Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: dstch6+s6oxprJsi2BWFkSaQFQgoOLc5J1a6yoaJRUM=
Subject key identifier: 30:2B:C1:F6:D5:0F:16:C6:12:90:39:D7:D7:3A:6B:D2:4C:1E:C0:E9
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 019D31F5C652E2D2892896DDBA9422A1A8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 0709
Signing time: Sat 28 Mar 2026 01:01:23 +0000
Manifest this update: Sat 28 Mar 2026 01:01:23 +0000
Manifest next update: Sun 29 Mar 2026 01:01:23 +0000
Files and hashes: 1: TXQWqwg-_fg03GSnLtq9K2P-qXo.roa (hash: Ax0Uac+SRfpjnik5CivlZoRajYWhAEb1KtSZ4OnL+e0=)
2: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: TbtVb4ithA1Fgbc4yNlIGm9wRXiCtqZxt0HyW3+ofhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:c6:52:e2:d2:89:28:96:dd:ba:94:22:a1:a8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Mar 28 01:01:23 2026 GMT
Not After : Mar 29 01:01:23 2026 GMT
Subject: CN=302bc1f6d50f16c6129039d7d73a6bd24c1ec0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:7f:65:81:8a:99:8a:1f:f0:9a:30:1d:d3:
f9:c1:0c:23:db:45:38:e0:da:28:ae:89:3f:39:78:
b8:fd:af:41:72:bb:aa:1b:71:4b:a5:a7:e5:3b:c4:
5a:aa:24:b2:5b:96:f8:10:ed:63:72:be:31:c6:5f:
5a:df:3b:80:1e:e9:a6:c8:90:54:15:91:f7:12:17:
70:7b:18:0f:ce:57:27:20:8f:e5:71:cd:ed:76:95:
d1:71:c7:1d:44:23:2a:0d:5d:62:a2:84:4f:97:8a:
a3:6e:69:c5:a4:03:0f:7e:2b:50:18:55:99:91:fa:
2c:84:02:0c:81:06:e4:b7:ef:d1:af:2f:bc:b4:ce:
9f:32:6b:f4:e1:c4:e3:0f:96:85:d1:74:30:88:ad:
81:fa:27:d7:2c:f2:36:a6:95:82:fe:16:cc:a1:3b:
22:23:b1:a4:96:91:93:9b:1f:9f:26:52:fb:f0:6a:
c6:c7:e6:d7:20:f6:36:e8:ab:e1:c1:8c:33:e3:e6:
8c:20:8a:6c:ef:9e:cb:db:ac:2e:34:2d:be:f2:e5:
d8:5c:08:25:df:8a:f5:36:61:5c:9f:c3:b0:55:f1:
4f:f3:03:1c:be:aa:41:47:b7:97:9f:e7:db:28:66:
df:99:18:63:a6:66:e5:23:a0:d9:84:3b:bd:27:16:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:C1:F6:D5:0F:16:C6:12:90:39:D7:D7:3A:6B:D2:4C:1E:C0:E9
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0a:ec:6d:d7:84:1d:c4:ac:0c:93:e4:b6:93:69:18:bf:e5:
db:6a:18:1b:be:1e:1e:60:fb:92:58:44:2b:03:d6:53:3c:9f:
ad:4f:a3:08:e2:fe:a1:c9:31:63:0a:12:4d:2b:9f:b9:05:77:
d3:3f:4b:21:4a:c8:87:6e:84:f3:ad:26:f4:59:a6:5b:f6:a1:
4c:7e:dc:9b:ab:6d:80:8b:71:dd:81:28:f4:f7:91:6a:04:dd:
86:f5:f0:b1:23:16:76:e1:bd:4d:ba:94:f2:c2:94:44:6f:47:
cd:17:51:d6:a5:40:a3:10:5d:4e:5d:d8:20:37:f6:fb:82:ac:
a2:cc:a7:0c:e0:15:69:87:84:d6:52:6e:84:6e:8e:51:e7:9a:
b8:7d:c0:b4:82:81:ca:0c:4c:21:24:8c:a2:58:1f:53:1d:ac:
4d:25:8d:9a:7b:74:ed:23:01:05:1b:2a:95:d5:8c:a9:08:b8:
03:a2:00:ed:d1:4e:a2:ef:2c:86:28:f3:36:b0:c7:4a:eb:96:
25:75:bc:2a:ce:01:41:70:97:a9:da:2e:ee:73:5c:bc:93:f4:
a4:e2:48:69:4d:d7:89:ab:75:a2:bc:f3:04:84:10:d5:c8:83:
4d:f8:dd:ea:87:c5:63:06:60:4f:bf:b4:18:64:75:1b:4c:1b:
6b:27:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:16 2026 by rpki-client