Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: IyLrxnm/lkJ4OV63JuNWMA3EzfbomBWTIYM/+sDMwGE=
Subject key identifier: BA:F3:EE:DE:D8:13:6C:29:95:9C:58:17:45:83:89:FA:C8:04:37:17
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 019D39415E73841E3F526CDA1E101FC08617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: Jo4sL8lXLvyWdPSWoSkZwZCVJ04.roa (hash: bS0A196A1VxcXT/9qLUtNV5FjCCPOQid0Srt7nWffI0=)
2: bMn_23nrCl28y9SYIcSyjUBIZLU.roa (hash: CTefdSkQHU087fuAHIXzkavwf4EoaAetVJZcdLfAn7c=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: iP48h8hnBBPpDHb2QZK9Zqkh0+rlX9NF0SLXeZNbZwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5e:73:84:1e:3f:52:6c:da:1e:10:1f:c0:86:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=baf3eeded8136c29959c5817458389fac8043717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:d0:b9:5f:6f:a4:fe:96:0b:3a:1e:0b:66:
a8:06:fa:d1:73:1a:20:50:50:b1:87:31:8a:41:36:
56:78:e1:f4:2a:19:d0:8b:3b:e9:17:63:db:e4:6a:
f1:f8:60:50:aa:16:f8:f7:5b:6a:bc:3e:1c:8f:e0:
34:8e:1c:ae:8b:28:91:c8:60:db:94:c8:1e:e4:b7:
db:cb:f1:a8:49:2d:3e:64:c2:f4:2d:d8:d0:24:7d:
9b:5a:4b:b8:cb:2b:88:43:27:a5:08:f9:b3:68:28:
81:74:e0:23:2f:34:4f:38:6f:17:0c:bf:15:c1:30:
ab:92:dc:4d:7a:73:1d:2d:69:7c:eb:ec:7b:3d:8d:
6a:fd:90:75:30:86:4a:85:42:de:e5:4e:03:33:75:
82:d9:35:7f:f2:5a:fe:f2:ae:17:88:e1:3e:53:46:
f3:52:2e:a8:48:f7:d9:c8:a4:67:10:10:98:2e:7a:
f6:2e:ba:ea:a9:89:d1:e0:16:9e:5b:ed:67:e3:e4:
f1:c7:b9:8e:5d:d6:c2:09:8f:2f:65:e7:92:d5:6c:
42:3c:72:62:bf:97:4d:d6:22:c5:47:6c:5f:98:66:
66:18:99:45:24:31:dd:b3:fc:1b:4a:2a:a3:08:dd:
a1:77:44:4a:47:2e:d8:ef:e9:76:08:b7:32:ec:43:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:EE:DE:D8:13:6C:29:95:9C:58:17:45:83:89:FA:C8:04:37:17
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:89:09:d9:4d:e2:12:54:e7:a5:9d:8c:e4:65:ee:ed:6a:
32:6d:1e:57:1c:25:d8:7d:e1:3a:ad:15:0d:72:e5:aa:8a:71:
1d:bc:df:f4:f0:db:9f:fe:57:9a:cb:a1:29:cf:df:78:61:5d:
51:37:83:38:7e:b1:d1:a2:f5:da:d9:61:bc:60:a1:86:f5:a5:
35:da:16:6d:8f:a7:f1:4a:c0:60:93:d1:52:40:cd:0f:07:f9:
08:de:37:77:41:48:80:49:d8:b7:e2:11:48:14:ff:b9:95:87:
c2:56:7c:6d:7f:e5:c0:70:2c:a4:d3:68:8a:45:44:dc:85:c4:
36:1f:8b:e2:ad:87:9f:a2:3e:30:85:9e:cf:af:6d:40:81:4e:
38:8b:6f:ed:40:f9:ab:e7:29:a4:85:37:3b:70:1f:9e:cb:6f:
b6:9d:b2:99:47:53:06:59:da:4f:e3:0b:f5:97:4e:1d:8b:fc:
c1:6d:b3:db:5e:f1:6b:00:77:03:07:09:ef:42:15:5a:91:6f:
ce:d1:b3:40:ed:e5:53:62:d4:19:64:0e:3d:80:79:f4:92:d3:
90:4f:7b:95:1b:9e:74:a7:ca:2a:ed:3b:07:36:d6:49:6f:12:
5d:d1:37:a6:9d:a1:9a:60:b8:58:c9:9b:f2:6b:00:4f:61:89:
47:2c:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:20 2026 by rpki-client