Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: se2sLDmXvI95efA3xnAb1+pKmJDoz0WGe8J9DRGIhaI=
Subject key identifier: 0D:3E:23:F2:B1:26:0A:22:C1:B7:83:5D:DB:81:91:83:23:F9:80:B9
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 019D28844158F011BE85B1B5271DC26474CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: 03A7
Signing time: Thu 26 Mar 2026 05:00:49 +0000
Manifest this update: Thu 26 Mar 2026 05:00:49 +0000
Manifest next update: Fri 27 Mar 2026 05:00:49 +0000
Files and hashes: 1: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (hash: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: YOp54ppdGllE0NpQPNOFAGhbmhqvFQTdD8AtktbBtOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:41:58:f0:11:be:85:b1:b5:27:1d:c2:64:74:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Mar 26 05:00:49 2026 GMT
Not After : Mar 27 05:00:49 2026 GMT
Subject: CN=0d3e23f2b1260a22c1b7835ddb81918323f980b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:6d:d9:b3:6e:7f:d9:62:20:26:c5:3d:c3:
6e:e8:7d:25:fe:65:cf:0b:d1:a5:ba:77:d7:cc:ea:
fb:d7:92:e7:6a:bb:39:c6:b8:30:c3:cc:ce:3e:9d:
0d:b2:8e:a7:d0:b1:09:77:cc:73:8f:f0:59:b7:23:
37:d3:40:df:8b:21:d7:6b:65:a1:36:38:0b:4c:c5:
66:9e:c8:c0:1d:8c:9a:8c:74:23:ff:d2:2d:8d:18:
54:99:0e:07:21:84:87:2f:43:27:d3:f7:cd:b9:9a:
46:e8:d1:7d:18:4f:f8:ae:81:69:b4:b2:65:fc:9d:
a9:40:2a:df:e8:af:c3:57:74:af:b4:8b:06:92:ad:
67:91:b2:ec:90:fb:7d:b3:3c:62:9b:52:5b:6b:5b:
4b:f3:9a:c6:ad:3f:ce:82:98:6d:be:3c:d1:16:9a:
a5:c4:2a:17:5b:fe:ee:49:47:f6:ad:91:47:7d:3d:
d2:95:3e:67:d8:b4:f5:fe:69:7f:79:74:e6:c3:2e:
23:a7:2f:ba:5e:32:28:be:71:0b:8e:6e:33:ea:63:
a9:d5:d5:91:13:e6:a0:08:cf:2c:d9:cb:71:f4:bc:
89:aa:ec:44:ff:c4:94:60:f7:b3:03:78:42:4a:67:
4b:d4:fa:22:f5:51:32:e0:65:de:91:16:68:de:44:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3E:23:F2:B1:26:0A:22:C1:B7:83:5D:DB:81:91:83:23:F9:80:B9
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dd:4c:27:8a:77:45:2e:df:46:0f:f7:e6:bc:c8:60:b9:ca:
d0:1d:97:64:49:01:a4:c2:a7:c7:22:02:3b:3e:31:66:a0:b5:
ac:e9:46:df:47:7b:b4:3e:f6:51:7a:b8:34:cb:13:c3:c8:9c:
1d:53:78:5e:d6:fc:6b:49:6d:2c:4e:e7:a1:43:f4:b0:34:07:
46:90:f3:db:85:54:29:34:94:60:8f:50:ac:45:46:c5:56:85:
a7:c5:90:c3:ed:17:2c:6e:7a:85:56:73:c6:f0:c9:46:13:4c:
bc:ed:05:d2:75:32:d5:b7:22:73:bf:b6:ad:80:48:1e:35:2e:
df:bc:59:b1:78:40:e5:aa:1f:68:fd:6d:f1:bb:e7:1b:e7:bf:
e8:fd:97:5d:bc:57:f3:69:87:47:41:0b:e6:8e:4c:4d:4e:c8:
a3:31:24:9f:08:62:bc:e4:44:0e:71:7e:46:e8:47:fc:5e:1c:
0e:e7:d5:fa:9e:57:85:53:b7:2a:ea:3a:f9:5d:07:21:f9:0f:
9e:21:ca:05:ec:92:42:82:21:0a:f0:98:79:b1:6e:97:31:f5:
9b:81:85:88:8b:ae:14:94:5a:f9:08:78:c3:ce:6d:32:5c:2f:
62:23:8f:49:4d:74:da:3f:47:43:14:14:de:33:87:a6:96:aa:
60:6a:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:20 2026 by rpki-client