Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: 9SJqbdhVHP2PNLlIzYpPZu9vcnaubOxjIF1wNlgzzPw=
Subject key identifier: 26:11:8E:63:57:EE:78:23:FD:3D:CA:50:15:0A:06:26:3A:90:4C:08
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 019D265FC2C557A243D0FB3023389223B3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 0FCD
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: 0sUgrxZJElJI75bHc4PMJv-m6Hg.roa (hash: 2W0uHz9I3ibHN2TiwFffgNpABHgMMaB3ZZQbo22uvH0=)
2: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: /KfI/uRgHLMWR2nj/t+isMmlNNgKcUVtWhPLVXdq9AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c2:c5:57:a2:43:d0:fb:30:23:38:92:23:b3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=26118e6357ee7823fd3dca50150a06263a904c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:f6:bf:92:21:53:cf:4a:53:18:32:ce:ec:
05:74:4d:47:a9:66:97:59:70:0a:10:88:26:54:a4:
a7:a4:82:e4:b3:7a:59:9e:d1:d9:dd:21:45:04:92:
dd:2e:d7:e8:21:49:73:40:41:2b:24:72:65:f2:71:
90:10:c2:ed:94:1c:d2:ff:c5:fd:52:4b:4d:10:18:
2b:54:ab:7e:d9:f6:82:f1:66:bc:0f:56:6c:43:bc:
c0:8f:f8:48:ac:5b:d0:7e:f8:37:73:9e:c2:dc:b6:
13:cf:93:9a:ff:bc:01:f2:09:b5:50:46:14:19:3e:
d3:3f:df:ba:d5:1c:bb:73:09:b2:75:fc:77:a9:5e:
70:ed:81:3c:50:87:d2:6d:b6:91:00:32:7d:a7:49:
ab:02:66:aa:53:3a:a8:aa:f2:8a:8d:2f:5c:53:02:
fc:c0:93:9a:c3:93:2a:e9:ec:1f:77:ea:b3:c2:f4:
8d:63:4a:7b:11:44:ed:59:13:68:d3:fe:47:d9:87:
6e:1a:af:27:7a:5d:d9:8d:07:be:84:45:64:0d:71:
33:21:d5:53:50:c1:3a:30:58:34:b2:a3:9e:ca:f6:
e5:2e:c9:df:0b:36:be:b6:a5:98:7b:9c:1e:38:f4:
5f:5f:48:55:1a:74:aa:8e:10:f6:2c:e4:b7:e5:53:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:11:8E:63:57:EE:78:23:FD:3D:CA:50:15:0A:06:26:3A:90:4C:08
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5c:7f:3f:de:53:c2:d2:0f:80:ea:64:18:89:5a:50:2c:c4:
55:49:3b:be:92:5d:98:2b:ea:d5:98:10:60:57:68:e3:79:c9:
b2:52:e6:6f:cf:da:1e:50:2e:c7:12:53:f9:04:2f:9a:67:32:
6b:e7:57:92:e9:05:d4:e9:c9:0b:c3:c5:e7:c7:17:ed:27:e2:
2e:93:eb:5d:07:af:d9:49:c1:c7:3a:85:bd:f9:54:35:7b:9b:
44:72:47:b8:60:98:a2:94:6b:2b:a1:29:ed:89:76:2b:ab:a0:
c4:3f:4a:19:c7:fd:38:a3:1f:9e:4c:02:15:d0:18:fd:8b:65:
6d:0d:3d:37:a9:8c:07:cd:e7:0d:f9:d7:61:0f:72:d1:67:dd:
dc:70:54:fe:7c:cb:58:2d:c0:b5:93:c5:92:a4:48:57:9c:7f:
ea:f0:be:f2:22:90:78:96:52:88:4f:bc:64:64:36:3e:d1:cd:
d6:f3:57:89:99:bd:bf:bb:ff:85:7d:ca:7e:75:8a:cb:15:69:
d7:57:51:3a:42:ac:af:1a:d9:ad:a5:46:80:e9:e3:a3:45:e2:
b5:9e:3c:0c:2c:12:d2:fc:37:30:37:c3:e2:b1:90:65:d3:d7:
ce:16:06:22:01:7a:bf:72:e8:65:ca:70:de:69:c7:76:77:43:
e2:75:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:00 2026 by rpki-client