Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: z03ZJip49slURZkvsSLhNUkheIgNe0hKBDTt7bNJ678=
Subject key identifier: DD:18:51:F2:BB:E7:C2:11:9C:F2:3F:B8:EC:B0:92:50:8F:12:A4:46
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019D25F10202CAD513788476402C954F6F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 0531
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: Lm0YXMaLWclKoRURyg7-1BSKMMM.roa (hash: lcsnHzqJgV0Pr0+CJVRqQvA5eNcE3/rEZUnHTRT4+/4=)
2: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: Qg/eSvWYspKltLMCzOJAR8oAmGzJidLbiy2i7Mzx81M=)
3: s_i-4HgM08ZomafIARg5DCNgTzI.roa (hash: wSP0h+XQV0/zt4QIiT80nzFtCCr+jVfJzFx1wPlXOiY=)
4: uXDu77cxLGO111ouG3WizVkTwpM.roa (hash: jqcMrYd4GN+J0MgnqBXSyT/iy1d2bJSyGgMM3hAUiNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:02:02:ca:d5:13:78:84:76:40:2c:95:4f:6f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=dd1851f2bbe7c2119cf23fb8ecb092508f12a446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:97:7c:0b:bd:05:ed:71:11:17:cd:c8:a7:
0d:22:0d:30:67:45:8d:23:d9:85:06:5f:6d:e1:f4:
30:d4:b3:70:ea:4b:4d:2d:73:a8:9d:86:aa:63:24:
23:ce:6d:10:f1:4c:b2:2c:7c:60:e0:6c:bf:73:cf:
b1:2f:fa:0c:63:9e:ad:23:1a:99:51:10:2b:71:c0:
35:fa:4e:0e:ac:e6:f1:31:a3:42:65:7d:6e:8c:89:
66:bc:d0:9d:52:ff:56:17:9c:92:d2:f6:3f:76:ab:
59:ac:b5:a7:96:20:6e:5d:0b:e3:4e:aa:33:3d:d9:
72:75:26:35:1e:9d:ea:06:4e:75:44:94:eb:ed:7c:
74:25:31:48:8b:4c:eb:6d:66:93:00:8c:47:e4:fe:
8f:00:fe:a3:01:b0:cc:a2:1b:2b:e8:13:6c:3c:41:
2e:78:1b:38:75:88:dc:13:67:a3:bc:9b:16:cb:56:
cb:ec:3d:59:2c:08:cf:40:01:14:62:a1:38:16:f6:
f8:6f:e7:1c:c2:7b:13:e1:af:8d:e3:61:94:08:c9:
ad:6d:7a:4f:fa:e7:0b:65:f5:b0:e5:9b:ff:ae:30:
ae:4f:23:6b:b0:d6:a6:ef:65:34:fb:08:97:5b:e8:
cb:b1:20:8f:cd:85:23:55:8f:57:80:3b:13:0a:94:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:51:F2:BB:E7:C2:11:9C:F2:3F:B8:EC:B0:92:50:8F:12:A4:46
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:41:b4:9e:47:a1:29:39:cf:05:36:90:bf:a8:50:dc:a2:04:
ee:92:d4:e0:5b:03:69:76:21:38:4b:71:34:aa:fb:be:c6:e2:
e8:03:db:18:a4:74:9c:ab:46:21:f6:22:3e:92:69:b1:32:02:
4d:8d:c0:e3:f4:f2:98:90:af:ba:96:54:5b:0d:6c:d4:33:5d:
46:a7:a0:2e:6c:c4:0a:ec:7d:bd:69:f7:de:dd:d4:d2:a7:c9:
b8:c1:31:7e:1a:47:41:e3:94:1a:88:82:2e:c5:45:e4:bf:d8:
4d:df:07:65:21:de:78:a6:39:91:be:00:c7:53:db:65:f3:01:
f0:15:f1:f9:37:9a:ee:69:ef:e1:38:4d:b3:bc:79:d1:2a:3d:
fe:35:42:c4:12:20:8f:4e:da:c1:0b:f8:db:c6:f8:f3:bf:1c:
57:3b:45:2d:2e:8f:ba:7b:2c:39:d3:f4:89:d8:4c:59:00:e6:
5a:c9:7d:8d:fd:49:44:9b:32:88:d6:77:c9:d7:1e:65:f1:b4:
54:e9:40:3e:fe:0e:c2:b3:6a:64:eb:d1:25:a9:b6:d5:57:d6:
d6:2b:ab:e2:6d:e1:62:d2:24:c0:9c:58:5a:6a:c6:5a:39:bc:
b1:25:40:d4:35:db:aa:b4:3c:e1:81:f7:0d:97:81:d5:87:e0:
df:ad:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:15 2026 by rpki-client