Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: oQ8E7MFM8xiygrNCueUxz93H83IBe4VmhPLg2Of5vRI=
Subject key identifier: EA:1C:B0:EB:08:62:10:B5:39:45:23:06:4A:D9:73:2E:DD:F8:68:5D
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 019D3789C4B2D6D39C575397F402C1A22D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0F9D
Signing time: Sun 29 Mar 2026 03:01:08 +0000
Manifest this update: Sun 29 Mar 2026 03:01:08 +0000
Manifest next update: Mon 30 Mar 2026 03:01:08 +0000
Files and hashes: 1: WixuCuv6oK2h_hFTQCqiu7aJKaY.roa (hash: q9PZjoZVbTamxQQPVsYxw6N358GhwOGzbBLOqLT/7OQ=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: UsAHxtnxoKXJrGHhelHd1bnk+I9J9pDatzgW6KzfwII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c4:b2:d6:d3:9c:57:53:97:f4:02:c1:a2:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Mar 29 03:01:08 2026 GMT
Not After : Mar 30 03:01:08 2026 GMT
Subject: CN=ea1cb0eb086210b5394523064ad9732eddf8685d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:2e:72:14:4f:b7:d8:7a:8a:90:ae:fe:db:
dc:e3:a8:ba:a7:83:c7:f8:f6:d8:16:18:4f:f1:38:
86:c4:88:fa:0e:3e:db:5b:6b:cd:e4:76:52:33:34:
0d:f4:d0:b5:86:7a:dd:8f:38:82:2d:b0:c4:c5:51:
0a:43:f3:3b:ee:7a:48:ef:c4:9f:b2:98:14:24:eb:
73:de:0f:76:f1:9c:37:12:75:b5:a8:5b:fc:31:4c:
9e:32:fe:b4:af:a6:d7:4b:cc:ce:31:77:f3:0f:68:
5b:f7:d7:97:99:77:28:b7:e5:d7:0e:de:15:2c:b8:
10:5c:b1:ce:a6:e3:f0:de:0a:be:7d:67:3b:df:8c:
a5:70:47:81:1e:9f:c5:dd:a2:bf:8d:99:96:a0:de:
70:25:37:02:52:fd:21:65:60:69:71:3c:25:5a:0e:
e5:a2:41:10:f6:87:67:55:94:82:89:57:e7:95:e0:
50:e9:79:60:82:a6:c0:bb:07:90:ef:0a:8b:d9:c6:
60:9a:fb:12:1b:7d:54:89:fa:11:ee:0e:8a:64:6f:
ce:70:a0:39:bc:94:4c:97:c1:5d:61:df:2d:84:54:
34:07:a2:e6:81:85:b3:b2:6d:14:60:9a:d6:7c:ec:
ce:f7:83:df:db:ce:e6:f8:6b:49:dd:ef:ba:02:80:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1C:B0:EB:08:62:10:B5:39:45:23:06:4A:D9:73:2E:DD:F8:68:5D
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:74:90:a9:5d:b1:f1:ee:42:8e:09:b9:8d:32:2b:c9:78:6d:
29:5c:dc:94:3c:a0:38:ce:30:53:cf:9f:a4:2c:66:d6:a2:e8:
cc:1b:fa:10:8e:14:a3:ff:de:c7:db:b8:ce:0d:af:e9:42:46:
93:1b:4e:bc:ef:0e:ef:a6:ad:5a:fd:1f:08:48:c6:6c:3f:c8:
b8:75:29:19:e2:61:92:d6:8c:49:04:24:04:56:58:64:e6:1f:
2e:23:e9:3d:9d:d3:08:53:11:19:ab:f7:f3:70:5a:94:32:20:
99:a4:cb:7d:75:49:52:bd:93:b9:68:8b:ad:21:d4:98:36:2f:
57:fa:68:e2:9c:de:da:f0:cd:f3:49:03:80:c1:9a:6e:c0:c9:
a2:a1:58:05:fa:0c:13:fa:bd:71:3d:97:8e:76:c9:8e:04:d6:
6f:68:86:e0:8f:62:0d:d0:a2:23:57:0b:b5:3c:bd:7c:be:88:
7b:4f:60:6d:b8:78:bd:ff:af:62:93:32:04:fc:b4:b8:4f:4d:
e5:1f:a6:e3:ec:49:c2:ac:2c:dd:f6:12:10:bc:12:8b:06:d1:
58:71:ac:35:a1:8e:76:b9:be:7f:fb:67:8a:f3:a7:c3:bf:b2:
30:f4:7d:14:27:7d:c2:38:f6:47:66:1f:73:70:f4:ad:58:c6:
d2:da:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:30 2026 by rpki-client