Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File: jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier: pBIrBTZTzu4yybYA0f6hFUyGD2CRB0oSsf52grlouXc=
Subject key identifier: 74:15:3D:56:BA:D8:10:FB:1D:30:E6:F3:A7:37:B6:48:C4:E3:53:C7
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 019D107CA0C4ECD88C2F67CA43535084155E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number: 02DB
Signing time: Sat 21 Mar 2026 13:01:36 +0000
Manifest this update: Sat 21 Mar 2026 13:01:36 +0000
Manifest next update: Sun 22 Mar 2026 13:01:36 +0000
Files and hashes: 1: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (hash: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0=)
2: MZF_p3jMKGfUhISu7itbGm8fVPc.roa (hash: 1+Bei67+jd9KSPOgvA1EOkdwYvs4YCuptX/4MdFdYpM=)
3: Yf20QMXkj8GFJGSLeIPw0rNOpPU.roa (hash: aWACKntsxHH3Va6cTR9cG1/KJpBjS153dDHspJ2qJ94=)
4: eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (hash: Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=)
5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: Gdp/k+DTa7Z5sxG5ZnaWIYrpO7UJiQ7BB2cWvZrglN4=)
6: jwB4zN15Dz0mBSEVC3TVgEW9Zpo.roa (hash: 5Pt3Ize/q+a+7aO+hYglfsfYUPua8ySbTiwN+zIbslM=)
7: ty6QDaVODiYQLRspH3UycajMk0A.roa (hash: FtWFx0VsvTm7b4c9sjAieCXjIjfYkBipIpfvr2217ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:7c:a0:c4:ec:d8:8c:2f:67:ca:43:53:50:84:15:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Mar 21 13:01:36 2026 GMT
Not After : Mar 22 13:01:36 2026 GMT
Subject: CN=74153d56bad810fb1d30e6f3a737b648c4e353c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:6b:96:77:d5:f5:7c:83:85:3c:7c:20:33:
94:1d:3b:6c:7d:dd:bb:a0:08:4f:99:e9:a3:17:40:
7f:45:79:c0:5d:ad:ca:b3:76:30:ed:bb:dd:ea:7a:
ad:ea:0e:d9:a5:78:a0:5b:91:67:dc:8e:5c:88:3b:
4d:73:ac:d3:98:3b:d3:7a:18:d9:7c:5e:4b:9d:1f:
54:70:ba:aa:d8:24:0b:74:d8:a6:7c:42:95:48:ec:
a1:d7:9d:aa:e1:78:5a:a8:2a:c2:f8:bc:b0:f0:1a:
76:79:ab:c1:76:b2:97:e1:8e:03:da:28:f9:2d:91:
72:5e:88:b9:39:af:57:f8:a1:b5:99:02:fe:94:07:
f5:2c:09:12:3a:e7:15:dd:d1:69:51:56:70:c6:c3:
7c:d4:ac:04:c5:95:31:06:f0:eb:46:3e:19:c9:41:
ad:cb:a2:6d:9e:cc:7e:dd:2e:9d:9d:61:1b:8b:f7:
e3:7a:ae:bb:74:cc:bb:2c:6c:b1:6a:af:4a:b0:c6:
03:36:06:41:62:6c:05:ac:53:a5:b9:a0:de:cc:eb:
07:26:82:3e:ef:a1:da:45:4f:d1:c9:d1:d7:5d:13:
82:20:7b:36:cd:71:38:5c:f3:87:00:d8:10:e0:7a:
6e:96:6d:4a:e2:3c:74:73:2f:f0:84:49:15:dd:3a:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:15:3D:56:BA:D8:10:FB:1D:30:E6:F3:A7:37:B6:48:C4:E3:53:C7
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:03:97:e8:ab:ea:b3:ea:5f:a1:73:03:60:b0:f2:40:32:6a:
06:b5:51:84:55:fe:38:36:02:54:d2:6e:ae:d8:a8:0b:f9:00:
20:d2:bb:c9:5e:42:a6:de:1c:69:95:ab:35:36:6e:1e:bc:43:
e9:5e:9e:57:54:d8:3d:ca:c6:d3:b6:b6:95:49:1b:f6:a2:9a:
90:97:5b:e4:6e:4a:10:7a:21:2a:8c:f1:e6:6b:04:88:92:85:
13:f9:9a:db:bb:fa:5a:70:b3:c0:67:59:99:50:74:f2:57:8b:
86:be:fe:67:86:f5:d4:b7:8a:d8:a0:c5:68:fe:e9:cf:0b:1f:
36:52:7f:9c:eb:39:77:a2:aa:a7:17:a4:fd:3d:37:ec:85:32:
35:16:b4:2a:c5:ad:9b:5e:6a:cd:60:38:ab:30:04:41:6b:54:
ff:0e:b4:cc:2e:77:12:c5:59:2a:19:bb:cb:b9:1f:18:44:ea:
68:da:1b:cc:fc:2f:3e:ce:d1:bd:1e:2e:6c:ac:d1:38:c3:75:
54:1b:fb:42:29:ce:0d:ce:5e:85:68:ba:f2:82:2b:2f:09:86:
50:d7:bb:1b:af:8d:cd:3b:70:77:5a:ef:b8:c1:cf:65:8c:c5:
36:27:a2:7f:2c:a0:a0:05:07:8e:6b:7c:73:e1:1d:6f:c5:24:
09:0f:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 19:11:51 2026 by rpki-client