Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: pmvCJ1q5iSVU/8ptFVMTw3hCDUa4Vegz1P6PYsP2LaA=
Subject key identifier: 41:F4:02:6A:61:8F:21:D8:F6:A7:31:93:36:01:DB:2F:9B:C3:F5:B2
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 019D262801DC20C07DAA0B0DFC37AD4AD3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 0C09
Signing time: Wed 25 Mar 2026 18:00:49 +0000
Manifest this update: Wed 25 Mar 2026 18:00:49 +0000
Manifest next update: Thu 26 Mar 2026 18:00:49 +0000
Files and hashes: 1: e29x5KQ9lUTXsNTy9Js9YJvWUiY.roa (hash: CkkrAFaQANiawRM+t6VTBnKH0rFPseRbQYjCYVGniKU=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: 8Xhzy0Sx1NY+1+mW+4GAnmOLVq8zfGFsx8pvsFhynqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:01:dc:20:c0:7d:aa:0b:0d:fc:37:ad:4a:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Mar 25 18:00:49 2026 GMT
Not After : Mar 26 18:00:49 2026 GMT
Subject: CN=41f4026a618f21d8f6a731933601db2f9bc3f5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:82:f2:f3:44:57:c9:df:07:12:37:e8:02:
a4:80:ac:30:f4:3e:07:f4:2a:5c:a6:78:38:5a:80:
04:2f:df:e6:5e:cc:8d:12:41:d8:bc:2c:63:59:3c:
87:a5:ac:d0:77:d7:5f:a2:6c:1d:9f:63:c2:39:e3:
11:cf:e0:60:5e:b2:61:87:f8:57:65:ec:27:5a:c3:
c7:d3:21:e8:2c:09:bb:0b:06:2d:95:02:ca:e4:c0:
7f:f7:6f:46:ed:89:ec:ac:11:10:84:5c:0e:0a:38:
3a:3a:ac:01:3a:d8:ef:5a:b6:bd:89:5b:ab:06:76:
b8:95:e5:bf:4c:25:c2:f8:0b:bd:72:9e:06:33:19:
0d:7e:70:39:d6:e5:9e:91:19:43:07:dc:ad:97:fa:
d6:c7:6e:f4:a7:d9:fb:97:8a:0f:a1:f7:cf:ab:39:
28:ea:db:bf:e7:c7:ca:a7:13:7c:21:b8:16:b8:59:
44:bd:e2:e0:d7:bd:bf:1f:9c:43:d6:cb:44:0d:ed:
f2:38:f5:8e:e0:86:fc:48:6b:b8:06:a3:11:38:48:
7c:d7:45:52:f1:b2:e1:7e:8a:71:96:52:0c:08:11:
1d:5b:57:31:76:46:66:3b:27:76:2b:33:ce:a5:a4:
c0:61:0a:b2:0d:84:6e:58:e7:97:f0:6a:d6:9d:89:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:02:6A:61:8F:21:D8:F6:A7:31:93:36:01:DB:2F:9B:C3:F5:B2
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c6:ce:3b:df:c2:d6:d3:f4:a9:27:d0:46:fd:08:06:09:c9:
93:e7:bc:74:2b:6a:f4:0f:5b:f4:a4:fb:81:e0:3b:28:d8:ad:
84:5b:35:8b:7f:e7:b2:d9:62:38:6f:c7:1f:a2:25:30:b3:26:
dd:e1:d2:7c:5a:2d:98:f9:9b:a0:97:8b:9f:d2:b6:99:c5:5a:
77:0f:13:92:fc:f2:e0:b2:0c:b4:a8:8b:0a:80:56:a0:a9:8e:
ae:4d:29:48:64:ae:0c:0e:97:6f:a2:d0:ba:37:56:67:7f:40:
2e:88:27:e7:6d:0d:63:0e:ad:32:b1:af:6e:cb:9f:cd:1d:23:
b7:51:b7:c0:1f:ff:b5:1a:48:88:e2:09:46:bb:2a:cf:39:44:
ad:f5:9e:6b:b1:10:d2:72:4c:c0:7c:9a:40:77:78:a1:ed:e3:
36:46:ae:23:32:2e:f3:d2:9e:e2:fd:b7:02:5d:8e:00:0b:f8:
a2:f3:2c:55:9f:ae:a7:e2:f2:d7:ba:cf:71:60:b6:9b:f5:80:
89:09:9a:af:76:b7:7c:24:71:93:7a:3f:8a:29:e4:cb:c8:bf:
67:a1:65:d9:52:6f:2c:2f:4d:71:c6:93:36:8d:5f:34:10:1f:
43:71:8d:2c:77:44:c1:da:e0:76:d3:2e:b7:d5:11:32:b5:14:
dd:d3:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:15 2026 by rpki-client