Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File: jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier: 4j3AtAJf3fIlKZvMODmgvIUzUspom+7hU1NbrET2xSk=
Subject key identifier: 4A:7A:E7:07:14:34:15:26:68:44:90:22:32:74:C6:33:36:89:74:79
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer: /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial: 019D265F38680FF81ED3ED1F9FE9FEE862A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number: 021B
Signing time: Wed 25 Mar 2026 19:01:07 +0000
Manifest this update: Wed 25 Mar 2026 19:01:07 +0000
Manifest next update: Thu 26 Mar 2026 19:01:07 +0000
Files and hashes: 1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: T5zdI2ZJpaGen4SwfaR9d+0kPq2Lhgvoq/e+iF6XMMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:38:68:0f:f8:1e:d3:ed:1f:9f:e9:fe:e8:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Validity
Not Before: Mar 25 19:01:07 2026 GMT
Not After : Mar 26 19:01:07 2026 GMT
Subject: CN=4a7ae70714341526684490223274c63336897479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:68:9f:5f:04:3f:86:cb:13:2e:20:f7:b3:
5b:d9:eb:43:b7:b6:1e:5d:57:71:8c:bd:ab:83:c3:
8b:ca:0c:fb:1e:19:61:a9:f8:14:38:b1:04:22:2a:
51:03:1a:fc:3f:6b:ce:87:43:30:31:9c:8a:18:51:
c5:f0:9c:fa:b2:e5:2f:1c:1b:94:25:f9:19:b0:00:
17:75:cc:98:c9:b3:5a:46:55:91:df:b2:84:54:08:
3c:10:7d:e8:bc:af:cd:49:e9:b7:88:a3:c1:34:e7:
55:11:a0:d8:7c:b5:11:7e:57:51:7a:1f:42:19:f5:
9f:a6:68:2a:71:b3:6d:1c:a9:73:7d:e3:17:24:d2:
bc:ff:96:94:21:d7:05:ec:a3:25:59:5b:6b:b0:56:
95:b9:a3:9f:a6:5b:45:34:87:64:0c:2a:10:60:fb:
19:6b:50:b4:16:02:8d:a8:a0:6e:0f:15:de:62:10:
11:04:c0:37:de:4f:1b:af:44:d4:32:bc:ec:d9:ea:
09:6c:0a:42:cf:6c:4e:1c:37:78:05:c1:b8:43:e3:
8c:29:95:83:61:71:4d:c3:88:f8:6f:e6:8f:8f:40:
44:55:f7:90:ab:a2:e6:02:9f:1f:06:14:dc:dc:9b:
a0:a4:c1:92:e4:31:20:9c:ff:64:65:79:2c:c6:b1:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7A:E7:07:14:34:15:26:68:44:90:22:32:74:C6:33:36:89:74:79
X509v3 Authority Key Identifier:
keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a2:7a:21:ec:bd:fe:80:65:56:8c:1a:ae:0d:09:a5:4f:f9:
c7:f8:84:51:4b:68:a0:2a:7a:31:62:54:76:49:44:c5:88:6d:
4c:16:7b:0d:fd:45:7d:20:7f:dc:11:c5:7c:6f:59:d9:6b:c1:
a3:21:f5:ed:7c:d4:68:2f:bd:b0:33:76:c2:3a:02:35:93:42:
3b:ca:70:e0:0c:f6:7f:13:39:56:75:0b:fe:18:46:4e:51:d6:
6a:99:b7:90:93:fe:fe:de:13:7c:d0:6c:9a:53:b2:40:f9:40:
14:41:eb:76:50:42:f5:ed:3a:08:83:2f:2d:a0:8d:54:d7:aa:
e3:7e:3e:8c:85:d6:18:31:a8:84:6e:68:31:4c:fd:cf:ef:04:
c2:55:d0:e8:8a:e0:21:87:96:d5:df:18:2a:41:78:27:3e:d7:
25:57:d6:ca:21:03:2d:11:81:44:62:c6:93:f9:34:c6:67:b6:
e0:81:e6:f1:a5:91:fb:82:d2:6c:fe:df:af:5d:c8:99:26:16:
d4:c9:a6:72:a0:ee:84:45:b1:f4:43:51:ad:d3:df:74:8d:07:
cc:73:01:09:d8:16:21:58:04:14:f7:d3:98:d3:54:b5:ae:df:
a5:92:a2:49:01:57:ff:d6:d3:e2:17:04:64:ff:b9:85:ba:9a:
41:81:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:59 2026 by rpki-client