Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: XOoRTC/Ax2+G4dfMMfZkgHv0E1/JiTBibRQfoNd155k=
Subject key identifier: AE:31:AF:92:F1:B9:BF:53:A0:0C:AE:01:0B:CC:E1:25:C3:51:DA:1C
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019CC93F096C141354F24E3F4CB4B6D3B868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0B51
Signing time: Sat 07 Mar 2026 17:01:17 +0000
Manifest this update: Sat 07 Mar 2026 17:01:17 +0000
Manifest next update: Sun 08 Mar 2026 17:01:17 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: czrh4w0B0LnYKMMhB2LMiIBZ6iB3f6TxHzEuc1pOyE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3f:09:6c:14:13:54:f2:4e:3f:4c:b4:b6:d3:b8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Mar 7 17:01:17 2026 GMT
Not After : Mar 8 17:01:17 2026 GMT
Subject: CN=ae31af92f1b9bf53a00cae010bcce125c351da1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:17:3c:b9:a0:3c:f2:d7:2e:94:c8:3d:68:
ee:b3:c1:16:04:6e:f0:4a:91:37:ae:57:55:96:0a:
33:0a:9e:1d:ce:5a:61:ac:10:16:db:d2:5c:49:68:
f0:53:31:82:16:d1:24:2d:43:d2:9e:84:0a:64:7b:
03:04:a0:0d:18:28:99:e5:8b:52:c4:b3:ff:8a:88:
b3:82:a6:36:9e:2f:c6:b7:a3:38:73:69:75:83:49:
57:e5:b4:4b:77:f7:a5:af:70:2e:d6:6c:51:1b:70:
0b:1f:55:cb:93:ae:2b:fc:36:bb:be:1e:cc:a0:24:
c1:bc:8a:bc:d4:f0:a7:94:b0:ff:d4:c4:55:51:5b:
77:e6:19:f3:fc:3e:4b:5f:56:6e:50:30:6e:d7:d4:
a8:ac:7d:d9:e9:f0:91:40:fe:db:a5:16:06:0a:d7:
9f:6a:bf:50:3a:36:17:ae:28:ed:ec:53:77:81:6e:
5f:0f:fc:47:73:a6:eb:4e:e6:3d:0a:05:00:a1:04:
f4:9d:0d:7a:a1:58:97:92:e1:12:56:e9:56:a8:91:
12:bf:98:fb:d2:85:17:26:73:c8:df:06:e1:fe:12:
b3:a3:85:cd:a1:48:48:2f:d0:d9:a4:e3:b2:43:a8:
ad:b1:1a:6b:84:00:d4:5d:2e:48:a2:a4:6e:c8:29:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:31:AF:92:F1:B9:BF:53:A0:0C:AE:01:0B:CC:E1:25:C3:51:DA:1C
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:2e:62:09:7d:89:8c:aa:49:18:c8:d6:86:8c:ce:96:9b:
48:a6:80:d2:3e:0b:3e:e5:45:b8:25:7e:e1:ee:55:67:24:89:
4c:00:2e:c5:b6:fb:1c:a4:d5:4e:5b:23:95:73:5d:1c:ec:ac:
45:23:69:5f:bb:1f:29:ac:87:d6:08:e0:aa:8c:2b:8d:ab:7a:
af:10:e2:c8:13:1e:b2:6e:55:0d:65:4e:26:0c:10:7f:35:d6:
d1:18:61:11:55:92:0d:5f:6e:dc:5c:e2:fc:7a:27:c1:e5:2e:
64:b0:06:c1:34:8d:a5:c2:71:8c:d2:48:0a:ff:26:38:6e:7f:
55:09:13:41:47:4e:b6:b4:a9:a4:cb:ed:81:40:58:14:37:ad:
f4:02:84:f4:3d:dc:fa:5b:ef:84:6d:4e:be:24:43:fb:f1:d2:
54:5f:00:7a:eb:7b:f4:28:28:33:1c:f0:56:03:8e:78:dd:19:
3b:05:e5:0e:9f:c3:70:8b:cd:37:28:71:70:56:d0:b5:a6:98:
b8:c9:02:d1:24:6e:07:dd:57:39:e6:3f:b2:b1:93:38:b4:31:
7d:bf:6e:5d:a9:97:37:83:28:2f:f5:7d:0d:04:c9:27:94:d9:
02:0f:d5:bf:77:6c:d2:da:b9:8a:84:6e:dc:e5:a1:a4:47:55:
58:f8:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:31:27 2026 by rpki-client