Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: OqBYATLGyYMcMWnGhVS1SUxYzj7TAcdgrgzMy0PNz5E=
Subject key identifier: 95:C0:29:B7:B3:E4:62:1A:FD:D3:DC:35:06:5B:69:17:69:23:F9:A1
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019D2696069110FEBE63B88B50076E2899B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: rcujCFDmaKalOQGlQkd9vk/u0+POXADNiQfHeJ/tZC4=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:06:91:10:fe:be:63:b8:8b:50:07:6e:28:99:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=95c029b7b3e4621afdd3dc35065b69176923f9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:1b:6b:b3:f1:17:19:56:b7:3a:f9:9b:52:
bf:a8:18:6f:08:81:59:2b:c1:dd:64:82:d4:ea:b1:
4a:53:64:89:6e:90:b7:bb:c6:1f:e3:64:6a:f6:ee:
9d:30:c7:8d:c7:c9:5a:ee:09:c5:a6:98:1b:62:20:
d3:b6:32:df:f5:76:04:9c:5e:79:17:52:36:ef:b1:
3e:68:65:99:83:45:ec:ae:75:06:da:f3:1f:c1:da:
ae:c1:79:ea:2f:df:82:3b:9d:60:29:b1:87:a5:14:
89:bb:8d:ec:50:75:6f:d3:05:0c:62:7e:85:0e:be:
83:88:45:29:2c:9f:75:f2:a1:fa:54:74:82:7a:0a:
06:1a:a8:df:08:89:e9:36:96:3b:d7:12:23:e3:37:
5c:8a:c4:68:85:4e:54:5e:49:12:a8:64:a6:61:3e:
d6:ab:53:b1:89:5c:4d:51:6f:22:86:49:d1:ee:bc:
a8:11:a6:63:14:9e:d9:af:cc:f1:83:94:8e:78:6c:
97:91:73:50:7f:22:85:71:6a:74:28:c4:5f:dc:d2:
28:8d:68:cd:4b:84:2c:1d:52:29:21:de:50:c6:45:
49:b1:4c:3a:45:7e:ae:f8:53:ae:a8:3d:4e:71:65:
6f:ea:bf:be:0c:52:3f:b2:5c:40:55:07:91:1d:9a:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C0:29:B7:B3:E4:62:1A:FD:D3:DC:35:06:5B:69:17:69:23:F9:A1
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c5:94:4c:93:c9:4f:2c:fe:5f:e5:8a:a5:ae:62:12:34:af:
93:54:94:fd:84:28:f7:96:f0:16:50:a3:bb:1a:95:13:bf:b8:
fc:18:85:bd:cb:35:27:fe:41:fb:c1:c9:4d:15:87:55:93:94:
c5:79:fe:49:44:7d:7c:83:d9:59:72:62:e8:7f:2e:45:f0:d4:
29:0f:6c:35:b2:a6:6e:25:2b:df:05:7a:3e:d4:85:07:c6:58:
56:f2:ef:c4:83:2d:01:12:b2:07:0c:7c:40:dc:89:71:c0:5d:
ca:2e:17:59:bf:59:d2:1a:6d:94:52:d6:75:dc:cd:73:1f:c2:
8f:a0:cd:b3:24:f1:db:d5:b8:7b:c7:35:ef:29:db:13:f8:39:
c2:a3:38:36:34:6c:4f:c6:ea:42:5e:45:8b:24:f8:e8:17:8d:
e0:bf:56:ea:c7:2b:9e:d6:22:73:d1:77:64:20:26:3a:d4:ef:
45:ad:98:69:63:31:e4:10:a9:89:d0:53:c3:f8:c1:5e:d8:a3:
43:b8:7d:fe:95:b8:d5:fe:c2:9c:ae:94:b2:3f:bb:5a:28:08:
d5:76:46:cd:c4:10:8b:55:03:e7:e0:45:96:3a:c2:d6:c8:4e:
c6:cb:4a:e4:bf:9f:51:f7:81:dd:a7:46:9b:0b:f9:fc:cf:34:
f2:2c:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:50 2026 by rpki-client