Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: hz1l5Bz5dS2+ng5wf3kCWY3ZvaNX9avLAVD8GlNsh9A=
Subject key identifier: AE:B5:42:22:8D:E2:5D:5B:15:13:0A:8A:A1:28:8C:47:3E:96:68:D7
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 019D382E6D947BE07A8912BD14CD4AC9EA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: OM4KLQmzyd_Wm52APVHhgRe4ToE.roa (hash: yWOF8Zx5ObpIqx5RDQmGc/nckpLK3IVHrsfnnr9/bl4=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: WSDezhI2r8Lvk2ejYVjpYCdM87Wn/FSE8bYIEPq/LLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6d:94:7b:e0:7a:89:12:bd:14:cd:4a:c9:ea:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=aeb542228de25d5b15130a8aa1288c473e9668d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:1a:b1:d3:05:10:b8:97:76:0b:0f:c6:fe:
74:40:01:4f:85:55:63:83:79:c0:07:9e:3f:5f:11:
13:2f:56:46:dd:5a:af:08:91:e1:90:d8:a8:9b:bc:
3a:85:25:eb:76:04:0f:e5:0b:8e:22:02:f5:43:1a:
83:34:dd:d3:ed:fc:ce:81:a6:86:9d:01:25:ef:50:
b7:5d:d4:53:db:34:b1:42:3c:82:9d:03:66:bb:7f:
9e:a2:2e:86:fd:08:e5:0e:35:b7:89:ef:82:a3:27:
2b:37:90:11:a8:6a:fc:14:e0:85:e8:62:4d:ae:f1:
d6:cf:0a:ae:47:69:54:1e:97:31:e8:48:c4:e2:68:
3b:90:af:da:ec:b1:f1:1c:fb:01:1b:f6:72:29:40:
4c:25:90:37:98:61:37:9a:ca:45:3b:e8:ae:f1:54:
5f:7d:b0:ed:8b:ce:d2:da:f2:d9:7f:a1:00:8c:68:
c3:e2:10:8b:ad:19:15:1c:16:6e:51:f0:77:af:e6:
cb:24:81:62:08:d3:57:f9:8a:89:23:9c:c5:44:a9:
cc:a7:3b:cb:27:1a:20:29:63:67:0b:cd:17:e3:a6:
2c:2a:4d:d0:52:b1:db:45:50:02:6b:fb:df:bd:71:
86:97:20:2d:2d:bd:4a:cf:77:1d:2a:c9:2d:d4:a7:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:42:22:8D:E2:5D:5B:15:13:0A:8A:A1:28:8C:47:3E:96:68:D7
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:eb:c2:ca:f5:d0:56:a4:27:1e:2a:51:1a:23:a0:37:b1:7f:
53:17:e3:5d:7e:e8:5e:ff:10:85:e3:64:1d:ad:1a:1e:3a:e1:
f9:c5:58:84:fe:ff:ec:f0:02:88:4f:35:54:6b:9c:25:5a:73:
91:28:2a:0f:04:ec:c9:40:34:79:88:d0:10:92:dc:63:89:16:
58:31:fd:92:36:28:90:a2:41:ec:18:27:5a:34:63:b7:ba:18:
f7:ac:dd:b0:7b:4c:a9:f5:74:97:02:17:2e:df:3d:7a:a3:98:
3f:b4:d4:59:35:2e:73:69:76:66:70:13:dc:01:37:f8:c0:af:
1e:d5:a2:d3:a8:00:b4:60:69:f2:b9:43:0b:25:4b:5d:ca:1a:
74:b9:b4:a2:eb:4a:ae:ce:30:91:1a:d1:13:31:32:3b:3e:e2:
4e:25:bf:34:9c:af:94:63:ca:dd:2c:6c:7f:d9:97:69:fa:e0:
24:26:ab:d9:8a:81:4d:3c:bd:0b:fe:2c:80:48:c9:a9:aa:56:
4e:b0:cb:58:61:34:37:5b:08:8e:06:c8:2d:a7:39:1e:c6:44:
58:30:9e:82:f2:96:c6:24:ae:54:e1:54:73:53:c1:0e:5a:f8:
42:40:92:d6:43:30:c5:ef:a0:57:72:fa:c5:99:fd:f7:2b:a5:
f5:fb:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:58 2026 by rpki-client