Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: gSr2MFpFC2lz2fupbGzGP0f1j2jQTx1jYk04filc7FU=
Subject key identifier: 06:27:3B:4B:74:C9:36:AC:61:E2:94:E4:BF:BC:C7:F7:A8:16:4B:EF
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 019D265FF2757317FF81FF68DAA076833B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 19:01:55 +0000
Manifest this update: Wed 25 Mar 2026 19:01:55 +0000
Manifest next update: Thu 26 Mar 2026 19:01:55 +0000
Files and hashes: 1: B-FM8iiMdf_W9iFsj3WoMzoIEmw.roa (hash: IsI9YCn1EFbOUlMghQO6Nnu6k5OuvkaZPwWNPHZmrsY=)
2: KAMejuRA6SeFAjQoLQXU7zLjWr8.roa (hash: LnxIlTyZE7AtMc2QM8/mi8gslLYiHvYgSbLU2cG39As=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: oIJJEYoIL2baOZ6c4w0SNwiq1fDwddvlYIqx0Z63b7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f2:75:73:17:ff:81:ff:68:da:a0:76:83:3b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Mar 25 19:01:55 2026 GMT
Not After : Mar 26 19:01:55 2026 GMT
Subject: CN=06273b4b74c936ac61e294e4bfbcc7f7a8164bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:de:1d:8a:09:c5:0a:b3:81:c1:3e:b4:f0:
5d:7e:51:7b:3a:bd:87:f8:df:9a:6b:55:4c:17:cb:
a9:95:8f:8b:22:4e:be:b4:4c:d9:70:df:f6:2f:8e:
ca:cb:22:14:7b:1d:e7:05:38:41:df:a0:a2:e1:be:
ca:c6:aa:4e:4d:51:e0:9c:27:46:28:c7:4a:c1:df:
0f:81:58:5c:5a:41:4f:5a:53:2c:97:37:80:2a:2f:
a4:82:08:e8:75:90:59:ee:5f:9f:6d:8b:72:e5:c3:
95:6c:41:77:9a:ca:f7:75:14:97:26:42:13:13:07:
28:a2:78:18:45:71:e8:dc:96:bb:62:f7:33:48:1a:
cd:97:da:e0:33:23:1d:58:2c:c6:4c:3d:ca:9d:1a:
90:54:50:f5:9b:a3:16:0e:d2:5b:49:9c:bd:b2:da:
ac:47:37:f5:cf:8b:06:e9:d1:a6:b0:a2:e9:fd:ae:
10:2b:e2:d7:7e:24:57:57:3b:00:63:fb:ee:0f:03:
57:b0:0a:b8:8a:8f:29:d3:2f:47:83:38:85:b2:1b:
ef:75:6a:14:81:bf:74:c9:7e:15:c1:e7:29:ea:e3:
da:73:f8:31:e1:b8:07:bc:17:b9:27:cc:2e:9d:6d:
d0:9b:89:2e:87:27:49:30:3b:89:05:cd:2b:fe:94:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:27:3B:4B:74:C9:36:AC:61:E2:94:E4:BF:BC:C7:F7:A8:16:4B:EF
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2a:79:02:14:85:61:1d:58:4c:0e:a5:1d:d3:bb:9a:ec:c6:
db:61:b9:6e:85:ba:e6:b8:0d:8e:3f:62:b7:18:09:05:f3:78:
52:97:0e:60:56:b6:67:f7:a8:98:62:5f:df:00:ab:e7:70:68:
0e:31:08:ba:24:69:b1:57:86:65:67:ed:94:5c:59:60:c1:a7:
06:cc:98:db:12:ab:13:1f:b9:37:a5:a8:f2:a6:e9:d1:42:8d:
4f:f2:2c:44:f7:89:99:5c:94:09:64:80:e0:ff:ef:99:79:ab:
5e:36:f4:66:f2:66:5c:91:24:14:3a:4c:f1:54:bb:77:f5:a6:
b0:23:7e:e4:44:2d:db:5a:b5:0a:b2:6f:36:c1:27:11:c0:f4:
3e:e3:67:03:8f:45:90:55:8b:4a:d2:a3:de:17:e3:11:f3:f5:
0e:38:3d:0c:45:d4:b9:68:c9:c5:ce:28:8e:6c:42:8e:52:72:
9d:f9:17:62:8c:b2:ec:7f:f8:d9:48:9f:59:4f:87:7d:2d:af:
f2:9f:30:a9:a4:e9:05:14:6d:22:b7:89:64:f6:48:f3:59:17:
a7:4f:41:a9:b1:64:d6:2d:88:af:11:ab:cd:66:aa:ef:c7:7c:
55:fa:22:54:d0:a9:b3:9a:f4:93:b5:32:8e:1e:31:86:de:e0:
ff:61:6e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:07:20 2026 by rpki-client