Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: ce4YhfuPrcKpuunMhNLEg6S1nuR+PfD1bRuFUh6O2vI=
Subject key identifier: 80:C9:06:86:8D:32:8E:4B:1E:23:FC:15:D3:03:44:73:EC:0C:10:3F
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 019D25BA8AE61396085CF83EAB3A845C77CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0D04
Signing time: Wed 25 Mar 2026 16:01:15 +0000
Manifest this update: Wed 25 Mar 2026 16:01:15 +0000
Manifest next update: Thu 26 Mar 2026 16:01:15 +0000
Files and hashes: 1: UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa (hash: wMobn9EgqRdgXS7vAj6osPvNRe/uCjfH5YvFicmgWAM=)
2: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: V2XKBzTibuz0bvX9G+fS4bBmP6GOsOJ8q3bGooPp6xM=)
3: krbPjQ7dV78artLAJHZH9VRMSb4.roa (hash: DfhzBCZr3lEjUY/BpGX15//8G6kbI+qsFYcc/tJsimw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8a:e6:13:96:08:5c:f8:3e:ab:3a:84:5c:77:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Mar 25 16:01:15 2026 GMT
Not After : Mar 26 16:01:15 2026 GMT
Subject: CN=80c906868d328e4b1e23fc15d3034473ec0c103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:41:49:50:d0:d4:c6:ab:52:2b:9c:92:84:
f4:ee:43:d4:3b:a7:e2:a2:e5:7c:31:2f:0b:53:66:
e3:49:56:b9:bb:12:e3:fa:d9:53:82:ad:ea:17:4b:
82:25:70:1d:d3:78:1c:e8:4c:65:3e:b2:1c:59:b5:
43:7a:03:ad:69:da:a2:c7:d8:7e:c5:cf:9d:a0:b4:
04:6a:8a:89:a4:90:d5:da:5c:19:4d:f7:4c:f6:c5:
2d:0a:c9:86:0b:c4:a3:3a:11:21:2c:cd:06:60:33:
92:a2:f0:fb:76:be:af:5b:65:91:5a:31:de:29:99:
26:92:fb:0b:85:ca:84:52:68:2d:f4:8b:6f:3d:ce:
f4:a5:b1:27:57:63:66:2a:e8:9b:5d:b9:fe:c4:46:
00:1c:d3:72:71:51:d4:ea:8f:db:62:dc:07:c3:be:
ba:a7:36:fc:be:13:3c:4f:75:b1:4c:44:a8:ee:f2:
a3:7a:43:b4:07:d0:74:ae:f9:9b:44:59:62:68:af:
1e:50:be:ea:51:74:59:21:2c:6d:0d:a2:df:8c:3c:
6a:03:96:e1:e6:c1:4b:23:6c:99:34:61:05:ab:ff:
31:0e:b6:25:0c:de:0a:ad:ad:84:bc:13:75:21:66:
54:9d:82:da:3e:10:51:09:bc:b8:ee:3e:54:b3:4f:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:06:86:8D:32:8E:4B:1E:23:FC:15:D3:03:44:73:EC:0C:10:3F
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ed:30:2e:c7:25:39:35:c4:5a:10:06:80:cb:b7:8d:df:81:
e2:85:5f:1e:dc:14:e9:d8:e1:f2:5c:f3:ad:83:09:8a:e9:02:
aa:05:29:65:52:1e:68:de:62:7e:4a:10:4a:a5:91:3a:8b:55:
45:8f:50:a4:40:72:d8:5c:67:83:50:9f:3a:78:52:54:ce:b7:
78:be:70:71:0e:4a:05:25:d2:b7:15:22:07:1c:f1:80:3d:a5:
22:97:d5:03:1e:e1:15:cc:c0:cc:8b:8f:a2:3a:8a:13:5b:5c:
13:ef:a2:4b:35:cf:8e:ab:8f:95:b5:9c:7e:b6:59:dc:fc:c5:
cb:8a:75:d6:e8:62:bd:b4:b8:b0:18:04:df:cd:91:67:2b:71:
99:f9:4e:c4:9e:4d:a8:f7:6f:e9:6e:93:93:db:8c:77:7f:c6:
f7:4a:d1:d2:af:6d:04:70:e1:86:3f:41:58:7c:bd:61:8c:0a:
3c:72:b1:89:b0:5a:4e:8b:5e:68:bb:20:b3:2a:8d:86:de:e1:
3e:02:99:ac:2d:e4:52:5d:85:07:c9:e3:29:36:80:bd:1e:4a:
ae:b9:77:61:c1:4e:09:01:fd:7a:15:de:56:af:3c:86:09:b5:
1c:a7:93:24:88:65:ef:d9:65:b2:1c:67:d5:3c:db:b5:8e:3c:
30:07:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:58 2026 by rpki-client