Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: c+nlxx+AH1GLKnacbGCqf40EfE6dxoMFs9vvmnLCOPU=
Subject key identifier: D9:F1:57:A1:7B:BF:A9:3B:08:E0:CF:6F:30:9E:A7:2C:07:19:9A:C6
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 019D277272F00B4E3DC6D4D91342FFB9EDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 0472
Signing time: Thu 26 Mar 2026 00:01:45 +0000
Manifest this update: Thu 26 Mar 2026 00:01:45 +0000
Manifest next update: Fri 27 Mar 2026 00:01:45 +0000
Files and hashes: 1: Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa (hash: arj2lz3m1CKLXQA+b+0nfQ4tgMR/lYV9tLqCCkGgt5s=)
2: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: uFPWy2P2M10C3i1S8uV9P+nLv7e0upJOeBn1A3bY7EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:72:f0:0b:4e:3d:c6:d4:d9:13:42:ff:b9:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Mar 26 00:01:45 2026 GMT
Not After : Mar 27 00:01:45 2026 GMT
Subject: CN=d9f157a17bbfa93b08e0cf6f309ea72c07199ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:a6:3e:b4:0e:d7:17:14:e8:e4:c2:7e:bb:
88:f9:4f:b4:71:f5:2f:76:66:cb:22:28:95:8b:c4:
bd:40:d1:32:ac:01:bf:d9:fa:d3:de:36:1d:c3:b6:
7a:fc:9f:1c:05:4f:b3:ff:8d:60:4a:58:a5:19:2c:
55:5a:f0:17:df:e3:7e:92:18:43:6c:ce:df:24:50:
bf:32:21:4e:c3:36:4d:c4:51:b5:05:06:52:e2:57:
ac:16:3a:7c:f5:c7:91:5c:6f:f4:0d:5d:1b:6a:38:
65:f8:be:4f:f4:d1:52:0b:98:f7:3f:57:08:9c:da:
f7:10:5e:62:5f:1d:5a:5d:05:27:8b:f0:40:44:4e:
c6:86:a7:ce:f9:fa:c7:14:bd:d8:6c:9a:df:c5:77:
82:52:e6:5e:99:5d:53:a9:a0:99:a2:96:0c:26:27:
ab:b0:a4:38:db:63:86:59:25:b2:05:65:f2:6e:4d:
f4:40:e2:a6:da:d9:43:e9:c3:59:ef:6c:28:fb:82:
fc:aa:b0:6d:45:93:5d:9c:4d:c9:0d:f1:9d:65:0a:
ef:c1:d9:50:42:88:09:8f:4a:1a:4e:75:d4:48:4e:
4a:9b:d7:02:cd:98:e9:61:15:68:aa:ed:67:8f:58:
71:c3:53:71:c9:d4:cc:37:c4:00:d1:c0:a0:98:d7:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:57:A1:7B:BF:A9:3B:08:E0:CF:6F:30:9E:A7:2C:07:19:9A:C6
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c6:a9:d6:a7:65:ad:a2:8c:e8:d6:07:c3:6d:c8:f9:a5:9e:
7b:dc:b0:5d:43:0a:65:30:6a:35:9a:1c:08:5c:fe:7e:75:c9:
88:15:d6:2b:2b:82:94:64:3f:63:f2:89:3b:37:d8:c0:7e:60:
e2:b6:bf:f8:9b:2a:63:74:44:fb:f2:aa:1b:99:e7:7c:1e:7a:
06:0e:2b:42:8c:6f:98:51:16:28:1b:7b:38:aa:2c:4b:ce:1f:
ef:2e:cf:c8:44:2c:3f:57:71:c9:56:c3:12:a3:30:37:4b:0b:
f6:e8:c2:39:96:b4:b0:3c:f0:f8:d5:1c:0e:96:61:45:c8:8e:
d3:6e:80:1b:78:88:9b:fd:8d:57:33:c5:d6:9d:0d:5f:df:f8:
b2:d4:5e:e9:1c:07:b4:81:f4:17:c9:0a:f9:48:c0:a0:5e:64:
b2:37:cc:3b:af:ba:93:40:79:1b:7f:d2:6f:18:29:54:5f:e0:
9f:82:09:ec:37:b8:de:8b:5d:e2:41:cc:f1:8a:d8:52:1e:a7:
77:af:47:d6:30:10:65:b9:df:d6:fa:23:2b:d9:a4:fb:a1:a0:
4e:d7:20:18:70:54:48:ae:de:1e:81:3e:cc:51:46:f9:75:f9:
ba:11:6a:ab:e7:2e:a7:3f:29:de:00:be:bb:b4:6a:3c:37:f3:
5a:79:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:41 2026 by rpki-client