Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: 3tVnIOOFMs27eR4kwbs9VqjRtnJ9cYbtVefDBMXOc3c=
Subject key identifier: 92:14:C9:BA:20:7A:CB:42:BE:F5:21:9D:8A:BA:D5:47:82:0F:73:08
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 019D28F213FFCCF660DDC2E3A46C9683452F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 1786
Signing time: Thu 26 Mar 2026 07:00:46 +0000
Manifest this update: Thu 26 Mar 2026 07:00:46 +0000
Manifest next update: Fri 27 Mar 2026 07:00:46 +0000
Files and hashes: 1: JbQak1AHMgi1qfOaMonuPRObwoY.roa (hash: Juh7X9uOOXLlYXsFrZb1hTO8VS9wOnWEcXeGaWt5Akw=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: 4Bf12G7Uw1Mj2B4mGKBlZTacuMygvZS/uyZkqmM1m6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:13:ff:cc:f6:60:dd:c2:e3:a4:6c:96:83:45:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Mar 26 07:00:46 2026 GMT
Not After : Mar 27 07:00:46 2026 GMT
Subject: CN=9214c9ba207acb42bef5219d8abad547820f7308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:1d:92:f1:97:48:8f:ff:fa:e8:b2:0e:bd:
ad:31:17:26:12:66:48:54:8c:93:12:57:58:c3:68:
0b:98:31:85:91:fb:ef:a8:94:57:bb:8e:20:64:e7:
65:0d:35:5b:ba:ae:2d:45:f1:3b:e1:92:36:88:06:
35:10:bd:24:7c:47:e5:df:b4:46:48:f5:15:50:4d:
44:59:6f:b3:2f:ee:dd:18:63:67:6f:0a:a6:aa:ed:
8d:8d:1c:06:0c:82:89:ce:df:db:34:20:ea:51:61:
47:cf:2d:c1:99:36:64:12:4f:e9:fb:4d:35:df:85:
e7:59:7f:2d:81:48:13:db:a0:31:4d:25:a8:7a:75:
40:a1:ef:d1:18:92:73:6a:73:8b:87:33:03:9c:09:
4c:e3:f9:4e:8b:e6:8c:4b:3a:a5:fd:b5:2d:1b:a2:
a9:08:8a:5a:4f:75:6a:25:20:ce:19:d3:0f:8a:3c:
6d:15:ec:7c:4e:ac:28:f6:0a:11:00:3d:ed:ac:eb:
ef:fb:5d:8f:d8:be:ed:b5:c5:9a:02:32:c2:c9:d7:
f1:0c:af:57:66:b1:bd:80:9f:bc:24:21:f0:a2:c6:
be:f7:93:4b:a5:3f:cc:5e:36:cb:2a:eb:fd:c2:ae:
65:aa:38:14:77:4a:4e:db:7b:2c:60:ac:86:68:0b:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:C9:BA:20:7A:CB:42:BE:F5:21:9D:8A:BA:D5:47:82:0F:73:08
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:93:5e:00:02:dc:d0:00:49:09:e6:59:bf:17:97:55:b5:5e:
e4:b9:34:ea:5b:70:7c:c2:7b:9f:d4:01:a1:68:4d:9a:7a:5d:
7d:ff:fa:3e:5a:6d:85:e5:f7:9b:0b:95:9c:a9:82:ad:96:60:
e2:6e:64:51:00:c7:f1:af:f1:ff:8e:23:a5:c6:ca:dd:00:b2:
b8:55:c4:ad:96:7d:b2:ce:2c:03:7f:e7:50:86:a1:c5:f6:3a:
16:45:61:38:71:1f:76:4d:aa:7e:30:7d:f3:f9:9c:3c:c3:92:
78:51:a1:60:ca:55:3c:cc:86:2d:57:d8:44:e4:2d:f3:23:6b:
de:25:e0:70:0f:71:3f:0c:3e:5e:29:79:c9:40:e2:b4:3d:05:
83:65:96:6a:d3:45:34:c0:3d:b7:4d:78:ae:52:7b:5b:f1:3a:
fa:9b:b6:d4:18:f5:f2:20:b2:d3:46:e0:49:01:01:5a:b1:17:
ca:9d:e6:f4:f5:7d:90:82:c2:97:66:05:c3:96:e7:fd:ef:68:
01:76:6e:1a:61:44:2d:b8:b7:64:2b:cb:5a:cd:a9:38:28:fa:
c0:27:e3:cd:63:78:f9:98:0d:bb:8a:2c:27:ce:2f:07:08:df:
57:8e:23:5e:d1:ca:88:59:08:19:12:e6:e0:8a:72:ac:e4:00:
5c:eb:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:11 2026 by rpki-client