Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: e1/A2BREfEuu2/wF7olNBTcWqbYrwmoo7LgDrES3BM4=
Subject key identifier: AB:07:AB:0E:51:C3:7A:80:95:6D:8C:D7:05:5E:D2:CC:96:5E:CE:90
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 019D27DF917217296572478517D4E527122C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0BF8
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: 402WgFEvx-MCA7DFemnXw9EsHq0.roa (hash: I1gPCHaPoQ70/m4H48LGfcyzChehib1qKqxsJxfnGkA=)
2: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: p0+JbozouSlajtriNGkk82uIht5AQPAteSoIqyplu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:91:72:17:29:65:72:47:85:17:d4:e5:27:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=ab07ab0e51c37a80956d8cd7055ed2cc965ece90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:64:32:00:14:6c:65:06:97:18:ca:48:0a:
c7:0e:8d:dd:a3:fa:d6:ae:de:58:c3:79:45:fc:b7:
32:3e:ec:e0:45:76:cc:02:d9:a3:b1:87:80:15:7d:
38:94:aa:23:0d:ce:e1:14:32:b0:5a:ac:1c:83:2a:
b1:3a:bd:c1:8e:f6:79:ee:18:a1:11:bd:42:44:2a:
f2:02:ae:b3:62:fc:a9:19:e9:0e:e5:64:bf:55:aa:
5c:fc:05:91:88:42:c8:ca:41:3a:86:b6:03:0f:41:
92:aa:91:46:7d:17:16:25:4f:ad:ba:93:af:5f:b6:
fb:e4:7f:7c:1e:a3:c9:39:dc:d3:20:04:ea:c9:32:
0a:0d:bf:fc:50:1d:e1:04:e0:18:87:fa:42:8f:b9:
5f:3e:b7:ab:c8:1a:e3:88:bb:b7:fe:06:89:7d:58:
8a:ba:aa:c9:6b:6d:ff:ed:9c:4b:2a:08:8a:b4:e0:
ad:3d:93:2e:1d:cb:ed:c7:a2:70:db:cd:ce:4e:2f:
e2:e4:4d:2e:1f:c9:8e:91:da:23:c2:49:ad:c6:36:
5b:d6:75:f9:e1:2e:d4:ce:eb:0f:4b:72:42:82:eb:
45:45:95:b0:1a:71:6e:86:39:f9:e7:aa:a4:7b:10:
cd:e5:0b:04:3f:2c:15:9d:d6:52:2c:f6:92:bf:35:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:AB:0E:51:C3:7A:80:95:6D:8C:D7:05:5E:D2:CC:96:5E:CE:90
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d4:5d:f4:1a:ec:df:06:cb:5c:30:9e:55:b5:5d:aa:96:8f:
a8:03:51:a6:c6:8a:56:bc:7a:a5:18:68:5e:88:f7:93:79:4e:
a2:60:63:31:c5:6e:f4:69:db:3b:da:c2:3b:ce:4f:0c:0f:bc:
df:8e:c5:5e:e1:be:2e:ed:37:64:df:fa:50:1f:db:61:6e:da:
bb:0e:a1:60:6f:9b:cc:e6:4e:fb:c0:3b:3b:92:00:43:05:85:
15:8e:df:61:c2:e9:ce:da:6f:6f:9f:af:4e:3d:d9:f8:53:37:
e2:1d:36:78:5b:37:36:96:d9:2d:31:97:66:6b:d3:9f:37:be:
a9:8c:59:99:e9:56:9d:71:33:73:47:10:de:e3:3b:e0:07:8b:
3c:c8:b6:94:a2:40:63:17:87:00:2f:cd:8a:7a:23:c4:b9:ae:
86:e0:63:fe:16:72:03:80:73:30:b0:54:9f:b6:cf:cd:a6:47:
28:03:01:81:79:b3:db:2d:ec:4f:14:00:d1:ab:cb:29:6e:b3:
5b:a7:ed:aa:44:1c:fa:98:af:9e:43:94:5c:fa:3f:47:27:3e:
b7:4b:34:01:ba:1a:e6:c7:9e:9c:2c:25:b6:e5:85:da:4d:b4:
3b:a0:fd:b6:52:5d:34:73:2c:12:4b:4b:c5:97:ec:d6:9d:ec:
18:35:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:59 2026 by rpki-client