Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: S+fXYH13GJNFENHE3Bi1lB+lC64pkVEWc2UVkvAD8gw=
Subject key identifier: CB:C5:DB:C1:9B:1C:EB:61:FB:F0:C4:05:98:58:68:58:84:BF:C4:75
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019CE5FF4F6038CAE4303091A8211156A4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0F46
Signing time: Fri 13 Mar 2026 07:00:40 +0000
Manifest this update: Fri 13 Mar 2026 07:00:40 +0000
Manifest next update: Sat 14 Mar 2026 07:00:40 +0000
Files and hashes: 1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: ti/lsod6yAVjKHOhT7iXCeuqQWcJO8lrwuOVxR0WloU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:4f:60:38:ca:e4:30:30:91:a8:21:11:56:a4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Mar 13 07:00:40 2026 GMT
Not After : Mar 14 07:00:40 2026 GMT
Subject: CN=cbc5dbc19b1ceb61fbf0c4059858685884bfc475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:46:eb:3d:ad:67:69:d2:52:a7:d6:13:de:
69:1e:0f:91:d2:f1:1f:6a:84:83:a0:c9:ea:ec:16:
cc:df:f6:09:b7:b8:60:83:7c:c2:6d:19:ef:e9:c7:
d3:02:3b:c2:f5:0e:df:f4:d7:df:f3:e3:68:12:6e:
35:ea:e3:f8:df:d7:3b:02:c9:e5:bb:56:dd:1e:e4:
6e:37:dd:3f:01:54:a8:26:f5:22:c9:47:0f:9b:6c:
81:67:97:f7:84:9b:53:25:a1:64:66:3d:72:a8:f6:
04:43:ed:bb:78:3d:b3:73:85:7a:53:40:c9:d6:5b:
df:19:ae:f8:8e:c6:29:a2:9e:4f:97:41:7c:a1:a4:
85:5c:8d:79:0c:d6:bb:45:59:a8:ae:72:4f:a0:40:
8f:93:50:eb:0f:53:f2:aa:fe:8c:25:a9:df:05:ba:
92:8a:f8:7f:c9:ec:a1:f2:db:aa:7d:df:29:4b:3a:
0d:04:56:cf:6a:73:3b:30:90:bc:53:77:26:61:53:
83:87:04:86:23:c5:24:3e:6d:2f:89:04:5e:05:5f:
b3:14:08:c3:a0:db:5b:49:4b:8a:b3:ba:7e:58:b7:
55:23:5f:fb:ff:3b:73:bd:67:aa:ec:49:2a:6a:89:
f0:50:78:eb:6d:2a:e8:5c:40:ca:20:7c:53:c9:b4:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C5:DB:C1:9B:1C:EB:61:FB:F0:C4:05:98:58:68:58:84:BF:C4:75
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:37:72:29:78:0c:0e:16:20:4c:65:a4:5c:10:a7:d1:29:
9f:ab:2a:1b:d0:bf:15:47:6a:ad:86:3c:4d:d4:55:32:2c:88:
ce:51:6f:52:7f:71:4b:cd:0b:f5:12:1e:e9:f4:35:c8:9b:e2:
ad:6d:4c:9c:49:42:4c:40:66:dc:9e:d7:49:95:e4:56:4a:67:
b2:68:19:7d:c7:01:95:b3:f3:ca:89:b1:c0:fa:7b:5a:04:0e:
3c:1a:6e:c3:4f:08:72:40:f5:de:94:ea:eb:a8:f7:1f:bb:86:
a0:e0:2e:3c:9a:f1:6e:4b:ff:18:d9:41:1c:2d:e1:4f:c3:2d:
e7:1d:74:07:64:11:7b:af:4d:d6:3b:fa:e9:20:89:c2:20:b3:
1f:a4:2d:f4:60:8d:00:34:30:bf:8e:a4:09:43:9c:6d:11:47:
9f:cc:01:5b:06:e4:7c:25:4b:d2:b7:bc:d1:e7:37:62:1d:ba:
bc:18:55:12:0d:3c:79:f1:23:5b:ce:d0:17:70:b2:10:23:a8:
6a:94:f9:94:4d:94:19:4d:76:d6:eb:85:05:ab:d5:65:07:37:
b0:63:61:be:6e:1d:41:eb:36:7f:71:54:6f:34:82:9f:20:6b:
c4:3a:bb:23:7f:d4:24:72:b4:ad:d4:fd:1e:49:78:ad:81:14:
51:08:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:00:15 2026 by rpki-client