Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier: FMD12FOcb1mR1OxSKYT4zOSorGs6g5QllCZ0aJfKEv0=
Subject key identifier: CA:A1:2C:BA:83:F1:1E:85:C2:B0:7D:96:E2:65:A9:9C:46:77:7F:2C
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 019D2BBBD83DAD0A43976572DE8C29E00F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number: 132F
Signing time: Thu 26 Mar 2026 20:00:23 +0000
Manifest this update: Thu 26 Mar 2026 20:00:23 +0000
Manifest next update: Fri 27 Mar 2026 20:00:23 +0000
Files and hashes: 1: Dcx8h4CiQxGZDM9GxaHxjohozgs.roa (hash: JQ8uIK2vUMKNWaAjfc0A3/ZC5vK96qHNS+69HHvjW+s=)
2: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: EePy5fghMLgc4ubBzi4pdgR/Kt4cX5KV+hKD8wdhHVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bb:d8:3d:ad:0a:43:97:65:72:de:8c:29:e0:0f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Mar 26 20:00:23 2026 GMT
Not After : Mar 27 20:00:23 2026 GMT
Subject: CN=caa12cba83f11e85c2b07d96e265a99c46777f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:a5:a1:66:f3:1c:52:45:90:51:bc:8e:b5:
6c:9d:a1:83:f0:07:ab:ad:c2:3d:b1:14:ed:4d:83:
84:ef:ee:50:d5:a0:6d:cd:c0:47:05:b3:f5:03:5b:
4e:93:23:d3:a0:94:7e:35:dc:bf:72:20:ae:5c:9e:
a3:c2:db:a9:e0:df:50:62:c2:80:e8:b4:9e:cf:f3:
f9:05:62:b4:89:5e:c3:0f:33:bf:49:7d:0a:02:be:
bb:34:26:30:fe:b9:75:25:90:61:ed:93:e2:d3:72:
45:ec:7c:6d:0e:9e:ea:e8:62:34:60:02:b1:bc:83:
7e:42:ae:91:8c:79:d2:28:02:3e:cc:a2:e3:89:ee:
0f:cf:83:06:6a:23:1d:2a:45:b9:b3:72:e7:6c:10:
15:c0:33:50:13:ad:e1:8c:ae:e3:14:be:f0:6e:57:
07:41:3a:e1:11:97:f1:39:43:04:23:2d:da:7c:1a:
c6:c7:9f:b1:d3:fe:29:24:14:29:f8:05:ba:13:c9:
3d:0c:a9:a5:1e:91:a6:87:12:9e:62:4a:73:0a:68:
e6:13:7c:6a:4c:26:8d:f5:75:7f:26:3d:77:74:dc:
91:90:ed:c3:d1:46:7b:e3:d6:73:b1:da:2e:c2:5c:
f9:ea:04:27:0c:48:b5:13:e2:c2:a8:14:14:d3:38:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:2C:BA:83:F1:1E:85:C2:B0:7D:96:E2:65:A9:9C:46:77:7F:2C
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ec:11:a1:cb:ad:c2:ac:ec:a1:d0:d4:39:e8:59:08:26:14:
9d:69:36:f2:9a:61:3e:95:a4:c7:e5:b0:31:bb:b8:eb:9c:68:
43:61:37:54:60:9e:6b:b6:2a:f4:e2:4c:6b:fd:56:3c:aa:d8:
4c:17:89:f5:06:53:ec:20:4e:44:a2:b0:50:d7:3e:a7:f7:3f:
c7:70:cb:d2:a0:66:17:3f:eb:3f:f1:0a:b5:42:d9:de:d3:b3:
97:cd:76:23:fc:ef:31:23:e1:94:dc:f5:88:95:3b:1a:4e:a5:
dc:af:00:86:4f:12:8e:3a:88:74:3b:41:9a:eb:6f:7b:bc:0d:
cc:8a:89:57:dd:a4:c5:74:b6:57:1e:58:81:7c:51:58:36:81:
e4:f3:44:d6:23:0e:6b:56:82:d7:37:28:46:8b:0a:db:22:c9:
17:a0:5e:4c:35:4a:23:45:f1:8e:ef:ff:a6:e6:11:19:db:4b:
96:f4:65:a3:40:7f:09:22:d7:31:c1:bf:a8:89:99:1a:79:d7:
86:2c:62:6f:fa:cc:ff:27:3e:3c:98:8c:d3:e9:0b:d2:ec:00:
7e:5f:59:53:b8:35:66:bf:a7:8a:4b:38:4c:a9:fa:eb:ae:d6:
35:0d:47:eb:0f:eb:5c:93:d4:9a:cd:25:0e:46:7e:8e:6e:fd:
f0:fd:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:22 2026 by rpki-client