Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: kfs5leRcDvvdYCMuo6tQwPqKfwj4Yc1PrfMyT7Okw5M=
Subject key identifier: 2D:44:AB:3E:EE:8E:2E:04:4C:1C:C7:38:E0:05:83:EB:D1:B9:E5:08
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 019D284D4D5E1A5F00FDA4877C72247BDCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 0BBC
Signing time: Thu 26 Mar 2026 04:00:47 +0000
Manifest this update: Thu 26 Mar 2026 04:00:47 +0000
Manifest next update: Fri 27 Mar 2026 04:00:47 +0000
Files and hashes: 1: OapL7HyFK0X9wx4mL1edhbz25m0.roa (hash: f3Ysa7cBGNsoNSQJdM2JIeAtt87DP7/+oUJ9JxWPJ4k=)
2: WkUE5TtDSY0qUMHRVPnjHcODIrA.roa (hash: 7KfXEZ987lAvPil502fNFkfEV1D1Y8iJROoMhWkSDa8=)
3: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: E+GUBrdN46rKAGD3W/YSemHKD0Gf6AfMAw6dS4zZJcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4d:5e:1a:5f:00:fd:a4:87:7c:72:24:7b:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Mar 26 04:00:47 2026 GMT
Not After : Mar 27 04:00:47 2026 GMT
Subject: CN=2d44ab3eee8e2e044c1cc738e00583ebd1b9e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:0a:2c:69:fc:58:8e:0b:f7:ac:e4:75:e7:
95:f6:b5:6f:8f:5d:00:1b:7d:68:1c:f0:68:01:6e:
48:3a:8c:f5:54:cf:3d:5a:35:24:f0:e0:61:69:f4:
83:05:f4:2a:d8:3b:a0:c1:80:58:42:f0:ad:ac:c7:
07:1e:2e:72:a0:48:d2:74:03:e4:9d:33:92:3e:0a:
28:74:d5:ba:c0:28:13:5e:a1:70:83:47:91:ee:31:
9c:6d:82:3c:19:72:5d:d4:d1:79:53:b3:0c:85:89:
00:c0:63:2e:7b:94:fe:9e:41:e9:48:8e:36:f4:d6:
e9:eb:99:16:29:8a:d6:27:b3:2a:6c:f9:4a:8f:1e:
bb:d4:5f:03:78:a2:3b:4a:95:a1:89:ef:ec:93:b4:
00:cd:1d:67:d8:7a:85:57:a9:3d:9a:f7:0c:21:53:
1c:6c:99:e2:2c:04:7f:c8:9f:09:11:a3:12:bc:d2:
67:f7:e6:05:08:e9:b2:60:cf:96:2d:39:2b:67:ae:
5b:82:fa:ac:43:95:e3:fc:ac:93:a2:83:1f:1a:fd:
68:71:cf:4e:a1:6a:af:e9:22:a8:41:46:ec:e4:bd:
d2:31:cb:37:42:8e:88:6e:c5:21:d9:c8:94:9c:d8:
d6:38:dd:2e:2c:cf:7e:13:02:80:59:7d:19:e3:af:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:44:AB:3E:EE:8E:2E:04:4C:1C:C7:38:E0:05:83:EB:D1:B9:E5:08
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:f7:01:41:a3:71:c6:17:73:8b:f0:10:8b:ba:e1:15:64:
72:5e:ae:b5:70:f6:b0:c5:b3:87:de:25:5b:10:ee:08:0b:d4:
87:bd:61:d1:78:d7:1c:3c:72:71:44:80:51:34:97:f3:91:50:
c2:68:6a:07:15:98:87:ba:a4:cf:a1:15:4e:8e:2f:29:6a:bb:
19:a6:bc:a5:c2:80:13:60:47:c1:97:e9:63:17:d0:c8:04:2e:
19:26:63:21:b2:43:31:30:18:58:2e:e9:e7:d7:c1:f9:10:59:
63:6c:b3:d2:a3:28:b9:25:8f:2b:5b:75:60:54:02:0f:5a:05:
7e:be:b2:ee:0e:79:d5:4f:35:65:2e:05:07:4f:ab:a7:8a:3e:
25:a3:95:e4:bd:7b:78:de:69:f5:c0:cd:22:d2:b4:aa:ed:3a:
b8:29:26:15:8c:22:d6:e2:01:fd:a1:be:ef:12:f7:19:af:60:
65:77:f7:8c:e2:cf:ed:fa:a4:58:05:f3:67:ec:c2:ce:24:f8:
8a:3d:01:c7:76:94:46:77:f5:27:f5:2c:39:83:63:8c:29:4a:
77:e1:55:c4:52:f8:0c:dd:30:a7:87:65:13:38:8a:46:bd:00:
e6:f9:65:d0:b2:ef:31:16:bc:a5:5e:8d:f7:4b:ad:93:f7:82:
6f:47:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:10 2026 by rpki-client