Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: VBwp4/E/xPEvANVyQxeq6H0+OTdA4IID9eLbEZUyGtQ=
Subject key identifier: 3D:74:97:EA:F9:86:22:88:FB:7B:AE:A1:05:30:68:37:DC:5A:CA:19
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 019D25F170743213716495CF2FDC781552AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 1797
Signing time: Wed 25 Mar 2026 17:01:13 +0000
Manifest this update: Wed 25 Mar 2026 17:01:13 +0000
Manifest next update: Thu 26 Mar 2026 17:01:13 +0000
Files and hashes: 1: RCrEVHPQO5ZNEyF8KAmfbYplEFM.roa (hash: hi87IK6C5zmMGdTPjH6NsPzFrsGUyr24qNPoi0fsEN4=)
2: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: rFIWTpVuryil9SEI9Wl/hfkNqXFGdIJaVhSGAR9i/JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:70:74:32:13:71:64:95:cf:2f:dc:78:15:52:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Mar 25 17:01:13 2026 GMT
Not After : Mar 26 17:01:13 2026 GMT
Subject: CN=3d7497eaf9862288fb7baea105306837dc5aca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:96:a7:18:7b:77:03:23:5c:61:d0:b0:f3:
71:03:e4:7a:3c:ed:2d:47:f7:76:10:67:09:b7:e5:
a2:34:31:d2:a5:e0:dd:a1:e1:99:56:11:3d:e7:0b:
54:93:20:19:56:2e:fa:55:56:2c:e0:2e:2c:f6:99:
e0:1e:99:4b:0c:f9:d0:4c:36:4c:76:7f:4d:c3:d6:
43:61:d5:d3:6a:6c:69:e5:6c:78:cb:54:57:85:da:
a8:14:0d:72:41:04:a7:05:94:b9:e5:6c:ea:1a:49:
47:08:f1:29:0e:96:8b:0e:cc:52:22:9d:0f:bd:d3:
52:71:e0:08:51:72:c9:98:56:1a:90:f9:d7:a6:e7:
f6:96:2b:3d:74:24:f7:1d:86:bb:a1:fe:e4:8c:b2:
a4:c2:44:77:48:65:e4:99:ec:c6:36:0f:65:ac:16:
c2:c5:67:f9:11:ac:ef:f9:b9:3d:de:58:ac:c0:96:
b7:9a:78:54:69:69:13:67:6b:73:45:4a:86:61:dd:
f3:c7:84:53:55:38:f3:52:40:30:6e:26:b9:63:b1:
31:13:86:0b:6d:6b:81:01:ab:98:d5:d8:d7:d3:11:
d5:1c:5b:3d:d8:f9:20:85:63:4b:ae:cd:ad:50:66:
99:32:50:5a:20:20:f8:13:6e:a1:72:2e:7b:62:4d:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:74:97:EA:F9:86:22:88:FB:7B:AE:A1:05:30:68:37:DC:5A:CA:19
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:95:23:66:e9:be:0b:46:3d:97:4f:11:5a:57:bc:8f:07:f8:
38:68:da:e5:b6:af:97:5f:f0:11:a4:d4:eb:0c:58:bf:8d:5a:
e9:a8:ed:42:bc:42:69:54:68:f0:14:42:44:5a:5a:d4:36:bd:
ac:10:0d:28:0a:97:06:70:67:22:4e:e4:6f:b2:71:10:6a:47:
87:24:27:5e:0c:a9:2e:a1:a7:c3:f5:36:d3:bc:85:d1:e6:7f:
b8:72:b9:18:10:53:8c:38:b8:f4:2e:e2:78:03:db:98:34:52:
29:ba:e2:d9:4b:5f:79:49:9d:04:19:78:b2:d9:ce:34:f1:62:
f1:67:e0:f7:88:1c:a7:7c:7a:57:13:33:c8:62:d6:6d:99:4d:
1a:f8:90:6b:00:28:34:d1:49:dc:1b:b6:5a:4f:f9:9d:af:83:
4f:41:42:70:1b:99:d1:49:5d:67:93:c2:d3:b5:fd:ae:f1:08:
c9:b8:6d:c9:b1:14:7d:7b:b5:12:1e:0d:e0:3a:35:87:43:a3:
99:38:a9:98:ba:88:a1:e1:32:f5:91:26:c3:d8:bf:06:bf:08:
d0:a6:41:49:e8:7f:31:ea:9a:ec:f9:ea:a5:71:7c:ce:08:81:
6d:9d:83:95:83:1a:45:87:6f:c3:79:78:c1:ac:29:12:8f:61:
e8:0d:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:09 2026 by rpki-client