Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: 9lzrtNskCfY7JwTu9yBL89S6TrvfuhbNa1Lk09B7rj4=
Subject key identifier: B1:39:BC:42:33:71:FD:F4:EC:67:CC:82:68:A1:B9:39:FC:E0:BA:5A
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 019CB9CB5EEA9042FC59CBA241AFCCA492E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 106B
Signing time: Wed 04 Mar 2026 17:00:38 +0000
Manifest this update: Wed 04 Mar 2026 17:00:38 +0000
Manifest next update: Thu 05 Mar 2026 17:00:38 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: 1EPVnJ5vsIHMQBmBUAcOgcIaQRD7Q4Y0QKfWG8Omn0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:cb:5e:ea:90:42:fc:59:cb:a2:41:af:cc:a4:92:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Mar 4 17:00:38 2026 GMT
Not After : Mar 5 17:00:38 2026 GMT
Subject: CN=b139bc423371fdf4ec67cc8268a1b939fce0ba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:2a:52:d8:e9:f8:ac:00:52:e9:29:37:6c:
77:73:2c:e5:b9:8b:76:68:e7:0a:92:ff:62:6a:3c:
ff:7e:df:bf:46:19:05:49:3d:2e:35:30:48:5c:69:
bd:b5:cb:5a:9c:73:5a:45:4c:1a:4c:f0:35:49:74:
3b:db:fd:28:a7:be:42:ec:4e:ae:69:78:a8:0f:7d:
a2:60:8f:a3:58:b5:c8:f0:64:f6:68:93:f2:b3:5c:
fc:c2:6b:48:55:e3:98:5c:15:5c:52:12:5b:5f:b5:
c1:07:61:a8:bd:5c:93:a5:48:0d:aa:6e:25:07:39:
ee:d8:6f:d1:fc:5c:04:2b:fe:0d:28:7b:cb:2d:65:
95:5f:12:e6:20:18:cc:7e:ed:af:bf:1e:1c:cd:18:
1a:55:48:79:c1:11:6c:84:c4:e1:dc:fb:c8:81:b7:
8b:91:81:65:73:4c:a1:4e:36:aa:73:dc:2f:4e:e6:
cd:41:95:7c:d4:7f:cb:54:60:28:d8:f5:95:e1:d9:
21:11:05:fc:0c:9d:3e:84:c6:04:dd:25:9e:95:e5:
9a:18:50:ba:04:88:78:c3:57:1e:4d:54:ed:04:75:
11:09:1f:fa:c7:ef:2a:a1:51:38:7c:a7:49:fd:38:
92:0e:3f:e2:92:51:77:7d:d5:60:06:d6:78:c7:7a:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:BC:42:33:71:FD:F4:EC:67:CC:82:68:A1:B9:39:FC:E0:BA:5A
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a8:ce:f5:10:a4:7b:93:ce:da:23:01:3b:71:13:34:b8:09:
2e:08:d1:4f:58:a7:0f:e0:8a:73:28:ea:30:18:e1:88:fe:eb:
ff:62:6a:18:9c:dd:85:48:22:8a:ae:62:5f:3e:d1:29:e0:30:
ea:b6:93:b7:ea:44:7c:58:32:ed:82:40:3b:c8:cb:8a:c5:b2:
e2:d4:a1:27:2c:76:e0:11:38:45:b7:35:25:5b:be:29:49:4d:
4b:af:8f:49:6c:c2:53:60:cd:e7:ac:4b:af:74:7a:f0:35:89:
e9:26:1e:3a:b1:6c:aa:5f:c8:2a:3f:08:4a:8a:2f:1f:56:41:
0b:b3:a0:ee:31:93:1d:30:98:08:48:99:9a:2b:8f:9e:2d:0b:
61:82:ef:98:2c:55:dc:65:c7:96:8a:dd:37:3b:9b:cf:e6:07:
af:81:6d:eb:e5:a2:c9:9f:18:ee:a0:07:57:df:24:95:3f:73:
f5:56:4b:16:eb:1b:b8:db:d6:e8:e4:a4:ee:31:71:ad:72:0e:
7b:f1:8f:ec:60:0b:5c:a8:76:f2:60:97:4e:7b:38:72:9e:29:
82:ff:21:58:61:c7:99:a2:38:25:24:69:99:7f:c2:ef:87:ed:
5f:70:59:27:50:d1:0d:99:5f:04:1d:c6:5d:1c:7f:59:a5:66:
7e:71:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 03:07:13 2026 by rpki-client