Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: pYUFOSNWKSWLkRnQL6hzNgELzicgqd7ojhOHFAtu+ac=
Subject key identifier: 10:B9:D7:40:44:94:01:CB:BD:DF:79:DB:73:11:4F:86:7F:97:E9:2F
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 019D38D2A1748048E95BD0B9DAAC703E1A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 084B
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: 21A2zxXNOBcdgNg4g4a5TYw2/G3R8oPeJ0zF5g2DOrw=)
2: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (hash: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a1:74:80:48:e9:5b:d0:b9:da:ac:70:3e:1a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=10b9d740449401cbbddf79db73114f867f97e92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:f8:e8:b8:05:98:fd:1f:f2:db:a3:c9:fd:
cc:76:1a:00:2e:b1:58:ad:d7:8d:fe:26:2c:d2:72:
81:1b:2e:32:c7:ec:ad:36:d3:d3:cb:86:b3:ab:0a:
5c:3d:06:d9:50:68:ae:11:4a:79:4d:80:9a:62:9d:
05:00:f7:4d:0b:f9:8a:1e:ff:88:93:7c:55:05:52:
5b:bf:89:2f:dc:da:bc:86:3d:89:a1:1c:18:c9:c1:
44:f4:81:52:a7:61:3f:56:4d:93:5f:01:e0:f4:c3:
79:a2:76:48:fc:8e:d5:45:07:a9:77:55:0f:bb:90:
ab:c6:3c:07:97:d2:2c:e4:05:09:fb:54:7b:59:cb:
a8:79:ca:45:38:c0:0f:a0:7a:44:f5:4e:77:39:82:
af:37:4d:3c:6e:59:8a:e6:c6:a9:b0:75:2a:2f:ba:
d9:75:9e:25:8d:7b:8e:8a:60:df:10:2f:f2:25:67:
c5:03:99:c4:c9:c8:a0:21:83:e2:c7:a7:fc:06:cd:
53:a2:66:6d:a1:9f:33:ee:72:1e:d3:97:7c:b4:35:
25:57:f6:fd:aa:92:01:88:67:21:4d:47:02:f5:08:
71:61:6f:12:c8:e8:6b:da:96:2e:98:83:5c:aa:2a:
78:e3:8e:76:0c:ad:d1:72:02:59:67:bb:bd:87:30:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:D7:40:44:94:01:CB:BD:DF:79:DB:73:11:4F:86:7F:97:E9:2F
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d2:3d:f5:cb:60:1b:9c:ee:06:a0:19:26:82:23:4c:b7:a6:
83:f4:bb:bc:b1:b5:56:22:33:a6:09:eb:21:fa:05:11:09:bf:
61:1c:3c:1a:e6:a6:1a:26:b9:d4:cb:0a:1a:df:3c:f7:e1:46:
a4:f7:43:0b:20:1d:c8:e9:03:39:8e:b5:12:0d:c1:54:55:37:
06:3b:7d:a5:e3:74:ae:3f:d1:f5:91:d5:7a:39:bc:dc:11:e2:
03:d7:cd:66:b3:a5:7c:16:48:72:04:ce:a5:9b:a1:fc:4a:4f:
c3:22:bf:91:4a:3b:48:41:ed:44:37:bb:ca:e6:4c:24:dc:aa:
e4:f0:b3:02:27:4b:c9:65:2b:4c:9e:83:e8:7d:22:d3:c7:d7:
e7:ec:1e:38:a3:ec:cc:97:27:8c:7e:2a:3e:9e:5a:de:d1:9f:
0c:f2:bb:fa:e7:22:b5:47:cb:a0:04:d6:6d:38:5c:2f:49:f7:
f3:be:7e:99:2c:e0:59:f7:5d:a9:9a:44:16:bf:c5:35:a0:0a:
2e:f4:ac:ec:64:c5:af:79:e8:85:69:f1:fe:79:e1:4e:a6:94:
0f:fd:19:b3:00:62:bb:12:74:a6:cb:92:c6:41:b0:1f:fa:67:
bf:79:ed:c8:93:15:49:e0:1d:b0:10:21:66:c9:f4:5e:8a:f6:
80:a4:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:29 2026 by rpki-client