Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
File: j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json)
Hash identifier: uDOKjEEvJeEy8KZjBRPxTqGgRDirI64kJEuezlcH2DA=
Subject key identifier: F3:CE:2B:A4:B0:02:A6:73:DF:B4:B8:79:9C:FD:BD:BF:8B:27:CE:24
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 019D26283FB5856904F0EA50FAFA0285A209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
Manifest number: 0141
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 0WmwmFuoCWNqsLL6k_gxBPAC3h8.asa (hash: 60+Or+X6S9hfGP6c+jd5ZM8DEfkfCWQ0yiF3OykR4jE=)
2: XiMWlcnYu15otXM1SpS0Znny3pM.roa (hash: HhN+oEh/TLjrfvVsB28CfHRheFgOREvZ8MiqN/vatGw=)
3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: S5cc2DCSKsq8Ke4J4MdDzNbEgU/yA0ULIN5066hqSTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3f:b5:85:69:04:f0:ea:50:fa:fa:02:85:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=f3ce2ba4b002a673dfb4b8799cfdbdbf8b27ce24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:b4:99:ce:b3:5c:a5:08:ae:a5:2e:07:84:
57:9b:38:4e:3b:cf:a2:e4:c1:72:05:66:38:86:fb:
c4:06:69:af:2f:10:ab:b7:70:d6:cc:a0:ab:a6:51:
70:40:e7:24:b5:32:04:34:db:2b:6e:1a:ef:50:52:
f1:d2:6b:66:0f:f7:84:2f:28:cf:46:ab:96:f6:f1:
a7:ec:4b:eb:1f:3d:0c:ff:98:da:b4:ca:b6:d3:be:
45:a6:f4:e8:3f:b8:1f:d2:c9:4e:a2:c4:42:6c:fd:
c4:38:5b:21:94:17:65:28:58:99:1b:c7:3a:00:f8:
fc:20:91:01:1c:04:95:f4:fc:fe:13:bb:32:15:dd:
b5:40:81:da:59:2d:e0:02:f8:6b:94:c0:df:06:49:
ec:b0:2d:76:88:7e:db:a7:e4:ed:59:53:37:9f:40:
40:ff:db:3a:b9:50:34:71:27:c8:3a:67:14:6c:78:
71:4b:a7:ce:c2:59:70:69:77:16:05:d8:c2:f4:42:
76:83:cc:bb:7c:9a:ba:48:98:da:96:fe:46:3b:ab:
77:89:a4:b1:94:d5:39:78:3b:8e:bf:3c:a2:49:4c:
a1:6e:29:7d:6b:7a:47:c3:4c:0e:48:7c:dd:73:be:
dc:5d:b8:21:82:9e:bd:61:a8:bf:33:13:28:45:0b:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:2B:A4:B0:02:A6:73:DF:B4:B8:79:9C:FD:BD:BF:8B:27:CE:24
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:01:97:ad:22:9e:ba:32:1c:06:35:aa:57:a3:96:64:a3:9f:
12:33:b6:f9:97:5e:cf:d6:e9:cc:fa:e4:5a:64:aa:74:c3:2e:
61:1f:67:a4:f9:6b:ea:4c:fe:ee:54:02:f4:c6:27:b3:d1:27:
b9:4d:87:71:1a:8e:69:1b:f3:48:a5:f2:a5:92:89:fa:3b:55:
a5:87:9d:ff:ea:a8:c6:9b:9c:e3:d5:de:df:22:64:46:b7:41:
92:01:97:43:fd:ad:df:5a:e2:7e:88:28:7a:c1:9f:66:4b:14:
83:c6:28:c9:b0:79:f3:6d:8c:b7:16:59:68:b2:8e:8e:ed:04:
97:58:e4:17:cc:25:e1:26:88:f6:5c:7a:cc:54:b2:b7:80:23:
29:bf:fc:18:db:bb:74:39:39:6b:11:7d:f6:02:0d:65:dc:43:
89:a2:97:91:e9:75:c8:c4:ad:78:68:0d:e6:8b:ab:27:92:71:
a5:bd:6e:b1:23:ba:3f:61:3a:f0:4e:e8:0c:62:09:72:f8:33:
8f:6a:78:60:59:87:87:2c:01:a1:6b:14:ce:d6:ec:e2:90:97:
c1:32:4a:c4:4e:9c:19:02:fe:d6:e9:95:a5:15:d9:2f:95:a1:
bd:47:8f:1d:3d:27:f3:6b:3c:a9:5a:d7:99:f6:98:d0:49:70:
a0:0b:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:47:00 2026 by rpki-client