Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: sxFUfGsKrFrFnmnpkFxx/fK9k0xay8L6kMkZs5biEcQ=
Subject key identifier: 76:97:11:A9:62:89:4A:A9:6E:CA:F4:21:14:B7:FE:34:98:CF:61:27
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019D27DFC8A81E4B7999306E4115049BBD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: Knk4VYHDcIiBaCF1Fb23lu5Bxhc.roa (hash: 92P0sRZzCNI5Tycv/hRZey2LUOQu+EgEzREqInMSicw=)
2: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: nfoxjDu0RMxuVa6Cjy43lA4SJIcXkj2RLTnqij6PIhk=)
3: tEF7W8QAASjmD3ZJv31PpbtJPmE.roa (hash: +pnJPXwKfh/vR28pIs9jPAqM5aVgozefoHrHe0Y59Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c8:a8:1e:4b:79:99:30:6e:41:15:04:9b:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=769711a962894aa96ecaf42114b7fe3498cf6127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:cd:91:90:ca:22:59:93:51:ae:e0:b2:ae:
eb:7c:24:fc:38:27:f4:48:3b:c1:7c:fd:0b:72:73:
a9:85:48:f9:5d:65:98:a1:19:da:03:b5:a1:60:10:
55:db:f9:81:97:d6:12:f2:1d:01:90:c1:f4:72:39:
6e:7d:73:f3:82:3c:f3:65:a3:ee:71:df:c5:d4:85:
9e:c1:5b:70:e3:e2:de:fa:b5:d1:20:95:93:fe:aa:
19:6b:31:7b:bf:ac:8a:ce:78:43:cf:8d:09:4c:68:
d6:51:4b:68:ca:40:ca:48:ac:1d:90:d4:b3:2e:fb:
a7:62:1e:02:dc:8d:41:0d:08:ae:1e:53:5d:7a:d3:
12:56:29:15:c9:3f:d8:c9:88:e1:54:f6:cd:21:60:
f2:34:ea:2c:6a:5c:b5:91:ae:be:fe:16:56:63:41:
ea:70:d0:07:57:54:70:77:17:c1:a1:2a:97:d7:dc:
4d:53:ea:02:d8:cd:32:06:40:7b:09:52:97:37:9f:
b4:a6:0b:3c:f7:52:d9:95:dd:96:7f:fd:f6:32:f9:
09:cb:ed:83:92:79:79:2f:f3:85:de:b4:0c:29:8d:
2a:bf:13:09:7f:92:fb:fa:90:6b:02:6b:b9:05:07:
7d:2c:ce:d2:d7:2e:14:b8:d0:ac:32:ac:ae:67:06:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:11:A9:62:89:4A:A9:6E:CA:F4:21:14:B7:FE:34:98:CF:61:27
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fb:16:16:77:81:af:7c:84:06:e6:ae:ed:69:76:41:28:20:
77:fb:11:5e:91:5b:f9:ee:53:66:3e:8d:d8:13:d2:40:67:c9:
7e:b5:91:28:0a:bd:4d:b7:d4:2d:1b:89:c9:da:73:af:2f:03:
eb:50:fb:fd:42:3d:8f:6a:ac:9b:d3:ef:23:45:f8:a6:7d:1d:
bc:5d:86:47:06:72:4d:38:40:ad:bd:c9:42:81:4f:e1:a0:59:
5f:c6:7b:ee:46:40:45:de:ed:75:70:1c:25:3f:4c:58:4f:92:
3e:3c:e4:c5:80:60:02:dc:b4:78:34:00:d9:2c:af:91:14:11:
16:13:56:40:5e:25:8d:dc:0b:8e:4f:15:87:1f:b6:59:73:1f:
7a:f5:e3:cd:58:d7:53:c8:17:e4:1e:31:67:5b:62:3a:c1:6f:
4d:5d:7c:b4:40:a0:61:f4:41:0f:b8:8d:8a:79:fd:18:18:3e:
6a:62:59:a2:a6:1d:0c:61:46:25:b1:4e:1b:dd:90:25:29:ee:
fb:db:1f:8c:14:95:20:d7:34:fc:71:17:3f:cd:01:79:73:de:
9a:93:40:9b:a0:10:87:e0:ab:b1:49:6e:a8:11:d0:9e:b0:2e:
bf:35:31:5b:ed:ee:45:d7:26:37:d7:3e:59:39:5a:cb:ab:2d:
f4:25:26:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:35:27 2026 by rpki-client