Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier: MtCuNDQv1agJMHg+ACXrlw024Xmb60fR4OC0ylN26qc=
Subject key identifier: 6D:C1:93:BF:89:F6:EA:8C:D1:9C:54:D4:00:99:5C:46:CD:94:0B:F7
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 019D329B167450613DE7813EC6D14A78D518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number: 0F45
Signing time: Sat 28 Mar 2026 04:01:57 +0000
Manifest this update: Sat 28 Mar 2026 04:01:57 +0000
Manifest next update: Sun 29 Mar 2026 04:01:57 +0000
Files and hashes: 1: 3VHOGWRwmc9du8vgvTyHkD4whcQ.roa (hash: zfJOErgD6Xi0BNPu8uVtHESEfkX9qIYO5teB3ir0WRo=)
2: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: E6U2BdKeNLBHXkbDRCcC4dQ3AiI/vzOIZH7oJYEZQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9b:16:74:50:61:3d:e7:81:3e:c6:d1:4a:78:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: Mar 28 04:01:57 2026 GMT
Not After : Mar 29 04:01:57 2026 GMT
Subject: CN=6dc193bf89f6ea8cd19c54d400995c46cd940bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:3e:22:c7:4a:87:e2:b7:07:0a:64:af:a2:
2a:89:88:45:41:26:46:9f:f0:e8:c0:2d:65:d3:df:
dd:f3:33:79:98:d3:9c:50:92:ce:9d:9b:58:db:2d:
df:0e:28:39:28:29:4a:94:a6:d7:87:de:05:78:31:
fe:db:aa:33:68:84:43:8d:51:a6:04:d2:c7:49:29:
8d:2f:f2:e6:3d:60:20:41:03:54:14:8b:d0:fb:58:
8c:e0:5e:70:22:e2:13:2f:08:0a:43:10:39:94:21:
e7:9c:d1:02:92:a9:1d:da:30:76:55:40:99:5d:87:
8c:53:de:94:cc:9e:3a:97:fe:15:c2:11:fb:4b:67:
58:2e:04:f7:7a:a5:38:67:4f:53:00:a2:67:fe:27:
9c:80:3d:96:f1:6b:6c:27:4a:15:4e:61:07:0d:8f:
12:88:a7:cf:da:a5:8c:a0:32:97:cf:a7:b4:dc:b5:
e9:77:66:6d:a5:93:97:ea:25:61:3e:29:4d:c8:e7:
2c:27:1a:34:a6:1d:cc:a5:d1:cd:f5:ee:1d:f8:47:
3d:55:45:75:d8:a3:6f:96:d9:df:d1:11:1a:07:57:
8e:35:43:83:9e:74:50:8e:74:3b:58:9c:0c:cd:9d:
61:ee:cd:74:00:9a:c0:5b:01:ba:d8:a2:52:be:97:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C1:93:BF:89:F6:EA:8C:D1:9C:54:D4:00:99:5C:46:CD:94:0B:F7
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:34:dd:76:cc:0c:76:c4:a8:ed:16:86:0c:e6:f8:d5:15:ac:
a8:87:35:66:86:a0:57:5e:de:85:e5:48:bd:4f:a9:9c:b3:7e:
4b:10:c0:7f:30:98:0f:41:8c:6d:bf:c4:4e:1a:93:4f:4a:bd:
c5:1d:eb:c5:71:d4:fd:11:fb:e2:8a:bd:7d:b4:b9:02:ff:df:
33:b6:bc:39:87:d1:2c:e1:fa:54:6b:20:f7:a4:54:68:22:cf:
d4:59:9b:47:fa:52:a6:ed:ec:82:d3:9f:b9:7a:7b:61:54:72:
62:bf:a7:e6:a8:2c:e8:d4:14:b1:11:ad:9f:0f:c2:5d:8d:31:
32:5d:25:9f:87:25:32:79:d8:ef:9b:38:c7:8c:51:d3:4b:5d:
60:bc:56:51:24:8f:8e:b8:3c:dc:5d:cf:37:fa:43:51:33:8c:
27:06:e9:a1:be:c6:11:fc:a4:5c:7f:8e:51:33:44:f9:82:a1:
2e:d5:22:c0:44:21:66:e8:b4:6b:c9:71:22:48:b7:84:19:1c:
b1:c7:80:c8:8d:f9:a3:0c:2d:7b:b8:29:e4:46:d4:44:2a:20:
00:ae:22:08:90:45:65:71:04:f7:54:f2:bb:24:2b:5c:ff:91:
00:43:79:6d:10:6c:1f:e4:fb:8f:13:7f:a7:41:b0:49:68:9b:
63:cb:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:54 2026 by rpki-client