Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: 9I8K00xuC6/GN3Jj+ePYK1KbdLaKyKd7AJeebIgPnZ4=
Subject key identifier: 3C:BF:31:E7:14:58:B6:80:06:46:BB:88:00:95:17:C9:B6:C4:5F:74
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 019D322BD59D76A567DBF20EBBA0C9814CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0F82
Signing time: Sat 28 Mar 2026 02:00:26 +0000
Manifest this update: Sat 28 Mar 2026 02:00:26 +0000
Manifest next update: Sun 29 Mar 2026 02:00:26 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: qG1+xkqod/LF2RAtZW4OnWDTYnVKKKuZtoLqxe7+/ps=)
2: RY3gtGJUikJjvAv0lx45qrDHyp0.roa (hash: 76j4Lek2Mb/IIJEFcGb75gTBWRvx5a0x7KTV09dxAg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:d5:9d:76:a5:67:db:f2:0e:bb:a0:c9:81:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Mar 28 02:00:26 2026 GMT
Not After : Mar 29 02:00:26 2026 GMT
Subject: CN=3cbf31e71458b6800646bb88009517c9b6c45f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:8a:f7:d4:85:7b:84:11:f2:af:07:3c:1e:
97:d3:cd:80:80:f1:8b:71:aa:51:82:c3:bf:d2:6a:
62:a0:81:26:fb:b2:e4:73:c7:0d:b8:2a:3b:1a:5b:
c0:9e:fa:1c:89:75:16:53:af:48:67:cf:21:8f:8f:
76:e6:4e:29:b3:9e:7f:ef:75:08:a0:d4:24:26:b3:
6b:a9:eb:63:d5:ff:48:94:b0:8f:a3:04:d2:bb:7d:
ed:65:f5:d0:d3:a8:7b:1b:85:ff:89:84:e6:10:b7:
38:12:1e:31:7c:0e:d4:2a:4d:7a:48:6a:f5:12:c7:
6f:87:b0:7f:2d:fe:63:1d:d0:a0:b6:33:b0:b5:80:
71:2a:0d:98:7f:68:9e:a4:dd:7d:70:dd:a0:2f:ee:
24:79:d4:b8:37:b5:7a:2b:3f:50:fb:2b:d4:d5:90:
58:8d:67:c0:ac:d7:2c:7a:33:bb:11:09:12:2d:61:
21:7a:1f:79:f2:2e:d2:0f:c1:90:46:55:c3:65:03:
17:83:61:77:58:4d:46:a8:c8:03:75:58:4f:9e:a2:
89:17:c5:7d:15:b6:94:77:aa:22:9f:10:c9:25:a7:
32:99:d2:52:0f:8f:9c:0c:ca:14:18:54:35:a2:2a:
ab:93:09:b4:02:af:a7:5d:d7:1e:dc:cf:c2:a8:4b:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:31:E7:14:58:B6:80:06:46:BB:88:00:95:17:C9:B6:C4:5F:74
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:18:96:61:06:70:d2:69:bc:8e:77:ab:3c:28:6f:98:eb:d7:
5e:af:5a:c4:ea:93:21:fc:c4:e7:98:73:c2:3f:89:c1:1d:95:
b4:f9:9a:7f:fa:61:ea:fd:27:a0:a8:c1:d4:fd:fc:21:3b:b0:
74:a8:07:41:15:da:0a:f1:0a:1f:9f:c0:d4:29:cc:98:22:fa:
6e:e2:bc:9a:b7:cb:d3:d7:4d:81:7d:9c:71:e5:af:da:59:98:
b9:f5:49:11:06:fb:24:4a:18:88:7f:81:7a:a9:5c:84:2a:d7:
b2:3b:f8:87:4d:1c:26:cc:1f:b2:5b:53:b0:90:ea:fc:14:dd:
35:8e:06:f2:a8:25:2b:5f:e9:20:66:42:d4:8f:1d:83:99:c5:
4c:14:8b:d9:9b:ac:e5:27:30:b4:da:44:0a:5c:97:43:1e:44:
3f:44:82:e5:90:56:6a:35:d5:7c:cc:b1:6d:f0:41:86:01:73:
a4:16:6c:8f:a6:3f:f7:49:c2:9c:6c:2c:73:0e:25:34:2b:97:
50:2e:9b:7f:36:33:33:24:01:99:f5:b0:5e:ef:8a:f1:48:01:
15:7d:b3:06:f6:16:d4:4d:06:f2:0d:d2:36:be:7f:c9:1a:dc:
c6:d4:f7:dc:cc:a0:eb:5c:80:8e:2e:23:89:61:70:d7:5b:14:
ed:bd:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:08 2026 by rpki-client