Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File: jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier: 7ZwIBzhrtF2e03Nlo1BTTDZO/XHaIKex5BhSNSGh9iA=
Subject key identifier: 44:27:E3:C0:76:43:6B:03:4F:5E:C8:F7:82:28:7C:4F:A6:BA:08:90
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 019D2A236CCDB19F3814499F37DA99E65AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number: 1474
Signing time: Thu 26 Mar 2026 12:34:17 +0000
Manifest this update: Thu 26 Mar 2026 12:34:17 +0000
Manifest next update: Fri 27 Mar 2026 12:34:17 +0000
Files and hashes: 1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
2: 1-VHrB2ftFgG1R7rW9e965VrbOgs.roa (hash: e22B3XhTvj7ENfOUB059RvQemhyhAgeNVsH6G1GtXTY=)
3: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=)
4: 7YQDZucpbsxyTF1dG-WSopyYoD4.roa (hash: AZ+p2vdqGYxqTemz9H7WmkXG8urZ++JrwB5Ra4yemqo=)
5: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=)
6: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
7: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
8: iVJ08SxG4feimgPWve7FHmKvN14.roa (hash: zFhC/XqvQ6mooyGtsx8PFTYFm28tXJQuLsuuvmNHdsY=)
9: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: 155beKajIp7WY6WfN2VhG+bSqOP5GZB8MCmrUTyeoXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:23:6c:cd:b1:9f:38:14:49:9f:37:da:99:e6:5a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Mar 26 12:34:17 2026 GMT
Not After : Mar 27 12:34:17 2026 GMT
Subject: CN=4427e3c076436b034f5ec8f782287c4fa6ba0890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:ac:23:c8:d2:19:cd:bf:20:d6:28:15:a0:
ec:a6:90:9f:fc:21:d3:7d:e8:98:ad:1b:44:ad:77:
84:aa:af:3b:87:36:f6:e6:f1:e7:cf:f3:51:de:82:
c5:1d:b4:4f:3b:55:ed:e1:46:90:42:a8:64:34:ba:
4e:b2:8b:f8:96:08:85:c2:21:38:8e:41:46:d5:36:
91:eb:50:90:cf:c4:3e:7e:43:22:f9:6b:f2:68:01:
45:c1:2a:69:a3:b2:cb:96:ed:22:33:2e:c1:89:6c:
86:67:d8:72:71:68:20:00:27:5c:6c:1d:a3:4f:51:
f1:e3:6b:a3:6f:cb:dd:bd:6a:cd:75:d3:a0:46:80:
23:cb:9b:3d:bb:48:56:fa:94:29:06:09:b6:5b:15:
16:e2:fa:70:a7:49:2b:33:1f:ad:28:34:4b:85:90:
ae:ce:f2:1d:38:27:e8:46:97:56:60:93:0a:bd:29:
1c:38:7f:18:c4:86:9f:3c:86:b3:bc:0b:08:20:c6:
8c:a9:ce:ed:72:43:a1:b1:0e:94:b0:59:21:de:f6:
d8:d7:29:60:f3:2f:3f:bd:47:f2:b8:d2:f4:71:2d:
d3:44:b8:5a:dd:36:2b:5a:2f:82:a8:e0:48:22:08:
c8:b2:da:3f:93:15:dd:3a:90:b5:0e:18:05:ad:31:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:27:E3:C0:76:43:6B:03:4F:5E:C8:F7:82:28:7C:4F:A6:BA:08:90
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:3c:87:60:2a:e1:79:64:46:04:0e:b7:ec:44:e9:2e:2c:13:
fd:b9:f8:98:07:2a:67:d3:66:aa:1b:ed:5f:88:0d:60:9d:7c:
71:c3:02:f5:04:3e:da:d8:94:7c:63:fe:1a:75:bc:74:5e:af:
00:32:0f:f9:dd:7f:23:4b:39:dc:6f:87:0e:bf:a8:b0:75:02:
d2:bb:0a:87:77:49:60:bd:3b:29:79:b3:02:f2:a9:16:a9:6a:
d9:53:28:59:a9:dc:cc:e1:af:fc:70:f8:7f:f0:cd:c3:86:15:
61:1c:6d:39:2b:b8:2c:90:0f:aa:dc:7c:ba:5f:77:44:d3:05:
e8:5a:94:bf:16:c4:81:7e:22:34:d5:1a:e5:ad:d4:15:64:22:
4a:b5:15:1f:10:9e:68:a2:85:27:54:ae:40:b7:10:19:0f:9b:
5f:45:05:99:18:f9:fd:28:9f:72:2c:0a:2e:96:18:de:44:38:
91:a5:f7:af:86:1a:e4:4f:85:cb:b0:fb:68:af:e2:ab:59:87:
a7:8c:44:52:90:5d:09:6e:96:62:04:76:b1:48:7d:e5:e8:7c:
64:7f:6a:a7:02:db:f2:fd:4f:f7:89:04:8a:89:06:da:4f:86:
ce:7b:ae:c5:da:fb:7b:2f:30:9e:fe:89:e7:98:34:6c:bd:95:
82:b6:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:14 2026 by rpki-client