Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: KpgG+96Fy1M2WVgOLYOesCgvoFDV1nn4P6m8SoZ7+n0=
Subject key identifier: 29:AD:9F:3C:EF:21:6F:3A:3B:E0:1C:00:E2:0B:FE:C5:FB:B7:33:69
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019D265ED485A6CFE075C0A17553ACA259E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 0638
Signing time: Wed 25 Mar 2026 19:00:42 +0000
Manifest this update: Wed 25 Mar 2026 19:00:42 +0000
Manifest next update: Thu 26 Mar 2026 19:00:42 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: 0k0xZMVBKuxnM/UrM7O04HhgAkX5nLPqfjAFIpuIx9k=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d4:85:a6:cf:e0:75:c0:a1:75:53:ac:a2:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Mar 25 19:00:42 2026 GMT
Not After : Mar 26 19:00:42 2026 GMT
Subject: CN=29ad9f3cef216f3a3be01c00e20bfec5fbb73369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:7d:ba:39:03:5d:df:da:3f:54:59:f8:b5:
1a:44:da:2f:30:92:da:2f:46:fb:ec:68:e8:49:47:
e1:51:fa:fd:d2:df:c3:c6:2a:02:a7:b4:e9:53:66:
09:19:cb:f3:1b:cc:95:67:a0:9c:71:c6:e2:45:8c:
20:67:98:17:6e:a5:e2:a1:1e:cb:fd:ac:a9:44:b1:
c0:3a:df:6c:8a:d3:5b:04:d2:ba:c4:e3:01:a8:3f:
4e:3f:84:3d:dc:9c:7f:a6:0a:b7:cc:b5:99:10:db:
8d:15:ae:1c:83:48:e0:92:d7:b4:71:60:09:59:27:
10:e7:f0:db:d5:e3:d8:92:c6:e3:0c:10:20:33:90:
e5:bb:f3:8a:07:0f:cc:a8:94:0c:4c:a2:87:4d:20:
7c:54:4f:94:c8:2a:2b:f5:e8:a4:9d:83:60:9e:66:
99:1b:f7:b2:bd:ad:2d:b1:98:85:aa:0e:69:32:3c:
3f:3d:0e:79:5e:50:c2:05:82:23:d7:b7:91:f1:2e:
ef:15:57:07:cc:b3:9f:bf:31:cc:f5:1a:8d:70:81:
6f:09:7c:d0:9e:4e:ce:9c:2d:cb:6b:8c:b2:c9:41:
6a:a5:09:58:97:78:08:1e:d0:1c:f9:27:d9:ca:88:
71:32:97:fd:ff:f8:8d:a2:03:65:e6:cd:e6:6e:75:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:9F:3C:EF:21:6F:3A:3B:E0:1C:00:E2:0B:FE:C5:FB:B7:33:69
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:06:33:83:1a:0b:16:23:cb:04:97:8b:e6:f0:24:c2:ca:
bb:eb:d3:78:30:82:5e:61:9d:60:04:83:26:72:b3:a9:5a:84:
0f:c7:ad:7f:3f:c3:47:b2:2f:35:fe:ad:c4:8b:38:52:b4:5e:
54:62:09:93:3b:07:7e:86:71:c4:2b:82:38:d0:90:34:15:f8:
18:6b:c1:c3:32:08:47:0d:c6:c5:12:e1:aa:7e:e9:53:d4:23:
f5:1e:45:5d:72:8d:2e:18:de:15:ef:3b:5b:98:51:2b:1e:63:
fa:06:d2:bd:96:1c:18:3f:73:fd:e1:94:b9:7a:8d:1d:c3:ee:
63:97:b4:78:03:82:5b:0f:57:55:98:37:68:ef:b3:26:bd:54:
03:59:42:5a:5c:69:53:07:ef:89:51:69:f4:91:c1:0b:1d:14:
6b:f6:74:c3:2e:e3:e9:85:0e:83:97:5b:ef:8a:e6:31:78:e0:
37:e1:4b:1d:78:94:09:b7:ee:a4:70:b0:94:21:cf:3d:e6:65:
ec:82:20:06:7d:c0:e1:57:59:0f:74:24:b7:ac:33:fd:88:7c:
7e:1a:74:d9:cf:7a:a8:4e:28:21:0a:85:46:ed:9d:dc:fb:88:
0e:9e:0f:7b:5c:77:63:3c:e3:7a:9f:b5:11:f6:e7:f7:ca:33:
f8:61:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:27 2026 by rpki-client