Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: MxFOdpgAfhc7mrEpbQK5l5wT4b9AZLSMFNgsZO1X1Fc=
Subject key identifier: D8:7E:9E:C0:0D:15:70:23:D3:1C:97:83:08:FF:02:F9:04:19:8A:7E
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 019D37F71D20BD6E3857F019EE15D6EDCE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 1472
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: jispgru9Q4t6sawE42wYgPOMato.crl (hash: G4Byv6/DeMLX0MBsifTHPMFrs7JI+bvXJYojA7Kfheo=)
2: rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (hash: coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1d:20:bd:6e:38:57:f0:19:ee:15:d6:ed:ce:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=d87e9ec00d157023d31c978308ff02f904198a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:e0:84:07:fd:da:cd:00:a5:e2:46:be:d5:
f9:d1:64:30:6b:74:fe:30:bc:c9:3c:c3:bd:26:50:
19:d7:42:c1:72:fa:1a:c5:84:6c:ba:c9:55:26:46:
9d:a1:81:25:12:df:a5:51:d2:4b:dc:e4:2f:85:4d:
5b:81:3f:05:30:c1:e8:c0:72:c6:98:8c:e8:ec:3b:
1d:3c:41:77:6b:2b:c7:98:32:34:ef:e0:3f:55:23:
98:af:40:4f:39:c9:27:30:f4:b9:06:d3:77:23:cc:
fb:96:7d:e2:14:21:74:6c:2d:fd:a7:b0:da:5b:a9:
f3:22:16:9e:17:7e:25:e0:8c:43:2a:27:3c:bd:69:
36:1a:3b:85:59:ca:ef:f6:68:05:2c:f5:d4:68:5b:
dd:c8:6d:1a:84:90:9b:8f:67:77:d3:f7:45:58:95:
72:49:57:ab:b8:3b:81:63:e2:10:b6:a1:44:9f:56:
7b:16:22:21:21:4d:38:f3:25:91:38:8a:23:48:87:
3f:95:2e:17:0a:62:b6:46:92:aa:50:63:36:aa:0e:
ec:da:d6:90:93:d6:a9:81:f9:e8:59:5e:70:7d:02:
e1:9a:5a:64:8d:ec:d8:a7:58:6b:ca:a3:2d:06:48:
2b:e3:5d:ff:ea:25:03:a9:9e:cb:6d:af:a3:3e:4e:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:9E:C0:0D:15:70:23:D3:1C:97:83:08:FF:02:F9:04:19:8A:7E
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:69:05:24:1b:0f:b7:5d:9c:54:95:69:c8:6c:c2:1a:0b:4a:
c2:ab:3e:db:a0:1d:2a:d0:b4:02:dd:1e:61:94:f7:bd:5e:cb:
7a:50:bb:9a:09:7c:9a:75:71:1d:67:16:f6:20:84:53:05:10:
03:e2:c8:b6:87:19:ba:28:82:66:e1:92:4a:ab:5d:a1:be:a7:
70:a8:e4:74:d8:61:44:f3:a8:98:97:d4:e7:8a:7d:73:b2:c1:
ff:ba:4d:6d:47:ed:f7:35:91:8e:d0:8b:7a:89:f7:cc:c1:f0:
2f:97:b2:51:b1:68:e1:6c:ae:6f:a1:4e:69:1d:03:c1:f3:65:
cd:31:95:22:6c:c2:d6:50:38:26:18:79:60:f8:79:01:ce:48:
4b:38:2d:6d:85:5a:95:f1:dc:8d:7b:d4:99:23:e8:ba:90:97:
a4:90:c2:30:a3:89:bf:92:7f:1e:a3:28:e5:eb:e8:71:e1:3f:
e9:54:2a:f4:97:96:a1:fd:82:be:db:95:69:bd:d1:31:0c:e1:
80:58:4e:6f:01:38:e2:db:2a:a7:df:35:7d:4d:d0:de:0c:bb:
25:46:c4:32:f1:92:d6:cc:71:38:30:8e:21:72:42:63:1d:d8:
aa:5f:b6:0d:cc:fb:7c:f6:a5:5e:81:58:a7:3e:8b:e2:6d:da:
8d:35:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:24 2026 by rpki-client