Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: bLp/ytZpUgePNQ0JT4qG10LXe7Olwls4FHHrgmxYge0=
Subject key identifier: 1C:53:07:09:E1:C9:EE:24:C0:04:82:B4:E9:87:E5:3A:98:7C:64:34
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 019D25F210B412F762CF8DCD7B4DACA2ED53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 1195
Signing time: Wed 25 Mar 2026 17:01:54 +0000
Manifest this update: Wed 25 Mar 2026 17:01:54 +0000
Manifest next update: Thu 26 Mar 2026 17:01:54 +0000
Files and hashes: 1: mI6oY4Lnet6WkWSB7D2a3UmqXGA.roa (hash: 0KqnfYhvhDCdOS8nOcazqklOk+TkEMwWsm8QT9vs9ws=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: I9jMTE3JuFM3XyNkpEtfKqzZfcCjUXKRDSVclIQffcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:10:b4:12:f7:62:cf:8d:cd:7b:4d:ac:a2:ed:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Mar 25 17:01:54 2026 GMT
Not After : Mar 26 17:01:54 2026 GMT
Subject: CN=1c530709e1c9ee24c00482b4e987e53a987c6434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:b0:57:6c:34:94:d0:3b:2b:a7:1c:3a:39:
2b:1b:64:08:cb:b5:7f:5a:55:38:1c:e5:7d:be:33:
c4:90:b5:6a:e0:50:b8:2f:bf:7a:b4:c1:dd:b3:60:
00:ac:21:f0:07:9f:02:3b:aa:51:e3:25:e5:cc:62:
ef:d0:bf:4b:95:b4:72:92:8c:43:52:4d:56:df:d2:
d7:14:99:11:b0:f0:b3:75:80:d9:a7:48:c8:a2:99:
1b:bf:ee:17:fa:06:ec:10:37:29:fd:9b:e5:c9:cf:
71:4a:bb:95:b8:82:a5:44:52:8e:f1:a6:e3:0b:0d:
f4:bb:f0:66:ab:12:88:2b:93:79:48:5f:a4:9d:01:
f6:7e:d0:df:da:a4:5f:23:ac:e3:da:af:fa:ea:17:
32:32:a3:f0:81:1b:48:46:03:18:23:e3:08:c8:af:
91:71:e7:38:03:8b:e7:e4:9b:dc:06:42:64:3b:ed:
cd:2f:ca:8b:c2:5a:ff:76:e3:5d:af:c3:08:96:e4:
d3:58:48:7b:91:dd:02:91:c6:5e:5f:f0:52:11:14:
61:ec:1b:04:05:33:02:17:87:66:e9:7f:a8:7d:f4:
67:cd:5b:c0:37:47:c2:76:1e:bd:5d:0d:6b:c0:be:
1f:b8:24:4b:5d:04:11:d9:e5:1e:c5:a3:e6:68:9e:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:53:07:09:E1:C9:EE:24:C0:04:82:B4:E9:87:E5:3A:98:7C:64:34
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:86:be:58:14:45:51:06:b6:e6:05:54:95:2f:5e:45:00:e0:
53:4f:4a:82:6c:63:78:e9:f7:cf:fd:3b:6c:be:81:a3:0c:99:
9e:5e:0a:1e:a6:23:b4:2d:90:70:71:11:f2:c7:51:ef:07:9c:
45:82:5f:4e:ee:b8:fb:8a:a8:d8:04:53:96:d1:df:22:44:da:
94:3a:6e:a4:00:b7:59:0e:d4:5e:30:c9:4e:10:69:8a:b2:14:
a2:22:9e:a2:17:30:22:a5:ec:74:ff:2c:6b:dc:79:e6:80:c4:
80:26:9d:80:8c:44:07:81:5c:34:2f:0b:f8:c3:35:f3:d9:8a:
8a:e3:5c:37:33:47:d7:f5:e9:ed:5f:4d:de:4e:e4:b2:f6:ae:
62:ae:9e:79:db:34:e9:10:84:dc:c0:4d:b5:f0:b5:41:9d:a7:
35:66:16:d6:1d:7b:e0:ec:c6:3d:4c:9a:0a:01:ea:7b:65:f3:
4f:27:c8:3f:dd:f9:d0:85:02:bf:db:e4:bd:39:2f:e6:18:61:
1f:10:e8:68:6f:92:2c:02:9d:15:8f:1f:f9:6c:d2:7a:1e:9b:
8c:51:a9:d0:13:6d:3e:31:3f:af:2a:29:e7:34:4e:59:3f:2d:
15:90:6a:06:fd:01:f1:62:85:1e:9f:ea:85:42:3a:ed:9e:71:
ce:e1:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:36 2026 by rpki-client