Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: b1hLGxAwbpTtVpXwmSnhMybJZjODC/UggfY5bRNzEn8=
Subject key identifier: CF:05:7E:7C:CE:DD:2D:14:69:35:58:19:DD:8D:74:84:72:4B:C9:71
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 019D25F1EB11CB7BCCDDAEF1EDF81E6EF8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 0B42
Signing time: Wed 25 Mar 2026 17:01:44 +0000
Manifest this update: Wed 25 Mar 2026 17:01:44 +0000
Manifest next update: Thu 26 Mar 2026 17:01:44 +0000
Files and hashes: 1: LYaFYMEtcoFiGgzC4zUuCixHz-c.roa (hash: AtKbSMq1WsG+Z5PcGQrZUh5zBo6rNO+8G8e4EJ3y1yw=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: Vh4JB5ovkt6yIksfQAbM0q/m/kEMS+Iy9BIQ0gCI8bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:eb:11:cb:7b:cc:dd:ae:f1:ed:f8:1e:6e:f8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Mar 25 17:01:44 2026 GMT
Not After : Mar 26 17:01:44 2026 GMT
Subject: CN=cf057e7ccedd2d1469355819dd8d7484724bc971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5e:58:33:a3:f6:1d:18:7d:1a:12:50:93:23:
1e:70:b2:9c:52:1c:22:3f:92:40:2e:21:19:00:ab:
39:3f:fb:41:59:63:5c:9e:b7:b3:4f:ab:a8:da:97:
62:90:e6:21:9e:30:f9:a4:1a:b8:44:49:6d:b8:e0:
92:27:55:50:74:7b:36:32:49:10:50:53:ad:4c:55:
2e:11:ed:ea:72:43:29:3b:14:8a:68:78:21:9e:eb:
eb:ab:f4:74:18:52:38:69:5e:e9:1b:0a:fd:4f:f5:
fb:4f:cb:86:d2:d9:3d:94:af:01:c4:fc:8e:4d:73:
29:c3:08:53:76:7a:42:f0:ff:78:64:75:d0:9b:49:
54:82:11:33:81:aa:7b:77:37:0f:8d:2c:7d:04:75:
64:2e:81:f0:66:c6:35:bb:61:4e:f2:47:f2:28:a2:
db:ec:ad:db:e2:74:8a:db:ee:63:f9:40:3e:83:43:
f4:f4:d9:ed:06:a6:a6:5e:24:78:15:5d:d0:f0:66:
11:b1:e2:39:fe:d9:64:52:c6:72:59:b1:cb:86:05:
98:e7:bf:54:d2:f0:76:c0:b3:e2:04:6c:f5:57:bb:
03:f9:49:f4:df:7e:b1:e9:48:d0:dd:34:65:72:f2:
06:71:0f:eb:98:f4:d4:39:83:b2:4f:ea:56:bc:ca:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:05:7E:7C:CE:DD:2D:14:69:35:58:19:DD:8D:74:84:72:4B:C9:71
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c6:42:32:60:67:1e:d1:f6:48:82:40:29:71:93:f1:7d:5c:
9c:5b:5f:54:f5:96:98:00:b0:90:e7:94:94:97:33:9e:c4:ee:
f2:aa:cb:9b:df:cd:f4:72:c6:c7:85:41:f8:4c:3c:73:d1:c4:
cf:d4:d5:89:56:17:4d:14:fd:00:7a:44:41:6f:43:f1:4c:f9:
a1:ee:d2:bb:19:0a:eb:50:a9:6d:2c:2e:dd:82:5b:06:0f:a4:
ec:b6:ad:b5:9f:74:d3:e9:a9:e6:92:9c:79:97:50:4c:c1:56:
bb:9d:31:17:a0:e4:12:8a:06:64:00:e9:b6:7c:1d:20:0f:06:
d4:49:5e:50:81:0e:70:67:ef:c6:d6:84:ff:43:74:d5:7b:86:
11:2b:8b:4e:82:b4:d8:ee:ed:2e:e4:98:0d:7c:e6:e8:4e:59:
b9:63:80:f4:97:0a:9c:f2:44:6f:d4:1c:32:41:98:d3:0c:4f:
22:f1:44:af:06:58:cb:00:c5:21:1a:11:82:fa:31:eb:61:68:
9b:72:f2:58:10:40:5f:e4:c9:02:5c:04:40:be:80:15:37:68:
31:8d:48:68:ab:3e:00:79:2d:d3:04:0d:0a:00:76:a9:ec:0f:
90:d0:d8:5a:c8:e1:b5:bf:4c:31:98:b4:d3:7f:d8:d0:ed:d9:
67:1b:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:33 2026 by rpki-client