6d:a0:a3:0f:a0:7d:4d:d5:69:dd:f2:02:13:05:d9:
ae:d2:89:44:19:4f:7c:c5:f4:4b:d4:94:29:21:c9:
33:e8:95:41:32:d3:37:c9:cc:d6:ee:c7:af:45:96:
d2:8e:dd:89:03:d2:19:1e:4e:26:f8:c3:38:44:98:
59:52:4c:ca:8a:f5:bd:36:e5:ab:6a:6b:91:26:6c:
16:f4:b4:7d:33:76:44:3a:3b:87:ea:c5:82:5c:11:
e0:07:4c:79:74:33:41:71:93:19:05:a8:86:4a:5c:
f1:5b:52:5c:1b:7f:a0:db:e3:81:6a:eb:75:ab:22:
00:42:11:10:25:b1:2c:03:16:8e:27:36:38:7d:09:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:98:08:8B:64:3B:42:E2:75:94:61:8F:0D:5E:A9:50:FA:DF:5F:ED
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8a:98:eb:af:2c:5c:33:90:2a:ed:0c:04:0b:be:3f:7f:1a:
3b:de:fd:a5:3c:4f:b5:a2:6c:54:46:0c:c9:90:45:1a:0d:33:
22:c0:39:4c:66:43:30:5e:5e:48:52:3e:48:52:47:db:16:f8:
24:d1:79:67:bb:67:2b:0f:d1:5f:00:f5:c0:4f:77:62:5a:22:
3c:71:86:f1:fc:f5:04:d8:4e:7e:54:ee:8c:1e:90:58:e8:27:
2b:76:cc:cb:5a:13:54:11:4b:ca:f9:fb:83:77:37:0d:99:29:
6d:24:48:23:ab:9f:05:a2:58:7b:a9:c6:06:85:86:bc:96:a5:
ec:ca:fe:86:2e:c0:ad:22:b6:8a:42:80:5d:15:69:c8:31:e6:
84:df:ec:e2:ad:50:d1:af:63:7f:ef:f6:55:85:85:64:c0:48:
60:0a:5b:04:b8:ec:d3:ee:1a:6d:2d:3a:08:4c:8e:f6:2a:80:
17:c1:dd:93:b7:a6:01:f9:f4:28:d0:6c:31:dd:62:74:f8:f1:
b3:0c:22:3d:aa:5b:3b:e0:a6:6b:fc:52:c1:d5:ce:4c:78:f1:
65:af:44:45:95:9d:93:3c:5f:bc:4d:77:f0:9c:5e:fd:67:56:
fe:b9:80:21:d9:83:da:09:b1:7e:58:88:e1:4b:51:c3:54:33:
10:11:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:34 2026 by rpki-client