Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: bGJg/DQKR4RBV6dTA0yndj1kinlPUDet9nV1gQtVin4=
Subject key identifier: 91:E1:D5:FA:28:60:FA:C9:24:43:70:B6:5F:2E:9E:C1:9D:26:2F:3D
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 019D284E4CF8244D41ADB9BD48A187BC86C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: 95
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: 5n91sym5pF1DXi/3AkFJF78jFXPGhHfjLA+e7e0sP4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4c:f8:24:4d:41:ad:b9:bd:48:a1:87:bc:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=91e1d5fa2860fac9244370b65f2e9ec19d262f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:79:3e:73:d4:a0:db:89:f1:76:fc:3b:71:
da:36:89:a8:3c:fe:d2:60:92:c1:29:00:c0:dc:a9:
ed:56:e8:2f:64:ea:9f:5e:de:ba:f2:ba:f3:78:d7:
b1:6e:c2:58:b9:fb:1d:55:25:f1:d0:43:6a:2d:c4:
b8:bb:fa:0e:de:c6:90:91:e6:8e:98:2c:67:be:00:
d8:36:4b:d5:6c:de:73:44:bd:f3:05:e0:bc:d6:30:
45:7f:72:9f:be:bf:91:26:33:23:96:96:56:28:e9:
99:24:43:a1:e3:44:22:6f:76:a9:c7:44:2e:43:27:
10:45:e6:36:fe:3f:c3:25:74:c8:3a:ac:56:99:88:
28:ec:26:9c:a6:db:20:d0:cf:ea:7d:e3:76:e2:9a:
93:4e:2d:45:39:2f:38:ea:92:47:9c:f6:7a:c9:42:
17:94:18:3e:55:49:a3:47:37:50:73:a2:51:68:8a:
40:0c:c6:a3:4f:2d:40:d6:b0:15:19:58:dd:b0:54:
73:52:c1:07:8a:54:f3:bc:4f:4f:7c:00:76:0c:15:
c1:f5:c6:c1:ff:c6:57:cd:5c:68:e7:83:b6:d7:10:
6b:75:fb:0b:74:a8:45:de:8d:60:d2:0b:13:d3:e6:
3e:31:5c:14:65:f1:7c:a5:dc:fa:bf:6f:66:b5:40:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:D5:FA:28:60:FA:C9:24:43:70:B6:5F:2E:9E:C1:9D:26:2F:3D
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:04:c1:75:b8:25:68:e0:6d:8a:e5:2f:06:04:57:12:62:
61:f0:e6:2d:57:33:b9:c4:8a:7a:51:dd:54:64:9b:55:34:78:
49:45:e7:d1:97:3e:ae:88:db:9a:f4:62:b8:3c:ec:86:61:f6:
9a:2a:ec:7a:86:9e:76:53:3e:ea:80:8d:37:ad:97:e0:76:9e:
cc:54:b1:78:ba:b4:08:40:cc:69:cb:40:cc:1e:8d:e4:9a:ae:
0e:b9:bb:29:e2:9b:31:3b:46:5f:e4:83:60:14:76:6e:5b:ee:
fc:fc:bb:1d:86:d2:c6:f9:b6:21:56:eb:4c:95:6b:05:d4:e6:
a9:f6:e5:13:1a:0c:dd:97:11:0d:b8:a3:ac:35:21:ca:71:ed:
cd:74:fb:91:40:b7:45:bc:50:87:72:46:96:18:f2:62:6d:a6:
3b:2b:ad:13:dc:05:d0:fa:f1:01:b6:4f:3e:eb:69:81:50:91:
44:7d:f6:29:24:11:f4:bc:27:a9:20:5c:33:26:0a:e3:1a:73:
46:40:51:a5:3d:95:90:ea:35:79:d3:52:71:2a:5a:7d:d7:94:
d9:99:0b:de:6a:cc:3d:9b:1d:9b:b5:a9:6f:c3:10:3c:9a:2f:
e5:8a:46:f2:64:ea:5e:44:c0:66:87:b9:ea:7a:56:0a:88:03:
62:c7:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:54:57 2026 by rpki-client