Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: JWqkwygEvroEgUGeKUBR5h7VHudJdwhVozoqQyCFi9Y=
Subject key identifier: C0:BD:D7:27:83:7A:A9:EB:F9:44:CC:72:2A:41:09:83:4D:7D:6F:0A
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 019D39AF260A003B900619377C27DB752320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 13:01:12 +0000
Manifest this update: Sun 29 Mar 2026 13:01:12 +0000
Manifest next update: Mon 30 Mar 2026 13:01:12 +0000
Files and hashes: 1: ZWc731yhXtnZwZA4k-893U-Fzys.roa (hash: RRFLJwA1DLmfU7R9eR3HkSpvYKtbhnQe6Ugjt8gXSbA=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: EcgwYDKm6DhvWeWwAshSP+PRu00yT9cbRysHIk8zFqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:26:0a:00:3b:90:06:19:37:7c:27:db:75:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Mar 29 13:01:12 2026 GMT
Not After : Mar 30 13:01:12 2026 GMT
Subject: CN=c0bdd727837aa9ebf944cc722a4109834d7d6f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:77:2f:77:38:3d:11:a4:59:44:63:10:aa:
74:8b:96:97:4a:b3:72:c3:85:84:03:b5:cf:47:d0:
9b:59:d0:1c:18:44:52:52:ee:bd:fe:2c:3b:c3:1b:
58:56:d6:ab:6b:3d:5e:c6:27:66:18:67:be:e0:a6:
fe:06:6f:9a:4d:31:e3:52:8c:a2:5d:c1:7d:5d:e2:
18:31:e9:17:08:d3:8e:de:d3:2f:9e:3b:75:65:a8:
51:ac:49:87:14:32:38:0b:3a:53:3b:db:c0:60:df:
37:c3:ec:04:c7:cc:8f:1c:a7:d7:e7:b1:df:c1:98:
e1:83:a3:29:41:7b:f6:69:b6:3f:9c:fc:15:5d:df:
a6:e5:9a:56:75:0e:0c:ef:41:f1:15:cf:51:7b:08:
a3:d2:85:f5:6e:d2:bf:62:45:03:af:0b:b2:91:37:
16:63:14:aa:ce:65:6a:7a:1e:2f:be:22:be:60:88:
b7:38:d3:8a:4b:62:a6:8f:43:6f:93:ab:00:24:af:
44:59:5f:26:d2:d3:99:cd:15:22:86:6b:74:9b:a7:
e0:a3:93:b5:23:7b:db:7a:25:2e:a8:1c:67:80:62:
1d:7a:ec:92:6f:63:56:be:fb:4f:95:28:0a:0c:a3:
8a:d5:e0:b4:3b:17:7d:70:66:de:9e:21:42:4d:e3:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BD:D7:27:83:7A:A9:EB:F9:44:CC:72:2A:41:09:83:4D:7D:6F:0A
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:1a:f7:97:82:0e:ff:62:d0:7c:92:8f:d4:95:26:51:6f:
dc:78:30:7e:9f:7a:57:55:aa:ae:ed:a7:8a:12:5c:0c:d2:58:
68:24:54:7a:d6:e7:24:fa:fb:22:21:d0:1d:d7:c2:08:7f:8b:
ea:31:58:69:0e:66:71:7a:ec:94:bc:fa:7c:4c:9a:e3:c4:5a:
13:df:f5:5c:f8:1a:40:17:07:e4:38:58:b0:4f:db:a5:96:49:
f9:2b:cb:95:ec:3f:20:db:46:93:93:2d:1a:d4:e3:05:c2:fb:
d0:da:23:23:89:94:7b:1d:48:56:cb:8f:65:dd:8b:02:74:a6:
75:28:5a:89:dc:f6:ea:90:29:6d:2c:16:9c:7f:d7:9d:6e:56:
10:1b:60:d6:32:89:4a:2b:20:a8:92:9d:f0:b2:7c:6b:65:46:
bd:1b:bf:66:53:f2:11:db:e2:6f:cf:f0:e4:8d:b9:1f:2f:e6:
53:a5:5e:13:72:cb:af:ea:0a:c8:22:11:cc:c8:3e:80:ff:42:
f0:4e:06:60:ca:89:95:16:57:38:76:3d:20:aa:82:85:b4:a5:
6a:53:5d:d7:cd:c2:17:95:f8:d6:67:c8:a8:9d:72:88:3a:b6:
8a:8f:2b:19:13:77:66:c6:1a:46:79:0b:5e:94:e0:d2:3a:2c:
c4:9d:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:36 2026 by rpki-client