Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: j4723XPBbJMBuKvHVDr5jbBtGOfCoEAIlfe1IP8PREo=
Subject key identifier: A6:2A:37:9D:15:3C:66:22:A2:BB:67:80:F4:C9:EB:C8:FE:F1:81:25
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 019D288438A8E61F75DBDA2B73A5F79F5C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 174C
Signing time: Thu 26 Mar 2026 05:00:46 +0000
Manifest this update: Thu 26 Mar 2026 05:00:46 +0000
Manifest next update: Fri 27 Mar 2026 05:00:46 +0000
Files and hashes: 1: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (hash: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ=)
2: _Q8Mb-3UvfMhIjv_xRaFDoLApBs.roa (hash: IHr0cgRLyfbFPNalDZLOfmKJvgcvrc9t828c9yf4EtU=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: 1LouLCwpyn1CXHdGUE5IPKRuEWamlBqo3/weC7Ey9w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:38:a8:e6:1f:75:db:da:2b:73:a5:f7:9f:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Mar 26 05:00:46 2026 GMT
Not After : Mar 27 05:00:46 2026 GMT
Subject: CN=a62a379d153c6622a2bb6780f4c9ebc8fef18125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:df:78:68:90:2d:7f:4a:6d:64:d8:0e:dd:
4b:89:29:df:0a:14:23:7c:52:8c:7a:ee:fd:3f:34:
c6:a2:a2:46:a0:8d:54:ed:34:05:94:11:93:be:82:
42:fd:1f:e3:20:fb:26:e4:21:a1:e0:76:36:ac:8d:
59:4c:40:2f:dc:05:65:1f:89:5c:3c:20:cf:82:fa:
5b:16:29:9a:ed:49:0b:54:7a:db:b8:60:2f:e8:b6:
31:35:93:2f:21:20:b0:6b:7a:0e:25:18:36:43:59:
f3:7e:be:b1:b6:60:3c:b6:93:37:77:a1:ae:1e:6e:
8b:15:1f:55:c6:0f:1a:85:91:bb:ee:c0:37:01:8c:
39:7c:f4:69:ff:81:40:15:4f:3d:9a:a9:25:be:77:
e1:4b:a0:d2:b7:9c:a0:99:da:17:f6:54:bd:82:c3:
ab:6f:ce:0a:69:db:f4:f2:cc:d9:89:2b:ad:6b:70:
05:c6:ab:e7:c5:e1:c6:7c:3d:86:26:f7:84:9d:b9:
5f:4a:5a:81:2b:8a:97:cc:3e:5c:c1:7f:ab:fe:ef:
bd:2e:a2:24:40:8f:0b:4f:c7:94:64:11:35:8d:be:
05:c9:cc:0d:7b:20:9a:5d:f5:bb:4f:f0:a9:22:46:
4a:b7:44:f9:66:8e:53:20:1c:88:65:a6:e4:dd:0e:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2A:37:9D:15:3C:66:22:A2:BB:67:80:F4:C9:EB:C8:FE:F1:81:25
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:dd:e0:6b:9a:9d:63:ee:20:c7:fd:7b:c4:c6:b6:c9:85:1c:
17:93:b5:0f:6a:52:51:85:ce:b4:90:06:b4:70:4d:59:e5:0b:
da:0a:7d:bd:93:df:77:45:5b:47:a0:55:1f:ec:93:56:b7:79:
c5:31:50:27:7b:82:0f:c9:d8:ac:06:76:bc:a2:2c:41:ea:a5:
da:15:90:a3:d5:a1:91:ca:cb:a8:60:5d:fb:0c:b0:4f:48:b9:
93:d6:70:96:0a:4a:59:64:1b:dc:10:50:93:e5:16:22:5a:e9:
8b:61:09:56:82:f6:71:04:a3:af:51:15:aa:93:c5:d5:ec:54:
41:96:f4:8c:77:1c:2e:9f:bf:33:83:57:12:b1:61:a7:1f:68:
13:35:d2:d3:e4:04:e2:48:83:b9:16:19:99:cd:25:e3:8a:f4:
7e:4d:5a:5b:4c:bf:c3:92:a4:c6:c5:de:cc:c4:dd:a3:be:5a:
c2:25:93:9b:9a:a2:9e:b9:9e:49:d6:a6:c1:2d:70:57:df:d0:
3c:7a:a6:b3:b1:3e:9e:d3:ac:2d:27:3e:87:86:3d:a9:e3:3c:
c7:f1:38:61:0f:73:89:17:76:ef:99:6a:86:00:1d:28:6f:3d:
56:b3:9e:32:98:4c:39:d1:f9:38:47:6d:47:76:45:18:66:9a:
ab:45:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:58 2026 by rpki-client