Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: dy0d+VsXA92L6A8jGiKtcKvejPhpRLtY+ERqWRj1Eag=
Subject key identifier: 3B:F2:03:2F:66:BA:28:F5:0E:03:B7:91:9B:F4:E8:8D:8C:B3:4A:FA
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019D251568C54DC594FD0FA079911551E077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0C79
Signing time: Wed 25 Mar 2026 13:00:53 +0000
Manifest this update: Wed 25 Mar 2026 13:00:53 +0000
Manifest next update: Thu 26 Mar 2026 13:00:53 +0000
Files and hashes: 1: bMET0vgbMSpak17KuCwZIPjOPiA.asa (hash: gPoFxfWrrJ7T/UwOlotNIRMMkTMt1S7z/4qqFihH3N0=)
2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: SleAHoiPZ4ljdSUR8nc4aZRKTEQQjObjl/Gg4HVg9ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:68:c5:4d:c5:94:fd:0f:a0:79:91:15:51:e0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Mar 25 13:00:53 2026 GMT
Not After : Mar 26 13:00:53 2026 GMT
Subject: CN=3bf2032f66ba28f50e03b7919bf4e88d8cb34afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:f7:63:8a:99:e6:8b:5d:0f:f9:8f:91:fb:
ec:02:9d:9d:9e:3b:fe:49:91:3f:42:0e:c0:c7:8d:
6e:5d:47:47:d6:76:c5:3c:44:6f:c5:30:94:91:4f:
85:63:0a:4f:17:0f:07:43:10:c1:8f:b1:c9:69:98:
b2:19:c8:e5:83:c1:4e:84:4a:dc:f3:f6:bf:95:94:
be:bf:7c:d5:be:22:43:4d:76:be:9d:1e:46:c3:52:
57:26:cd:dc:b7:26:41:a2:74:59:5a:ff:e7:51:44:
8a:2f:1b:89:e6:61:bb:bd:1c:7f:80:cc:34:44:fe:
49:89:9f:71:d4:ce:6f:af:67:72:44:9e:90:79:79:
4f:15:1d:82:78:44:68:5a:dd:ac:b9:ea:d5:90:3a:
af:41:6e:58:25:42:93:3c:5b:db:bd:d4:ad:bb:d8:
48:53:3f:06:0c:60:59:3e:9c:1f:7c:23:0c:eb:3e:
15:da:7a:83:ef:1c:f6:bc:25:6b:fe:e9:72:df:4a:
02:55:98:19:e9:4a:d9:1a:5b:ef:47:96:2a:44:87:
0e:08:44:99:82:f8:c0:d8:55:2a:c9:90:de:bd:54:
95:87:8a:19:b6:bf:ae:7d:b2:a4:61:e8:75:90:be:
3b:fb:c7:40:ad:64:e4:af:47:19:69:9f:79:af:63:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:03:2F:66:BA:28:F5:0E:03:B7:91:9B:F4:E8:8D:8C:B3:4A:FA
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9a:1b:ef:0f:17:a5:14:11:ba:df:dc:20:87:66:57:1c:1d:
3c:3c:47:70:06:ef:97:39:7f:32:48:d3:14:69:4f:1e:96:cf:
50:04:fc:c1:e2:fe:85:c3:b1:93:01:ff:e2:34:b2:d8:b8:82:
3d:4e:bb:d5:8e:80:d5:82:5b:fc:58:51:e4:b4:5f:40:89:98:
31:3e:ab:8e:b5:26:4f:30:5f:0b:3a:38:60:35:d8:d0:1d:45:
07:03:8a:d8:96:28:bf:d1:e1:b0:1c:ce:56:82:a2:ce:49:03:
78:56:79:1a:2b:8d:1b:92:d9:ed:74:4f:aa:f5:23:9a:29:0a:
34:a8:0e:ee:33:5f:02:d8:4f:69:23:d5:11:a2:77:e7:6d:e2:
f4:e3:8c:9b:e3:f3:85:42:5e:9e:26:a2:4d:3c:30:6c:e0:db:
e8:fa:49:94:f4:e1:6c:13:05:c7:90:16:92:a1:2b:97:da:1c:
17:50:28:6d:8d:8f:58:90:14:d7:8b:59:c1:5f:ef:54:90:94:
87:ab:5f:d7:94:73:40:3c:5d:15:52:49:a1:d6:3b:ce:d7:c7:
dd:e3:3e:f7:ca:9a:fb:c5:88:ba:dc:62:12:58:3d:83:ca:4b:
74:61:61:94:6a:8f:9d:a6:52:86:5f:fb:5e:8f:66:52:ef:ba:
d2:cf:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:40:56 2026 by rpki-client