Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: 4ZSBK+1qyo8xQDldButAgZoRF2G7NZil/+Mi6jZzAnw=
Subject key identifier: D7:C4:E4:16:CF:4F:29:2B:3C:40:91:D6:A6:0E:A0:79:76:C9:3B:5C
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 019D2A726D32EE0EF361BDB45E4C2BEE589C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 07FB
Signing time: Thu 26 Mar 2026 14:00:35 +0000
Manifest this update: Thu 26 Mar 2026 14:00:35 +0000
Manifest next update: Fri 27 Mar 2026 14:00:35 +0000
Files and hashes: 1: ZdluKAeiGgNMdIKSFBpouvQoMFU.roa (hash: c9wab7GyUrk1eImAM4TBW2aXlrKgz7syJ0UrZ/J8cJ4=)
2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: TNVUI0P5svbtPoVHJMeDFgsnYBjaYL+CT0MUAf6YOUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:6d:32:ee:0e:f3:61:bd:b4:5e:4c:2b:ee:58:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: Mar 26 14:00:35 2026 GMT
Not After : Mar 27 14:00:35 2026 GMT
Subject: CN=d7c4e416cf4f292b3c4091d6a60ea07976c93b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:b8:fe:ee:f7:5c:79:75:74:45:9a:14:41:
be:3d:fa:f4:ca:7b:93:29:a7:8e:18:09:16:6f:5a:
75:3f:4e:b4:e4:ae:20:db:57:2a:a2:58:b3:d2:6e:
01:0e:90:39:8f:f7:7c:80:81:95:f5:85:76:fb:6b:
84:f4:4d:f6:2a:8b:3c:15:09:b7:ba:61:e6:2e:2a:
ea:3f:55:47:d0:46:67:33:51:ec:1c:d0:fc:c1:3f:
5a:7c:21:5d:68:47:56:cd:99:3d:79:a2:a4:f5:48:
98:51:21:4e:d4:76:16:ee:e0:4b:ec:a5:3d:ab:f1:
f9:1d:59:28:b9:3c:04:49:7a:03:e4:db:d0:5b:2e:
00:db:32:9e:2b:52:4a:0b:3d:79:f3:ba:a5:00:d4:
f8:ab:c1:dd:2f:fe:98:38:06:9c:cf:6b:06:81:60:
f8:bb:04:57:63:78:03:0b:7a:c6:ce:7f:69:bb:d4:
28:04:f6:90:12:f6:1d:1f:00:ec:e7:05:18:00:33:
51:16:2c:0d:8e:42:91:5c:0e:4a:fb:15:f9:a1:f2:
2a:8c:1b:d2:f6:60:ea:5d:5b:de:a8:5b:e4:44:04:
13:9b:70:d8:76:ae:cb:86:b4:52:0b:96:0e:80:01:
92:7d:32:73:c4:ce:5a:52:e1:7b:02:d3:02:31:74:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:E4:16:CF:4F:29:2B:3C:40:91:D6:A6:0E:A0:79:76:C9:3B:5C
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:0e:77:6c:da:e5:3a:4e:ec:69:2f:73:96:5e:05:e5:9d:
27:3e:3a:79:77:ca:d7:1f:f5:4b:3d:48:11:84:15:51:3f:14:
8f:6e:ce:87:ea:a6:c8:61:e1:06:4c:2f:69:78:e3:56:c3:21:
66:1c:33:27:f9:78:5f:75:26:44:40:0c:a4:e6:e2:1b:7c:7d:
16:f0:ee:31:f4:7f:06:49:80:17:df:b0:cf:6e:6e:5c:fc:8a:
8e:76:b1:6c:0a:37:2e:b5:f7:54:a3:49:a8:6e:6c:22:df:2e:
ef:aa:db:c5:dd:d5:85:3c:eb:bd:5d:2d:a9:5d:f6:e7:b9:d1:
07:83:e2:0f:5a:43:cb:61:f6:56:d7:cc:22:01:b5:33:7b:0f:
64:a2:55:82:67:3a:0c:f6:07:68:78:2b:63:c8:b1:ee:cc:3b:
f7:08:9d:30:39:7e:29:fa:49:a2:60:a2:82:58:89:b5:81:22:
a7:8f:d6:9e:96:b3:7d:81:bc:d2:92:16:a9:e4:dc:d4:25:27:
f3:87:7e:e3:cc:ad:b6:26:73:23:bd:50:80:59:0c:ec:97:6b:
ff:02:cb:44:23:13:7f:27:23:be:67:ef:09:33:e4:af:35:c4:
12:cf:c3:df:58:5b:09:43:35:b8:d2:f8:2b:3f:12:69:83:19:
2d:05:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:16 2026 by rpki-client