Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: D5ZWWOKmpK081tewa1dQf2t/MqMyZmYeb4WGxxxIcgY=
Subject key identifier: 44:9B:AB:64:C0:07:0C:D9:12:32:4C:8F:3B:C0:FD:A4:08:EA:E3:23
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 019D2772226D786873329C58E349C3A08F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: QF8uybwGJvFTI6zPZaEwMnyLJao.roa (hash: pGY0CFO2xra97YkiSL42DPsL5Et7lf+M4AGkIXR7mbM=)
2: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: I9Y+HjFKe+TTE/kYdFT20K8IwiRDUrws7J8UIheaFUg=)
3: sVQfoQUtytZsvgvmAfEIvvKahSg.roa (hash: bzMbXKVYhkySvKWCrR/MwrdgAwPkPzpxm3VIOmD3ao4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:22:6d:78:68:73:32:9c:58:e3:49:c3:a0:8f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=449bab64c0070cd912324c8f3bc0fda408eae323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:d2:06:7c:9b:7f:69:f4:5c:8c:b1:78:47:
f3:aa:2b:d8:27:90:59:97:bc:2d:81:8b:e3:46:0e:
dc:66:45:13:31:83:5f:8e:4c:93:bd:33:81:20:3b:
36:a0:f8:34:de:1f:f5:bf:5d:05:84:01:df:41:e8:
2c:b9:f7:33:ee:0e:69:8c:e0:54:2b:56:72:40:90:
73:44:bc:12:70:f9:45:68:4e:2b:2f:8c:83:e1:01:
44:92:f8:04:5a:88:ad:8c:c3:63:9d:6a:f4:c8:cd:
b2:d0:c2:b2:03:a6:55:5e:20:2a:52:da:9e:fe:42:
1e:13:e7:dc:2f:67:49:f7:5c:be:31:80:05:7b:f6:
56:be:8e:c3:c6:bc:7b:c7:a9:ac:b3:af:d8:93:16:
d0:7d:4b:c5:0f:84:94:a6:b8:e7:10:54:d9:d8:b6:
e4:c4:d5:7c:20:c2:2b:9d:5b:0f:bf:0a:c5:3b:47:
d0:55:a0:d4:fd:23:5c:c0:b7:43:41:a8:b5:f0:dc:
78:45:c0:64:15:fb:7a:32:8e:b0:e4:ef:d1:30:64:
fb:0d:03:65:d0:2a:96:18:f9:fb:e4:10:65:a0:c5:
80:da:fe:fd:81:ba:96:eb:22:24:34:b6:82:07:83:
24:bb:ae:2e:2c:d4:23:ac:90:11:74:06:d3:21:75:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:AB:64:C0:07:0C:D9:12:32:4C:8F:3B:C0:FD:A4:08:EA:E3:23
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b3:45:07:83:60:f2:a7:39:f0:91:8d:67:4f:fb:ed:4f:98:
83:41:bf:4f:4a:70:c2:81:64:b3:30:35:32:8a:4e:1a:fb:79:
eb:6a:5b:ac:e5:14:38:17:df:45:d1:cb:fe:8e:c5:9a:c3:68:
a6:85:05:88:8b:74:81:3b:f6:8e:67:8e:8f:ff:7b:f3:ed:58:
bf:74:99:65:a3:95:bc:2b:ff:45:53:58:78:67:9b:14:07:07:
2e:86:d4:e6:26:90:b0:c8:ed:ea:9d:60:27:71:58:a5:b0:ba:
50:95:d8:56:07:c5:2e:0b:d7:af:65:be:b0:3c:5e:51:42:39:
f7:ed:31:d0:3c:6a:62:1c:68:59:20:ba:ab:70:58:94:34:20:
77:9f:8d:eb:d1:49:6f:52:e8:04:96:68:8e:f6:5e:36:22:89:
98:f2:5f:f8:ad:be:be:ac:ac:9e:8d:f4:73:d3:ab:48:18:c0:
46:8c:dd:6b:2c:14:73:85:08:77:8c:db:8c:b3:b1:4d:0d:c6:
8c:48:9f:0a:e2:21:83:02:8d:4b:cf:c7:6c:4e:1f:fc:c6:98:
3d:7a:f7:d7:ed:e7:56:70:cd:06:16:ba:8e:84:73:e5:19:6c:
4e:a8:13:3e:b6:7a:7d:2a:42:59:d0:47:61:fb:a7:c6:1e:79:
36:ff:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:30 2026 by rpki-client