Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: 5jhKBS0gU9phf6vCqYrTw8xr2pVAD2Me4veqdfA1n1M=
Subject key identifier: 6D:E8:99:08:A6:40:EF:6E:CE:88:89:91:AD:BB:E0:10:1F:3A:48:DD
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 019D27DF6DE7FF6342E55984F93E2D319286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 173B
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: iufQHL1rrp5XzvULdBkr0SPCCu8.roa (hash: o7Un0OaNswzLrJGI0RBqiK6v18+B62LAaKhklEYedo4=)
2: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: fh3jaMLhdRd5zdmh29kKG57K/UZR4ZdVbbkirEtQB8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6d:e7:ff:63:42:e5:59:84:f9:3e:2d:31:92:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=6de89908a640ef6ece888991adbbe0101f3a48dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:63:ab:65:d5:5b:c1:3b:cc:03:fc:74:0c:
ee:67:15:22:0d:a2:f0:89:06:9d:f9:be:2d:ab:c2:
91:b2:b1:26:ff:d4:25:d2:04:1e:2a:3e:a8:02:d3:
b9:f0:a7:10:48:f1:e5:53:da:9b:aa:26:34:e6:49:
14:d1:08:f4:f2:d9:23:00:01:54:77:49:eb:ca:95:
7b:fb:74:13:7c:a3:11:d8:b3:8e:7c:c1:1c:d1:f9:
cf:c6:8b:ce:1b:d1:87:b5:a4:61:c7:23:04:e0:51:
f8:2a:82:8a:6e:1c:8d:02:ee:00:05:37:83:a1:7f:
62:73:95:67:35:d5:f4:f0:0d:9b:42:90:07:fb:61:
90:a1:7c:cb:e4:e6:93:b8:7e:30:fd:51:6c:e5:bf:
ab:a4:ac:b4:8b:08:4d:4f:dd:ab:2a:57:3c:9f:13:
33:74:66:38:e4:17:a7:9c:df:77:93:18:af:0e:2f:
c1:40:a1:ca:a0:61:41:d0:48:96:6f:6b:c8:f7:89:
4b:f9:f7:93:8f:8d:e7:89:63:31:99:33:86:92:26:
51:a7:68:64:cf:f2:64:1f:72:92:5b:0b:da:95:27:
80:2a:1c:01:b5:af:59:fb:83:b4:2b:3e:d7:43:3e:
77:3a:33:00:ed:db:21:16:a1:ba:ce:79:bd:10:8b:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:99:08:A6:40:EF:6E:CE:88:89:91:AD:BB:E0:10:1F:3A:48:DD
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f3:ee:17:64:ca:5c:ef:cb:33:57:d8:98:6e:a2:c4:a4:c1:
5e:d9:ed:3a:ea:e9:5f:43:ba:2b:f6:df:d9:7c:8d:6b:eb:1e:
64:5a:23:46:5f:fc:b1:52:3e:3d:3d:f9:1d:58:19:d0:3d:ca:
d5:68:5f:f0:8d:42:d7:3e:df:d1:82:ec:ea:eb:c8:e2:8e:ab:
3d:b9:1a:41:d7:b8:22:73:39:79:5f:25:61:76:00:54:58:11:
e8:ab:c3:8a:44:a5:0a:d2:e5:ba:26:0e:fc:13:8f:50:92:e1:
f5:9b:43:29:26:04:d4:08:ad:df:45:c0:85:d7:c7:db:ce:d3:
58:8e:ad:9d:3b:bf:72:2f:78:12:d4:9a:0f:be:51:42:6b:85:
7e:82:a8:98:d7:ef:65:5c:ee:a2:f9:ab:57:81:88:18:06:cc:
b4:5e:f5:fa:95:d0:15:56:02:9e:fe:9f:ef:c0:33:88:55:2f:
2f:a1:c7:65:b7:b2:b5:cc:a4:ad:34:58:5c:cb:16:df:a5:54:
b9:59:58:d6:49:f5:94:55:11:f0:ed:b4:87:2c:12:df:ff:62:
de:5a:6e:37:43:85:d8:a6:de:e6:3b:5b:4e:5b:3a:a3:77:49:
ee:44:21:3e:cb:b5:68:e0:75:14:be:eb:28:a6:70:57:25:b5:
d3:9d:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:52 2026 by rpki-client