Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
File: j493R7eqBqdUJRZiDt45nQHlx-Q.mft (raw, json)
Hash identifier: QvyrAIEMnAFSpbqxSP59wifcaGRr6JxVaxPQAehvuec=
Subject key identifier: D8:98:EB:7B:C0:F7:AF:3C:13:0E:A5:77:B6:F3:2D:A1:FD:8D:03:8E
Authority key identifier: 8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4
Certificate issuer: /CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4
Certificate serial: 019D27728CE53297D8BC38DA7BC8B6B6FF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
Manifest number: 01C5
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: ggsIrEG_pjBN7NymXoDR3lMKSmc.roa (hash: NRoN77G1sKo2JMNbfCRILKnaLnywaXx2abNeVRqQfhI=)
2: j493R7eqBqdUJRZiDt45nQHlx-Q.crl (hash: lUyZqPf72yl0A5sLn6fxm1j5cNobltxXPkuP0ipJbIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8c:e5:32:97:d8:bc:38:da:7b:c8:b6:b6:ff:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=d898eb7bc0f7af3c130ea577b6f32da1fd8d038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:6a:35:84:f7:fd:4a:27:62:3a:e4:f4:1f:
65:6c:e6:a2:e1:43:47:7b:1c:cc:20:67:9f:44:7b:
5b:5e:33:9d:95:33:7f:a6:72:4e:be:b2:06:a6:13:
d3:4a:ea:31:1b:bb:fa:b5:5d:52:3f:52:06:0c:65:
36:2a:09:fb:20:1e:19:0d:4f:1b:20:5b:39:6b:e7:
df:f9:6e:33:60:cf:7d:4d:56:26:bb:e9:8b:ea:66:
d2:10:07:24:ef:4c:3a:6f:36:ad:71:76:b7:6b:23:
d2:83:36:ce:84:05:eb:8d:ca:f4:fe:0f:75:53:24:
38:66:a1:40:8c:4a:e8:5c:45:2a:97:89:59:22:93:
b8:7f:9b:24:e2:38:11:4a:b4:b1:27:a6:9e:f3:57:
5a:54:7c:e5:b5:ed:20:54:4b:fa:32:03:f6:b1:a6:
0c:8e:d0:c3:3c:52:48:f3:45:72:b7:c3:e2:29:d2:
48:46:d6:db:7c:ac:f2:83:db:3a:cc:d3:11:1e:93:
b9:f8:73:34:43:a2:46:75:65:1f:b0:82:0c:49:fd:
ad:42:f2:04:48:94:2d:e0:72:a6:d8:81:5d:c9:1b:
2a:e7:4b:da:4b:ec:f4:9c:7e:fb:61:59:ec:94:fa:
f1:01:e6:d1:f1:09:e0:79:3b:cd:94:15:51:bd:c3:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:98:EB:7B:C0:F7:AF:3C:13:0E:A5:77:B6:F3:2D:A1:FD:8D:03:8E
X509v3 Authority Key Identifier:
keyid:8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5b:89:91:87:ad:54:ca:22:56:9c:f8:41:f0:99:8c:1c:6d:
f2:f7:c5:a2:10:32:bf:d2:6f:1f:7e:12:ce:dc:fa:a7:7c:00:
3d:92:f1:e9:34:bb:7f:33:03:3b:19:ad:7a:22:cb:52:9d:b8:
7e:06:d8:2f:4e:48:46:f4:28:46:8e:10:9e:fa:e1:65:24:43:
a7:7d:5f:9e:95:bb:95:c3:9c:f8:e1:32:64:cc:2e:ed:9c:d7:
bd:67:55:91:87:a1:b5:16:46:35:8f:6e:ac:c3:6e:2f:a2:d3:
83:3b:4b:ef:8b:55:4f:b8:7d:90:ce:c0:c4:1d:7f:1b:31:f7:
0b:5e:86:13:66:b7:40:78:c4:83:63:0c:6b:81:25:70:6e:19:
dc:12:52:29:bf:da:27:5e:95:dc:5b:0f:b1:5a:89:ae:43:1f:
45:15:37:5e:52:fd:c4:37:4b:27:de:79:71:1b:4d:39:8c:ea:
ea:58:f7:65:8e:73:50:ab:a0:21:f3:d4:3d:d0:f0:d9:59:6f:
ed:e2:5a:0b:56:7c:ac:11:79:62:de:e9:3c:f0:0a:59:a8:72:
16:40:6e:7e:d0:b9:8a:60:be:d3:ea:61:6b:72:fb:f7:5d:04:
b0:41:a4:fe:f9:9b:5c:c3:b8:e9:a7:be:3d:d9:b2:b2:41:e1:
29:21:87:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:54:25 2026 by rpki-client