Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier: XPmmmkl6yntXiAPSk3Hff3kNlSqCp9pHOTqVvrgTjaA=
Subject key identifier: 3F:8D:2F:66:68:77:82:8B:2D:0A:25:21:01:75:EE:8C:4A:EB:FE:02
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 019D39AF3A091773F8FD2530B4924E582100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number: 0FE3
Signing time: Sun 29 Mar 2026 13:01:18 +0000
Manifest this update: Sun 29 Mar 2026 13:01:18 +0000
Manifest next update: Mon 30 Mar 2026 13:01:18 +0000
Files and hashes: 1: 5-dugcBchtXNBoxU8gQHmgyF3EY.roa (hash: d7JZa0tOh8DLsFD86kEU0q/71M3EzBvkFJCRMhMKG4c=)
2: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: GKzxFhfY1+llyrtxu8ExqfA87KzFa0Jw+zLAB9kPkNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3a:09:17:73:f8:fd:25:30:b4:92:4e:58:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Mar 29 13:01:18 2026 GMT
Not After : Mar 30 13:01:18 2026 GMT
Subject: CN=3f8d2f666877828b2d0a25210175ee8c4aebfe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:88:3a:c2:97:b6:d8:64:91:82:8d:a4:08:
e8:5f:75:84:d6:2d:a3:52:13:75:8d:4b:83:25:79:
a0:f6:f0:16:fc:fd:06:1d:6c:80:21:e9:a3:fe:87:
9c:0c:21:a7:e1:25:85:b2:65:e1:df:66:f4:5e:af:
25:3f:1d:c2:d8:db:62:93:b0:a0:a8:53:e4:83:55:
44:a1:78:70:e4:7f:f1:ff:48:73:36:18:f0:6a:46:
33:9c:10:c9:87:03:c0:6f:e3:5e:80:99:3a:24:e9:
58:95:9c:82:db:24:69:2d:7f:91:7f:b3:2d:ce:e5:
86:89:93:91:a8:5f:e2:94:82:d3:a1:18:69:47:f3:
44:5d:19:fd:ca:b9:8b:f2:e1:ad:9d:9e:d6:9d:a3:
c8:eb:da:1c:ba:1a:b2:ed:bd:6d:77:e7:07:59:a5:
d3:bd:45:06:bf:cd:83:6e:b6:e4:78:ae:3a:23:89:
43:3f:aa:84:d8:05:bd:05:03:b2:26:70:49:dd:8a:
b4:89:cf:bc:24:8f:12:8e:da:2f:e6:6f:34:ea:b9:
04:74:59:8d:f6:f7:70:73:bd:e1:3e:c4:7f:02:7b:
75:ba:c4:a7:e4:32:fd:69:10:3d:97:a4:26:aa:ee:
cd:4f:51:55:2f:be:ae:9b:28:8a:a2:88:37:4a:30:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:2F:66:68:77:82:8B:2D:0A:25:21:01:75:EE:8C:4A:EB:FE:02
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3b:d7:29:ca:46:a0:e6:de:99:b1:80:77:f4:e5:13:c5:70:
ab:fe:5b:16:12:2d:05:cc:e2:2c:ef:2b:5e:2a:03:9d:e2:23:
79:41:8e:a9:34:68:dc:60:35:d9:11:8f:7f:08:86:e9:2f:a9:
b9:09:b8:2d:9a:44:31:0e:94:bf:99:be:23:c5:f0:52:5d:df:
96:f7:d6:48:33:58:6a:d5:78:d9:b3:0a:12:a5:f6:3b:15:31:
a6:d7:89:16:d9:fb:69:e3:52:fe:41:24:7d:01:dd:07:77:cc:
7d:85:81:8b:be:1d:0a:a9:df:61:ff:a8:ad:ba:fe:70:cc:4d:
c3:82:57:69:ac:37:df:e5:eb:35:5e:e0:48:31:ad:3c:9f:78:
72:57:da:2b:df:80:9f:0a:90:2d:01:27:a1:94:69:74:5b:64:
31:25:45:aa:86:91:45:56:ef:9b:fe:17:82:ae:93:27:3d:eb:
f2:cf:1b:e4:42:e6:ba:b6:ea:5e:a7:42:55:89:5e:bb:f7:d3:
8a:a9:e3:31:48:e1:81:4f:e1:d3:9d:1e:55:a9:b0:f4:d1:63:
d1:e7:f3:58:8b:a6:2c:99:72:41:71:fd:14:26:16:97:1c:38:
e5:36:61:ab:86:bb:0e:0e:e0:01:e2:4c:76:f6:5d:c6:ec:11:
50:25:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:21:07 2026 by rpki-client