Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: h6dcSWK+7lSKFMmWPpK52JUQ/P4yH/T2gpOr1hZF9UE=
Subject key identifier: 40:2B:AA:B6:6F:93:0A:D5:59:6A:60:D5:36:33:28:C3:E0:2A:D9:77
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019D352DA1B97FCD08AB46AF8402EAC37570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 1761
Signing time: Sat 28 Mar 2026 16:01:16 +0000
Manifest this update: Sat 28 Mar 2026 16:01:16 +0000
Manifest next update: Sun 29 Mar 2026 16:01:16 +0000
Files and hashes: 1: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (hash: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c=)
2: Fb1-dZNCLLAcnEB2Ti_7na8L3DI.roa (hash: drGKyU8ZStuTt2RE0qNyuAHVNHKysS8wlS5+BTY+Lpw=)
3: Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa (hash: NLBLl8XhEwUwmOEQuE68fLj2rtmpnyK8kpfDaShHB6o=)
4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: 4GwAqF+y7cPpBgx9zCRzx0E0rE9EPYc1ILtcjRTEJMo=)
5: Q419CMj39itEx5d1rZmvp11tEJo.roa (hash: aVTyR4miZff0FyNpx215JRudcRdWaUXQlchw+P/x8P0=)
6: bLrhejxGzYlplxbqpieFMxs8DTo.roa (hash: CHc0tXNDgBxUAvjvHgZDJcY5ybMe0rKmbUth2iY5KUY=)
7: caT7i0Ho-ce70M9ACVatVgOV6EE.roa (hash: OVGWsWiY+37CUfHQZ+flCcNGvE7DfMZs+E/YKFAYsXI=)
8: h4EWMG2Dd54unrlyJO11e05TJek.roa (hash: bmr5lQGgTSTyLvAWa1p7TSXtQmQWDBHJeY7C8CEpo9w=)
9: x2carAIaVgKjSsDGLEB8OLFM8NE.roa (hash: rttqg5eKj+V5DoEj4lQNOSz4ZdWbLM3E0GMVNzsZGEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2d:a1:b9:7f:cd:08:ab:46:af:84:02:ea:c3:75:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Mar 28 16:01:16 2026 GMT
Not After : Mar 29 16:01:16 2026 GMT
Subject: CN=402baab66f930ad5596a60d5363328c3e02ad977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:d8:cb:43:e3:cf:4d:5d:a9:99:bb:a5:43:
18:e4:6f:04:96:52:c9:a3:2c:09:ed:b0:26:02:84:
e4:c6:af:08:9d:18:68:17:5b:f7:1d:08:4e:03:7c:
00:87:86:cb:fb:76:40:49:cb:17:dc:51:ae:3d:8c:
b4:d6:02:17:1f:67:92:2c:c7:71:01:be:fb:ac:48:
0a:b8:ea:5a:51:ae:a5:c3:fb:4b:55:10:d6:4e:e4:
d3:75:07:40:fb:f7:e7:61:2f:2e:c7:65:f1:b9:53:
08:32:f3:16:4c:8d:39:a7:80:59:19:1c:7e:48:be:
9d:5c:19:b3:e5:06:e9:8b:57:64:e0:41:db:52:29:
d8:8a:f9:94:50:31:61:46:22:56:9b:7f:b8:e3:81:
fa:a3:e3:09:ac:7e:05:a9:51:a1:36:90:7d:07:fd:
4e:08:fa:78:92:e4:29:90:f3:18:2a:05:66:9f:bd:
4a:24:60:60:b5:a6:c0:f6:14:80:0b:f5:71:e7:7a:
f1:13:b4:b6:29:fa:be:a8:8a:63:28:3f:61:f9:e8:
5e:65:50:1a:c9:88:d1:6a:f6:3b:98:42:45:15:6d:
4b:70:18:dc:00:1a:30:d1:fd:e5:5e:70:df:a1:83:
90:53:24:32:20:c3:6b:0b:32:38:2f:25:5b:2d:2f:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:AA:B6:6F:93:0A:D5:59:6A:60:D5:36:33:28:C3:E0:2A:D9:77
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:92:7e:5a:8a:8c:c1:39:e2:35:cc:e4:31:3a:2c:a7:6d:fe:
a4:0f:45:aa:9a:ea:69:f5:a0:46:1d:12:de:36:92:02:07:24:
6c:ef:b4:e5:33:1a:c5:63:c6:69:c8:21:c4:5e:f8:f0:6d:b9:
68:90:29:e2:ac:50:b2:f5:c7:dd:98:f5:e0:f9:63:6b:6c:09:
76:bd:d7:28:49:36:46:36:e0:f5:10:ef:06:04:86:30:1c:f6:
44:ab:b4:05:a0:b5:12:57:79:8a:19:08:52:2f:8f:bc:40:84:
23:7f:58:83:b4:a1:65:76:08:fc:84:b5:c7:a6:b4:88:63:5c:
18:c6:e7:b4:ad:d4:81:48:4f:af:21:ca:f8:29:45:c8:ec:71:
60:15:5b:c6:36:fe:9b:e5:95:7d:84:86:ef:05:9d:5b:cd:f6:
39:0e:fb:f3:68:ce:6a:b5:d9:3f:27:47:b1:4a:1e:5b:de:9f:
b5:65:a3:23:39:7a:05:e7:7f:7a:ec:1d:c6:f7:41:a2:f6:61:
76:b6:f6:7a:da:19:ea:a2:57:97:fd:0b:a2:7b:83:8e:40:56:
54:d3:a4:cf:a8:46:3d:42:69:34:9f:b4:a1:08:da:46:99:82:
94:e1:71:81:6e:42:c4:c0:eb:9d:c5:ba:af:66:d2:81:01:ab:
88:62:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 01:47:56 2026 by rpki-client