Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: Sm6Ei8NJfBKsk6XU6yVt+b02X51hevSpjIWQFyFGioU=
Subject key identifier: 63:3F:4A:E7:5B:8B:55:C3:97:19:64:7C:14:B0:FB:9D:9D:D3:F6:23
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019D39AEC5E5A5128A61CC67D34A195937B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 15DC
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: tP43aPLsa8btrdwlAJzQI7AxHwGuWLRfvoT+Mxl+dBA=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c5:e5:a5:12:8a:61:cc:67:d3:4a:19:59:37:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=633f4ae75b8b55c39719647c14b0fb9d9dd3f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:08:6b:2d:20:8b:4b:0b:1b:97:89:b4:ac:7a:
55:5d:e6:8a:5a:34:cc:22:14:d0:d9:2c:89:a4:1f:
bd:7b:e8:40:e2:4a:5f:0d:8f:62:36:cc:9a:78:10:
17:0b:52:8c:bb:22:b3:3a:da:1e:57:48:dd:0d:dd:
3e:d5:19:c9:11:dd:4b:08:bd:1c:72:9e:e5:96:b9:
1c:1b:78:d6:f5:8d:1e:d0:fb:6e:45:f4:09:a5:77:
94:67:4e:13:28:1e:71:46:2d:bb:ed:b4:ad:81:12:
b3:00:a7:6d:4b:12:af:cc:26:de:f3:6c:7d:2b:ae:
d2:1b:a8:77:07:04:a5:b1:a8:97:e2:f4:5e:e5:fa:
5a:26:86:76:ee:90:39:00:58:7c:e8:56:73:51:db:
49:1c:32:45:7f:d7:fe:2a:25:08:64:80:fc:db:4c:
3f:a1:31:61:9f:6b:91:89:ab:46:ee:2d:df:f4:30:
9e:53:de:80:07:68:90:53:56:bc:78:61:ee:36:fe:
43:29:ea:d0:88:0c:c7:5e:66:f5:9e:0b:d2:00:5d:
69:a7:d7:5f:3d:fe:51:c8:4a:41:8e:0f:ef:fe:15:
25:02:28:05:ec:f6:d8:14:47:f3:85:98:c8:8d:49:
b8:85:97:fd:fa:cc:2e:9d:b6:47:ee:7a:b8:db:d1:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3F:4A:E7:5B:8B:55:C3:97:19:64:7C:14:B0:FB:9D:9D:D3:F6:23
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fe:51:39:bf:03:ea:cc:f7:0a:f5:17:8e:76:b5:63:32:e3:
af:61:2a:6b:43:0b:8b:03:81:3f:f5:2b:49:7b:0a:4e:b8:52:
ec:12:14:65:cf:ee:3a:dd:43:26:1d:de:90:70:ce:3e:9d:10:
f3:23:7b:24:ff:78:80:2c:da:6a:02:f2:3c:93:77:74:6c:2b:
13:c5:97:c7:91:ae:a6:bc:e6:86:f3:c1:e0:fb:2c:6d:9c:96:
8f:5c:97:e1:40:19:39:d8:89:16:19:12:cf:24:bf:a2:24:66:
dc:61:24:90:e4:21:c0:fd:6e:63:5e:b5:cf:7e:8a:9b:61:f9:
99:14:83:82:e7:8a:2e:49:a3:a1:08:1a:d9:94:36:59:7f:f7:
b3:ba:9a:8a:87:48:bf:a4:10:83:9a:95:64:31:d2:33:8f:62:
fe:46:ad:d7:c4:92:a4:c7:be:ce:b4:22:0c:e6:cd:f2:76:a3:
b3:49:b0:01:f2:2e:63:08:5b:77:b8:63:f2:c7:c0:a2:af:9e:
62:e4:cc:1a:2d:c0:b8:ae:c7:ef:81:af:eb:22:98:2b:71:9c:
9b:2b:1d:76:eb:0e:40:06:58:76:4f:98:58:71:4d:71:eb:dd:
b8:cb:d7:92:74:a1:a8:79:0f:0d:d9:26:b5:28:97:96:75:12:
76:2c:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:45 2026 by rpki-client