Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: Ur6Q22EaIP2QSi5dXhUHEFb/ZCsKXSairyrNf74H3NE=
Subject key identifier: 29:FE:77:72:25:E7:F0:B6:D6:96:9E:97:C7:98:3B:65:53:68:32:0E
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019D284E27146B38DDB3D935FEE0D007F9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 1196
Signing time: Thu 26 Mar 2026 04:01:43 +0000
Manifest this update: Thu 26 Mar 2026 04:01:43 +0000
Manifest next update: Fri 27 Mar 2026 04:01:43 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: T/vnQt2qw3KKwxxhtqqcGdMPS2Y8arDercOSqM7x7c4=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:27:14:6b:38:dd:b3:d9:35:fe:e0:d0:07:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Mar 26 04:01:43 2026 GMT
Not After : Mar 27 04:01:43 2026 GMT
Subject: CN=29fe777225e7f0b6d6969e97c7983b655368320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a1:4a:f7:d1:25:e5:a9:06:a9:6b:2f:4b:8b:
77:39:80:7d:f6:0a:fa:59:1b:db:bf:6b:c9:3b:77:
d6:4b:86:64:32:2a:2b:08:00:6e:05:a4:a5:d4:29:
a0:2e:fb:09:80:2a:ad:77:42:69:fe:84:61:64:bc:
30:47:c0:68:f3:67:47:e8:01:82:04:35:44:a5:69:
2b:99:59:cd:93:a4:0c:8c:bd:60:9e:17:c1:3f:2b:
d4:62:32:0d:46:22:f2:95:74:c7:91:d3:7d:ef:0e:
63:b2:51:d9:31:0e:6e:7d:6d:89:f2:76:8f:58:c4:
c9:4d:e2:cb:12:2e:c6:5e:de:7f:42:dd:bd:76:fe:
76:1a:1a:eb:c1:d8:ce:5f:db:03:37:07:9d:cb:35:
ab:6f:72:24:e8:7b:a5:9a:2e:cf:08:90:7e:9d:94:
ef:8f:16:ae:b5:fa:a7:d6:6f:ec:b5:39:2c:0e:bf:
b2:70:68:80:91:50:dd:7e:ac:c8:b1:2d:e9:6a:10:
f4:24:98:48:f3:c8:ed:6b:b5:50:0f:d9:f6:47:c6:
8b:3d:57:31:3b:bf:ed:27:53:c1:f8:a7:3b:d6:4a:
d4:66:8b:d1:5c:0d:4f:05:66:8a:96:a0:07:49:c6:
5c:c4:1c:67:65:e0:48:1e:c2:22:e9:c3:b3:2a:d7:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:77:72:25:E7:F0:B6:D6:96:9E:97:C7:98:3B:65:53:68:32:0E
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e2:20:cc:72:63:51:ea:84:95:b6:bf:8e:3e:3c:50:93:b8:
df:d9:f7:09:4c:39:cb:cb:dd:bb:69:01:86:33:90:7f:8b:cf:
6d:c4:44:17:ab:64:ef:f2:a8:42:38:a2:06:bc:a0:28:1a:e3:
b9:90:c1:5c:38:06:90:90:fe:a7:ca:3c:2f:04:b1:f8:15:90:
7c:8c:db:37:a5:df:94:18:89:f3:49:af:e5:81:ae:d9:83:d1:
dc:75:7e:9b:6a:be:9b:af:d4:f2:33:3c:ae:37:1f:e4:c1:55:
c6:4c:b8:7f:2d:b0:6c:66:56:c8:ca:38:21:b4:e0:7c:91:01:
f2:c1:cb:28:06:8e:2d:41:db:93:a8:d5:85:35:ac:09:62:fe:
b6:75:4e:30:7f:ca:61:c6:78:50:f3:9f:ea:bc:55:44:cf:84:
6a:61:64:90:4e:b4:92:b2:16:db:08:fa:0b:cb:60:69:60:9d:
e5:ea:27:af:d7:4b:1a:eb:47:7f:58:54:4f:b1:d2:67:c1:d8:
f4:8c:9b:cc:f6:24:60:5c:04:62:0e:56:1a:6a:fa:c4:ba:bd:
3f:be:32:19:35:80:e0:ef:d1:a5:f2:2c:47:25:e7:4d:f3:4a:
a9:a9:5a:66:9b:93:83:df:26:57:a0:1f:8b:1b:7f:c2:a1:21:
2a:61:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:10 2026 by rpki-client