Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: hiZvTnpt8FGhfN+qo2eQyN5DExVDnOOa1OybP1Fci30=
Subject key identifier: 72:C8:65:3C:96:0F:76:9F:A7:A7:D0:78:B7:54:1A:2A:47:0F:68:13
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 019D284D4BAD56D44D94FE106541A90B33E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 04:00:47 +0000
Manifest this update: Thu 26 Mar 2026 04:00:47 +0000
Manifest next update: Fri 27 Mar 2026 04:00:47 +0000
Files and hashes: 1: j20qybaMMnEffof95SNFhPW89PI.crl (hash: 7cKlZ/p0evogt6qsYOgZnS3k5qOXHj9JTosgwYNGXpM=)
2: yy7RjY9VjJxpv75GhAQEnVx8t8k.roa (hash: KHt8fJdWAUNtqMOeAAHu9NRYtOwOJC7Y60cmxx721z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4b:ad:56:d4:4d:94:fe:10:65:41:a9:0b:33:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Mar 26 04:00:47 2026 GMT
Not After : Mar 27 04:00:47 2026 GMT
Subject: CN=72c8653c960f769fa7a7d078b7541a2a470f6813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:1c:30:6a:f8:6f:22:ca:77:fd:63:2e:78:
c2:45:fc:4d:2b:2b:c4:e6:c8:30:9f:37:ec:5a:d7:
33:ba:3e:e5:9d:43:8b:7b:72:20:65:51:37:40:6f:
41:64:39:3f:ce:9f:91:92:02:f4:d1:8a:19:0b:90:
e5:98:41:dc:65:0b:a5:0b:92:9b:f5:8e:64:1f:56:
32:16:61:c8:d3:72:c9:b2:ff:43:ae:3f:9b:dd:c8:
80:c1:7d:52:d0:e9:cc:39:c5:a5:45:01:73:75:20:
57:d1:4a:84:94:01:fb:03:26:39:e4:7c:52:cf:34:
28:81:39:d4:e5:28:c6:52:72:96:16:27:04:b0:8b:
38:38:c6:7e:3e:6c:a7:32:ad:f7:2c:be:56:7d:6b:
97:14:05:a6:5e:82:d4:f7:0e:fe:ea:0e:92:8d:20:
32:0b:80:51:d4:11:8c:10:ab:3d:62:76:70:44:0b:
f9:c7:cb:d4:9e:6c:53:31:50:3f:59:41:ae:63:5e:
90:c4:bf:62:49:e3:f6:1c:7b:d3:8f:36:a2:e8:26:
75:3f:37:eb:f1:0d:08:15:cc:e3:f7:2b:03:3a:4c:
ac:30:db:06:be:ba:12:45:9b:0a:14:03:57:5f:b2:
f1:ed:0d:aa:d6:ff:e7:7f:b8:cc:bf:bb:d1:7b:47:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:65:3C:96:0F:76:9F:A7:A7:D0:78:B7:54:1A:2A:47:0F:68:13
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:14:bc:df:95:18:05:7f:a8:e6:3f:90:52:78:00:d4:4b:00:
5c:97:46:98:e2:ff:4e:51:cc:0d:7f:c6:46:c4:53:a8:db:13:
9c:71:8d:87:01:88:d9:f8:83:9c:a8:bb:33:f3:e2:e0:1f:59:
eb:7e:04:16:30:15:8f:6b:53:ab:9f:6b:36:27:b1:07:29:39:
60:5b:e3:c5:cd:22:fe:88:8c:af:1a:41:38:d0:52:84:23:40:
50:86:48:a2:19:4e:8e:3a:05:86:9f:82:09:05:5f:e3:2d:9d:
08:47:4f:22:09:bf:6f:48:29:cf:65:31:0c:40:d4:00:27:ac:
a0:47:ef:63:65:eb:3f:ee:04:bc:34:f8:1f:18:3f:1d:37:08:
df:7b:d1:79:74:bb:cc:7f:ea:80:df:a0:c9:7f:db:a6:4b:19:
a4:3b:35:15:b7:83:85:c2:34:32:ff:c1:09:a8:49:81:23:ee:
55:5f:a5:82:5b:55:70:fd:ef:82:8c:1d:e2:8d:5d:51:4b:d1:
2d:a6:52:92:18:1c:27:79:6d:87:3e:be:61:c8:ad:9c:6e:eb:
af:c4:09:3d:b5:5d:49:d4:d1:e2:f6:b3:37:8f:bf:29:f2:12:
b3:c1:d3:92:16:d1:87:6a:3e:43:2b:ea:44:e3:ef:55:de:b8:
83:b3:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:21 2026 by rpki-client