Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: 58eELZaSuqc/eDF/mCQRx+j/0sdRrmVLk3yRMZ4gflU=
Subject key identifier: F3:D1:00:1B:B4:DF:AC:9B:D2:C0:AB:5C:E4:33:EE:AB:87:59:D7:29
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 019D382DD0052E2CFFE4A949535494533A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: MdcmVbMdFPBTfk0woIbGYm9KYQ50esPFdCk52gh7Hh8=)
2: w5L3FIDQ5dVgBosrxy8T9UB3MsY.roa (hash: q5Br3i/0tMxLM8djHNXqPKfHBcAZeWinp2LOD2kGfo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d0:05:2e:2c:ff:e4:a9:49:53:54:94:53:3a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=f3d1001bb4dfac9bd2c0ab5ce433eeab8759d729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:58:50:57:06:03:98:f8:b0:bf:4f:09:0c:
88:cd:3a:e2:0e:70:79:51:6d:34:f9:51:5f:27:c4:
5e:3d:d5:16:21:a8:3a:82:15:11:06:a3:c6:09:c7:
f6:e6:75:eb:25:94:c7:e4:6b:9e:37:5a:11:ba:51:
ae:06:b7:cd:14:53:ba:78:af:5e:48:6f:80:17:a3:
62:f3:32:a6:5a:cc:95:b2:b2:6f:34:18:68:64:54:
7f:ea:40:2e:ab:26:b6:75:24:05:36:78:ad:7a:75:
ad:53:2c:81:74:e5:8f:40:50:92:f9:e0:72:a0:0a:
8b:45:97:f1:0e:9c:ce:35:6b:9e:ff:a0:10:9f:1d:
e5:78:f4:3c:92:dc:d3:10:2b:e9:b7:8b:f5:c8:43:
97:99:8e:f9:9a:b3:e8:5f:20:1e:2d:06:c2:c3:fd:
2a:57:49:1f:60:c1:02:df:a3:53:8e:5b:cc:16:4f:
58:5a:81:7d:5a:74:99:be:fd:50:bf:1b:df:a1:0c:
10:f1:6f:e5:29:c0:74:05:1b:7d:3f:4c:15:68:2a:
cb:c0:90:e0:10:aa:11:53:8f:20:a6:51:32:9f:9f:
3a:b6:12:56:5f:c2:39:97:54:19:d1:70:f1:83:63:
e7:54:31:53:7b:4f:ce:d3:51:8e:02:cd:2e:a3:fd:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:00:1B:B4:DF:AC:9B:D2:C0:AB:5C:E4:33:EE:AB:87:59:D7:29
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0d:d2:b7:45:8b:c5:1c:31:69:6d:1e:5a:00:4b:6c:9c:80:
72:c5:20:ce:ac:bd:3a:f7:1d:8d:e6:8c:9f:99:6b:ac:69:e8:
af:53:cf:83:be:09:af:38:4f:36:9d:84:3a:f4:c8:de:f0:1c:
50:ea:95:43:7c:5e:69:5a:01:51:c6:b1:8b:5f:7f:b5:94:9b:
f3:33:29:a3:91:ca:dd:0f:59:d2:ca:33:99:70:05:63:cb:e7:
12:3f:12:a7:7f:7b:94:3e:2e:a0:1b:ca:50:1c:83:71:63:d3:
39:0c:e8:00:e8:22:6e:cd:c1:68:cd:46:38:11:38:cb:02:4c:
25:8e:8a:d8:85:52:3b:05:21:13:0f:43:86:ea:db:13:5f:b4:
43:84:38:bc:46:00:5c:30:1d:f7:88:39:87:ab:31:47:0a:c8:
19:47:81:d5:b0:2f:ce:66:56:7c:47:86:a2:0a:43:5c:90:b3:
4b:ca:04:ee:9b:9e:e3:62:6f:29:0d:ef:47:d6:2a:f7:64:e0:
92:f2:64:ce:a9:72:c2:d8:1e:01:97:63:82:e7:c1:1e:a4:37:
c8:51:12:db:0b:ce:f8:ea:d0:b9:1e:c1:36:fb:cc:7f:42:cf:
0a:19:5d:38:ab:61:2d:19:3e:9b:90:c5:48:8c:cf:3f:57:db:
36:d8:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:21 2026 by rpki-client