Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
File: jFdSEbjx8EzuCr3brasqBsw05gA.mft (raw, json)
Hash identifier: C5qXF6zn7MnOu7jQLhYiMeAp48/VOM16qGFqzJZdVds=
Subject key identifier: 94:6D:9F:A5:F0:E7:DC:6D:E7:17:48:BA:0D:F0:7D:96:35:8D:C3:B4
Authority key identifier: 8C:57:52:11:B8:F1:F0:4C:EE:0A:BD:DB:AD:AB:2A:06:CC:34:E6:00
Certificate issuer: /CN=8c575211b8f1f04cee0abddbadab2a06cc34e600
Certificate serial: 019D2816B354C305D02417F5B7E30381D32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
Manifest number: 74
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: b4mQrv2JTgcWO8F1cjJyeYQBVb8.roa (hash: iaSN44aIIFU4B37XMu9thx+iSA2kuFPJ2xwDFwtro2U=)
2: jFdSEbjx8EzuCr3brasqBsw05gA.crl (hash: DdneInAx41UjvIbWANNvq0bbObOPN5JXkvOoQtpqqC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b3:54:c3:05:d0:24:17:f5:b7:e3:03:81:d3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c575211b8f1f04cee0abddbadab2a06cc34e600
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=946d9fa5f0e7dc6de71748ba0df07d96358dc3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:bf:23:4b:25:29:7e:4e:17:13:48:1e:37:
cc:6a:84:f8:77:ce:03:5e:a0:3f:2d:80:9a:a1:d9:
87:b3:26:b9:02:c8:cc:17:8c:5d:f2:3f:0a:7a:fa:
e5:0a:0a:4e:39:01:52:86:8b:d0:fc:e2:ab:b5:27:
27:22:92:41:20:b3:61:57:b4:9b:a7:f8:d8:a3:2f:
63:43:1b:94:e8:16:85:9a:c8:07:bd:24:fd:b7:b7:
b1:94:4d:20:db:a7:30:c8:f5:8d:b0:9c:05:b9:75:
11:41:43:ba:23:90:eb:1f:e3:2b:27:9f:0a:31:d8:
f4:f9:b0:2f:51:f1:90:84:9d:c3:83:85:a9:35:40:
8e:c8:f7:c6:6a:f8:a7:ff:0d:f4:ea:9c:8e:80:ee:
bb:d3:8e:d9:90:d7:84:06:b5:d0:38:1b:1b:9c:e8:
53:fe:12:4c:a7:94:44:14:e3:0a:75:2d:d5:ac:4e:
da:a2:33:1c:27:8c:d1:97:2b:2b:d8:24:53:a4:2a:
17:f9:91:6e:fc:26:ea:21:4b:c7:e9:17:1c:3d:9d:
3d:98:0d:66:bb:b4:99:9b:7a:0d:f0:cb:85:69:63:
67:b2:c9:c4:f0:c2:d3:e1:43:26:67:03:13:7a:80:
0f:99:64:31:89:1b:c7:21:6d:62:32:b5:9a:aa:c8:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:9F:A5:F0:E7:DC:6D:E7:17:48:BA:0D:F0:7D:96:35:8D:C3:B4
X509v3 Authority Key Identifier:
keyid:8C:57:52:11:B8:F1:F0:4C:EE:0A:BD:DB:AD:AB:2A:06:CC:34:E6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2b:24:08:8b:1b:94:92:19:19:ed:39:e0:be:f5:91:2e:10:
0c:60:90:27:d8:0c:87:45:f8:87:f9:3d:af:d7:cf:56:d9:8a:
32:ff:65:b3:dc:5c:55:10:4f:e0:3a:ee:c0:08:b4:c6:31:b4:
cb:46:b3:c8:06:ec:f7:68:3e:9f:4e:01:4f:a1:df:2e:d6:b4:
bc:12:55:c0:33:2a:43:48:0d:b5:70:c0:0d:7d:11:3c:13:ec:
34:b6:b3:c5:59:ee:4d:19:fa:6f:4c:4a:56:5a:e4:66:f1:3f:
67:f6:26:38:a9:3c:73:fe:6e:65:e1:04:2d:b8:88:e6:99:48:
fc:61:be:95:4b:0a:83:46:ad:2b:0c:f7:60:d7:f4:b6:79:07:
47:7b:6b:4f:21:22:d1:a1:e3:03:ff:1a:1e:f8:da:55:8d:d7:
3a:55:06:49:61:79:8d:29:31:8f:a4:1d:82:5d:4f:4c:fd:12:
e1:4a:c3:3f:fd:9f:15:a6:2d:9c:a4:13:1f:af:0f:68:44:01:
ba:ce:c0:e8:25:3c:82:e8:a6:c1:67:19:a5:d8:82:a7:0a:cd:
02:af:67:a5:fc:8f:67:93:0b:2a:8c:af:8e:b0:fe:98:ff:fe:
2a:d8:49:01:a0:f9:4a:f0:53:a2:d4:7f:9d:26:c2:e1:49:98:
5a:e7:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:39 2026 by rpki-client