Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: CNC0vkq33ZxIBfo6G/QAFOSqz3GN0Ejt3J9l4UUqf/k=
Subject key identifier: 40:6B:63:60:75:D9:1D:8C:17:B9:BF:91:7E:42:61:71:22:F2:36:DB
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019D269602FB4F8DC5E4CC8EC769C313950D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: MBje2Kaa62IBDG3vLdQ11jbu-BY.roa (hash: gjY1RtH2j/aQua697MsSq0fqSF6zUpGLdhWZ8DhMdzU=)
2: Ww9xlTTYnd90caDgEeVmTVfm-BE.roa (hash: 7JRO1QHni0n7t5LFba599MfSp8my+dFKoYt3fvY4Y8A=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: W6qM6awmfiy3UByUI4hBsPcaWQAkQfRGgk0wBeU/+XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:02:fb:4f:8d:c5:e4:cc:8e:c7:69:c3:13:95:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=406b636075d91d8c17b9bf917e42617122f236db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8a:d2:36:2a:9f:be:2a:4e:01:44:3a:54:77:
03:2a:a7:ed:76:18:b3:ce:71:90:38:1c:9d:72:e4:
7e:e8:43:84:09:3a:7a:31:3f:0f:fb:33:b8:4e:47:
a3:08:2a:ea:3d:6a:e7:4f:a3:84:11:04:b1:f3:06:
c1:b7:87:4a:19:46:7d:62:ed:bd:02:39:08:ca:79:
6b:8f:a6:1a:b1:e5:1a:a0:85:df:72:41:76:47:15:
63:35:fc:85:0d:57:52:67:9d:ec:fd:6a:51:9f:da:
56:40:95:ee:27:a0:91:d5:41:ff:05:02:5b:5c:21:
c0:17:ea:6a:44:9f:1b:8d:13:25:e0:37:14:07:35:
70:28:8e:e2:ae:c4:17:09:4a:11:d7:72:ec:49:f5:
51:bc:66:26:ac:2e:43:3b:64:25:da:19:3d:3f:3c:
2a:5e:b9:79:cb:f7:35:c4:06:4f:1d:7d:3b:32:3a:
02:20:87:49:06:97:a9:bd:55:54:4d:16:d5:42:16:
cc:d7:e5:ca:06:4d:9c:4f:17:43:d2:e7:0b:8b:b1:
0d:76:d5:fb:46:90:a4:7b:d9:ea:3d:76:19:31:34:
62:27:09:b4:eb:41:ab:1a:5d:dc:7f:7e:07:d1:c0:
47:65:b8:e4:c8:55:52:62:06:44:27:9b:4b:ff:14:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6B:63:60:75:D9:1D:8C:17:B9:BF:91:7E:42:61:71:22:F2:36:DB
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:97:16:07:23:1e:d5:14:d2:d1:cd:73:30:39:27:74:fb:59:
cc:82:fd:50:b9:ae:a0:93:95:bc:c4:85:b1:bf:39:e9:21:86:
42:6c:8c:b5:60:4f:ba:ee:77:ec:23:5e:7b:51:5c:f6:e6:75:
a6:44:95:41:a7:07:57:28:19:0c:6f:36:50:d1:ed:b2:b8:e7:
b9:1c:5b:79:1b:39:39:f9:c5:f7:45:02:79:e4:3e:0c:7b:a9:
df:f5:9c:c8:dc:40:ce:6e:92:ab:4e:1a:9c:2c:a6:57:b0:a0:
23:67:df:62:3c:3b:20:31:c1:e7:d7:23:61:13:1e:b3:70:5b:
e7:41:56:31:b4:fb:de:da:91:19:f3:e3:52:7f:c0:fe:80:15:
67:5e:c3:5a:f1:7a:22:ca:27:10:1d:3f:1e:55:f1:00:fe:03:
8d:b3:5e:56:e3:3d:9e:82:58:9c:52:5b:de:6a:54:21:ef:ed:
55:0f:c7:a4:1d:09:6b:91:ab:8e:3e:9c:d5:40:9a:e1:93:06:
94:3a:3d:22:a1:81:65:cd:e8:d4:0b:7a:c5:3c:d0:dc:b6:00:
8d:4a:e1:a2:16:7b:31:f9:19:65:db:1a:69:e3:93:4c:9e:8e:
61:bf:55:88:c0:9c:81:9e:85:09:26:33:32:50:43:31:d3:7b:
9d:fd:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:03 2026 by rpki-client