Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: jy6a++8rwoh1G9JvrY/7XVHJk2KjWrSZLeUwAWyuW7s=
Subject key identifier: 56:35:03:B8:D1:F5:1D:F9:4B:E7:72:18:84:1B:8C:66:13:9F:65:D3
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 019D2584593F1BFE1DF63C25F3DFBC463C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 0896
Signing time: Wed 25 Mar 2026 15:02:03 +0000
Manifest this update: Wed 25 Mar 2026 15:02:03 +0000
Manifest next update: Thu 26 Mar 2026 15:02:03 +0000
Files and hashes: 1: ipAlkEERFhJ7wdi8m5TVevOAkTw.roa (hash: s7HymddxB0NNJppMsBgQxwPpv2YW4WxDcjXkGbEO72c=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: RUOHvfZ2wb3L/sx6ucrhBoc0L6BDSENhdOP1ZTswUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:59:3f:1b:fe:1d:f6:3c:25:f3:df:bc:46:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Mar 25 15:02:03 2026 GMT
Not After : Mar 26 15:02:03 2026 GMT
Subject: CN=563503b8d1f51df94be77218841b8c66139f65d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:f1:03:ef:83:72:9d:54:f8:fe:6b:be:a9:
54:8e:0f:65:c9:16:7c:a4:57:1b:00:25:86:df:61:
71:28:cd:5f:54:cc:27:9e:85:9e:1f:fc:08:50:a0:
50:49:cc:93:0a:aa:6c:bc:c4:cb:e9:16:3b:ac:6d:
03:40:62:44:1c:ff:14:5e:db:f0:c9:f7:6d:f9:fc:
c1:dd:a2:dd:df:de:d2:fb:54:b5:87:43:9c:ed:b1:
c1:db:f7:7f:2f:69:c6:71:c1:10:82:81:a9:c8:11:
10:66:ba:65:c2:c8:4b:85:52:ea:3c:19:42:fb:86:
13:15:13:65:3b:fc:2e:40:f0:ff:e6:81:17:12:40:
2c:2c:52:41:b7:85:3d:b8:24:2a:ff:11:1e:85:c0:
a1:63:88:ba:be:50:db:f1:62:cc:ea:0e:54:a4:40:
48:67:82:8e:5f:fe:8f:be:e4:4f:88:02:94:ea:ae:
11:39:8b:82:1c:6b:13:7b:34:43:cd:4a:9b:03:44:
aa:25:14:28:c0:35:4b:b3:0f:19:22:77:26:82:d7:
8e:1b:8e:0d:09:ca:39:b0:4d:94:fb:ca:84:28:a8:
b2:c2:48:4c:72:f4:1a:14:90:c5:9c:08:e1:61:3f:
3e:e3:1f:55:ab:bc:1a:8a:18:f4:10:4e:61:77:71:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:03:B8:D1:F5:1D:F9:4B:E7:72:18:84:1B:8C:66:13:9F:65:D3
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4a:33:d7:a7:1c:1d:b6:08:02:4a:25:5d:ce:9a:92:29:ed:
a8:16:c2:13:a1:55:b5:95:c3:fc:a1:6b:fe:ab:68:79:a1:b4:
67:9e:44:9a:9d:33:3f:42:58:39:17:80:0c:8a:fd:6b:49:45:
42:e5:3a:7f:e1:ba:03:d5:bb:26:e7:51:d6:01:f8:15:aa:47:
a5:cf:f9:54:83:05:56:5b:60:f1:da:b0:24:31:f9:88:74:83:
ca:0f:8f:4c:e6:56:ba:64:fe:ba:2b:42:b9:7f:27:11:55:2b:
fe:be:b2:a2:6b:e5:83:52:aa:b2:2f:ed:8a:a6:55:43:30:03:
57:c4:5a:c1:f8:64:9c:2b:21:91:a5:0e:e9:b6:c7:cf:cf:cc:
cf:00:38:4e:b6:5a:55:b2:d2:5e:a4:b2:a6:83:f2:52:fd:92:
bf:0e:ac:9c:1d:cb:e7:f5:4c:ac:35:0f:0e:93:4b:0f:1f:e4:
8b:9b:37:df:ab:f7:72:6c:8f:04:1d:29:64:22:bb:97:36:22:
cf:96:25:a6:1e:3c:14:4b:d9:24:6e:20:56:3c:26:32:78:f2:
c4:90:d9:c5:bf:15:9a:54:2a:68:b4:3e:35:d0:7c:5f:70:95:
45:74:2f:22:0d:64:6a:57:d7:55:58:4d:fd:11:36:28:b4:40:
e2:af:51:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:01 2026 by rpki-client