Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File: JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier: BgCd/B8JX1yF8cCzoFnaBcQbJOS188vLAImRv53zl8U=
Subject key identifier: FA:70:1D:D8:F7:36:BF:C7:AE:1F:7E:CE:75:E7:73:F6:CE:1E:13:3B
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial: 019D3977CD098925CA6298DC5D608603B843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number: 030A
Signing time: Sun 29 Mar 2026 12:00:45 +0000
Manifest this update: Sun 29 Mar 2026 12:00:45 +0000
Manifest next update: Mon 30 Mar 2026 12:00:45 +0000
Files and hashes: 1: 4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa (hash: v92PqB+zER9mvZgRziC74aTu4c1aP8hKbPOOfRE55tQ=)
2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: StHed0s7e0BJ2vwgzZc1VK56YvDCLPtZoZ6bDqeSLFo=)
3: MkwV_p4ZiOf8Ia5ZHOPhoW4eKIU.roa (hash: JMKNPRf6e5NpGat9TNpevi/2X+CTiPo4/6Chd3GgN+E=)
4: oJUrlPiGpThaOu9GEMzKstl67oY.roa (hash: ZAsmCmye4OXdSzraVVSyaiBbg3Yr1OAE/9LISAwEOHg=)
5: s6R6PJpd-Myk3vNL1YiMPF0NHiY.roa (hash: 82ptaySXeh8vuN3858KZJT3/tNdBNq1pDFzQMH65GpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:cd:09:89:25:ca:62:98:dc:5d:60:86:03:b8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Validity
Not Before: Mar 29 12:00:45 2026 GMT
Not After : Mar 30 12:00:45 2026 GMT
Subject: CN=fa701dd8f736bfc7ae1f7ece75e773f6ce1e133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:ef:7f:00:73:39:51:4d:5f:4f:d8:23:20:
d1:d6:ca:c3:7b:d5:d3:9e:72:b4:bf:7d:4c:06:d6:
88:bd:93:a0:59:76:19:06:1c:04:93:ca:ea:83:b1:
c6:78:c2:64:c3:0f:f1:0b:10:ab:88:cd:10:05:1e:
70:5d:68:63:bc:b3:9d:45:c8:13:bf:7a:36:61:1e:
ad:11:1a:c0:c6:17:52:ac:5a:f8:e8:93:2f:0b:fb:
e1:3f:f2:3a:e0:3d:21:28:a3:87:b8:b7:ea:94:82:
17:8d:93:cc:a7:1a:8a:16:55:6f:e9:2d:24:1e:ba:
d2:f5:ab:32:c7:2d:ed:41:59:90:d1:45:3d:c1:5a:
63:89:5d:0c:05:e7:6a:b6:e4:2c:33:43:2c:12:64:
70:4a:04:18:17:ff:30:93:4e:59:01:04:9d:f6:e2:
e0:43:f9:1e:66:c4:ed:93:42:20:6d:36:84:ce:3c:
71:50:f8:e7:6d:51:f0:ae:96:81:85:83:16:80:df:
e7:3f:9a:10:87:94:dc:52:7c:c0:4b:45:1f:cf:0f:
f0:97:c6:ea:37:5d:73:6c:24:94:f2:0a:24:7e:60:
65:36:8b:25:89:07:18:31:cc:09:68:af:da:9f:54:
ff:3d:82:cf:87:b1:0b:ac:7d:97:36:a1:3e:ba:21:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:1D:D8:F7:36:BF:C7:AE:1F:7E:CE:75:E7:73:F6:CE:1E:13:3B
X509v3 Authority Key Identifier:
keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:0d:f2:d2:9c:02:6b:ba:74:41:9f:bf:17:78:04:14:dc:
6a:51:cd:1e:d7:24:1f:0d:0d:34:b0:c2:23:6b:79:0b:fa:34:
a8:6f:00:da:a3:8b:e1:15:79:bd:f3:f0:2a:12:cf:bc:40:56:
69:06:d1:44:7b:91:df:de:1d:bf:fc:fb:8f:57:6c:ad:b4:00:
a8:54:d5:0b:50:6a:62:fd:ef:25:4a:ac:63:11:23:39:ac:fa:
63:f8:34:50:b4:44:db:2b:34:f1:77:e4:bf:b8:6e:62:c8:26:
a5:0f:d8:f4:00:2c:e7:52:7c:37:93:56:0e:91:26:62:c4:b6:
16:08:64:b7:75:ad:5f:9b:ff:8c:52:3a:c2:5d:c7:4c:0c:af:
70:b2:a6:c9:45:06:26:39:cb:fe:1b:a8:ec:af:4d:8e:c2:d0:
a2:4a:4c:0b:eb:dd:59:3c:97:34:a4:b8:dc:8e:c9:5c:bb:78:
4c:4d:db:5d:94:a9:81:63:cf:82:45:64:b6:60:c8:78:45:74:
16:7b:3d:e1:ff:6d:ce:f8:4a:71:72:87:5a:29:6d:6f:6f:e0:
42:3b:61:19:10:62:97:e5:72:9d:91:1d:cb:d4:ff:50:0d:cd:
d0:fd:c6:dc:7f:a0:13:12:7b:4e:7d:9b:84:5e:24:31:bb:7d:
56:be:0c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:33 2026 by rpki-client