Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: 6bnBLhS9Dw8acFVUzet9rEtjtHZUVseWH69hVXfmhrk=
Subject key identifier: B7:EA:17:8C:B1:D5:D9:87:3B:8A:44:99:40:A3:CA:F6:A0:04:68:FF
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 019D27DFBBB7D5BAD3ABCB4D1E5A74A19E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:07 +0000
Manifest this update: Thu 26 Mar 2026 02:01:07 +0000
Manifest next update: Fri 27 Mar 2026 02:01:07 +0000
Files and hashes: 1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: +c/UdTD21WwrsTLICuox9ZVwwcPc8zOkIq03RKj3+wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bb:b7:d5:ba:d3:ab:cb:4d:1e:5a:74:a1:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Mar 26 02:01:07 2026 GMT
Not After : Mar 27 02:01:07 2026 GMT
Subject: CN=b7ea178cb1d5d9873b8a449940a3caf6a00468ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:8d:9c:cc:9b:89:06:ab:e0:aa:79:5a:b9:
67:28:51:e1:1e:4c:37:04:aa:9a:87:8c:68:ef:fb:
41:03:56:20:1f:03:30:03:f7:83:89:2a:a6:a9:fb:
7f:64:ef:df:47:b8:5d:4d:69:00:92:5d:0c:41:83:
fc:99:9c:8c:2a:67:5b:25:61:18:40:dc:01:77:30:
5b:4f:3e:32:8a:37:d3:8a:12:d1:cd:74:b4:05:b9:
88:14:e7:fc:93:6f:f3:19:1e:6a:5a:83:58:fe:a4:
ee:cf:70:2b:e2:47:59:62:c6:64:54:5f:2c:de:c3:
90:a8:d8:e1:37:fe:4b:82:31:ce:14:14:bb:d2:99:
bf:f1:17:66:42:23:5d:2b:c3:b8:f0:1b:21:a6:83:
da:57:ce:63:f1:4f:9b:33:24:47:52:c7:2b:6f:a7:
c9:50:a4:d3:ba:49:8a:66:36:24:40:d3:d9:a5:f8:
e8:d9:e1:a9:09:35:84:67:d5:52:8e:ae:75:92:cb:
f9:03:b8:8c:ac:29:04:56:3f:53:39:d5:01:01:3d:
b1:b6:d2:f7:72:20:2b:db:25:d2:34:a3:5d:8b:88:
64:45:87:5c:a0:88:f6:d2:d4:d3:01:9c:15:42:9f:
6d:3f:c2:1d:30:cc:cd:0c:25:37:6d:ef:88:65:10:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EA:17:8C:B1:D5:D9:87:3B:8A:44:99:40:A3:CA:F6:A0:04:68:FF
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:1d:c9:f4:4b:ef:61:0c:86:f2:f3:78:4d:3d:fc:4e:65:
45:71:1e:c3:7b:8d:62:64:e7:45:10:66:80:dd:97:84:39:43:
c6:a7:11:06:13:49:7e:5e:1f:59:c4:c0:5f:f8:8f:81:c0:2a:
3d:e1:ef:93:b7:16:cc:55:d2:c2:dd:24:7c:a8:a8:9f:58:e9:
69:d9:c7:a9:7d:79:36:a6:62:80:5d:08:b4:33:aa:d5:4c:9e:
c4:1e:30:58:fb:94:c4:b6:47:ba:5f:1c:2b:f6:50:ba:cc:dc:
87:cb:90:83:8f:5a:b9:5e:0d:82:31:15:22:aa:fb:1d:c9:d0:
c8:cd:12:b8:a9:1e:ae:73:31:65:8e:99:d2:4f:d9:c1:b6:0d:
4a:af:9d:7f:aa:e6:6f:f0:58:6d:4d:15:13:82:05:fb:8c:f7:
5f:c3:ff:b9:dc:e9:49:58:d5:ce:86:f0:4a:37:a1:a9:5c:07:
18:d3:27:56:7e:ce:95:37:e2:66:c8:78:94:08:d4:06:c0:e0:
40:00:a2:64:af:ce:02:01:f3:f6:47:68:b0:47:38:f3:f0:5e:
cb:61:9d:a5:6c:2b:09:71:c2:45:2e:39:a2:b8:5b:05:9e:56:
55:b4:be:0d:6c:2c:32:c4:5e:d6:8a:b3:81:9e:bd:85:8d:02:
f8:cc:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:17 2026 by rpki-client