Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
File: juAVoDODWjT8FmKMXFuAQ0IW8k4.mft (raw, json)
Hash identifier: 0ufqjZgAXYL/DHgnS04zGB70hvOnW1BYptMqkjQcLl4=
Subject key identifier: 41:8B:08:12:84:D1:03:A2:E1:1A:47:32:E5:DD:24:03:EF:31:CA:8C
Authority key identifier: 8E:E0:15:A0:33:83:5A:34:FC:16:62:8C:5C:5B:80:43:42:16:F2:4E
Certificate issuer: /CN=8ee015a033835a34fc16628c5c5b80434216f24e
Certificate serial: 019D3375C95E8D3A2ACAB674D68B79A856AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
Manifest number: 6A
Signing time: Sat 28 Mar 2026 08:00:50 +0000
Manifest this update: Sat 28 Mar 2026 08:00:50 +0000
Manifest next update: Sun 29 Mar 2026 08:00:50 +0000
Files and hashes: 1: EJfABy6xbptq-YVkmN9Ysa6iIlo.roa (hash: P40yzqL11f3walON7ALTY/q0LTBj9gB5kkP4LzmmZ9I=)
2: juAVoDODWjT8FmKMXFuAQ0IW8k4.crl (hash: uisPQC0uEAGEVOLHGG3N99dXlL7y0DZ7e6ENE73KbQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:c9:5e:8d:3a:2a:ca:b6:74:d6:8b:79:a8:56:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee015a033835a34fc16628c5c5b80434216f24e
Validity
Not Before: Mar 28 08:00:50 2026 GMT
Not After : Mar 29 08:00:50 2026 GMT
Subject: CN=418b081284d103a2e11a4732e5dd2403ef31ca8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:99:36:47:45:92:06:d5:02:15:dd:8d:30:
83:92:0c:bc:54:21:f3:05:75:5b:f0:bc:df:dd:e4:
51:e8:cc:56:9a:ef:be:2d:52:96:74:10:04:b1:9f:
d0:11:09:38:ef:9b:de:ca:71:f4:e8:68:19:81:45:
93:d7:1c:9c:c8:58:3b:51:96:70:7e:a0:c4:52:6c:
21:1e:2d:23:a3:fe:b2:79:81:9c:2d:09:e6:2a:58:
8d:9c:9c:5e:b9:1f:0b:2e:cf:5b:16:9d:54:fc:8d:
97:f3:ad:64:34:c6:f7:47:6e:d7:3a:a9:05:65:e6:
f5:bf:8d:b6:ae:24:c3:cf:60:95:37:0d:f2:92:ab:
40:1e:ed:d6:20:0a:09:be:c4:d3:1f:c9:25:f1:f1:
1d:ca:d4:98:8c:7f:8e:30:36:52:6a:50:c0:e0:01:
0c:99:24:64:11:81:81:84:ee:5c:2e:f8:94:25:fc:
d1:3d:c6:67:6d:35:f4:9c:0b:e5:59:4f:d2:3b:6a:
5f:45:79:90:92:b1:b4:a5:e2:5a:bb:79:c9:50:0a:
fe:89:36:94:5c:10:94:b3:d7:d4:08:71:4d:92:f2:
aa:dc:f7:71:df:61:9e:c1:66:d6:f9:b3:e6:76:8b:
42:9d:a9:d6:9d:bd:73:60:81:d1:ec:eb:8c:ea:88:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8B:08:12:84:D1:03:A2:E1:1A:47:32:E5:DD:24:03:EF:31:CA:8C
X509v3 Authority Key Identifier:
keyid:8E:E0:15:A0:33:83:5A:34:FC:16:62:8C:5C:5B:80:43:42:16:F2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f8:2d:1b:d4:57:a2:02:7f:84:9a:26:1d:4b:1e:9c:08:4f:
1d:26:aa:f9:95:97:9d:4d:79:1e:41:81:c2:63:59:f4:4a:54:
c0:37:5e:7c:1a:6d:ec:89:80:c1:23:8c:86:3a:76:ef:8d:cd:
c1:a1:c0:9a:94:d1:e8:03:11:57:7f:41:9b:a1:57:0d:ec:5a:
fe:df:05:f7:8f:59:1f:7c:4d:d4:23:bb:66:f1:d8:c8:91:c8:
88:15:43:62:2a:e0:13:ac:f3:22:75:a8:ab:fa:6c:20:97:da:
70:a2:14:54:a3:28:96:b2:46:17:b5:c4:ac:00:5f:91:a4:b7:
99:29:17:5c:6c:0f:fe:14:33:78:38:1f:a7:c6:36:0b:43:0b:
57:d7:96:67:1b:6e:8c:a6:68:7e:88:9d:cb:7b:b1:4c:a8:f2:
b1:e1:be:d5:3f:36:52:b5:ca:e4:12:f2:ec:a9:67:16:3a:54:
93:0b:54:22:2d:af:16:39:44:84:d0:76:4b:a2:7a:25:bc:69:
4c:72:fe:21:2e:c5:69:bd:d3:a0:9a:dc:56:cd:39:ae:c9:e9:
d7:ef:0e:ab:a5:c1:82:71:ee:8f:99:3e:44:51:97:89:d2:b8:
b8:09:96:3a:ab:8e:c0:35:21:35:30:54:70:57:b7:6a:35:b7:
be:90:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:36:02 2026 by rpki-client