Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: 8nb9STxS7ensOgvxA5INS6HTNHV2WCFmShlTznt6XZM=
Subject key identifier: 86:57:70:66:08:D7:31:F9:96:74:61:FB:B6:09:F9:84:73:53:DC:52
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 019D28165FA7594574E9B91CB39F3502BD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 15A0
Signing time: Thu 26 Mar 2026 03:00:47 +0000
Manifest this update: Thu 26 Mar 2026 03:00:47 +0000
Manifest next update: Fri 27 Mar 2026 03:00:47 +0000
Files and hashes: 1: OBXirIBylsu5hF24eFc4dWHtfUA.roa (hash: V67fHNvga440B5p2S4z73zdpX5hKFuY2GyqyJaC4HdU=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: R8CzPZEub8Zq+3nBPElGDpFNwzhS9JLcbGwoXl7J7Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5f:a7:59:45:74:e9:b9:1c:b3:9f:35:02:bd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Mar 26 03:00:47 2026 GMT
Not After : Mar 27 03:00:47 2026 GMT
Subject: CN=8657706608d731f9967461fbb609f9847353dc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:56:eb:2d:01:4e:4d:ca:9d:3b:f5:c5:4c:
f6:b7:63:38:78:dc:0e:15:b4:b3:3e:3a:79:55:fe:
60:2d:18:df:c3:8d:05:45:bd:d7:3d:76:2a:d4:2a:
ce:02:6b:a7:f6:2b:1b:76:cd:20:cb:f2:7b:2b:5b:
a5:75:79:9e:ab:21:69:47:97:3e:fc:e0:b6:ad:90:
27:72:67:eb:bb:60:39:96:83:c0:ce:f2:8e:d6:e0:
46:8d:a2:c2:00:f3:29:9c:a4:46:9b:54:a2:09:86:
98:ec:11:88:a8:e0:97:4d:e7:1a:0f:f2:84:3a:ca:
c0:81:e3:68:32:d4:d4:83:96:5c:7d:fc:67:02:e1:
3d:f3:ed:53:e3:5f:a0:50:68:40:66:44:f6:7f:6e:
4b:ab:9a:ad:f0:b3:b3:b8:69:d0:94:88:63:f9:94:
13:8a:f1:d8:c8:9f:11:41:dc:4c:c6:85:48:ff:cb:
79:39:07:ed:3a:2c:21:6d:82:1d:f8:c3:58:bd:88:
d4:96:1b:d9:aa:93:b1:15:70:78:09:ce:7c:f4:78:
8b:80:5c:5b:2d:f2:b1:94:05:77:61:f1:c2:fd:81:
bc:23:cd:4c:90:c9:dc:13:34:ca:5b:d6:73:b6:1f:
cd:98:25:5d:08:3e:53:65:a1:90:6f:a5:dc:2d:2a:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:57:70:66:08:D7:31:F9:96:74:61:FB:B6:09:F9:84:73:53:DC:52
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b8:9d:af:4a:8b:9d:04:32:6f:f4:6b:71:0e:31:6c:78:61:
63:e3:75:a6:97:fa:a6:04:64:2c:e3:1f:49:11:ec:6f:6f:e8:
ec:e6:02:e1:4e:b5:0c:6f:4c:4b:e8:f8:d7:3b:40:a4:a2:10:
13:26:16:cd:80:f2:bf:9c:34:97:ac:ba:7a:8f:08:49:d5:8e:
44:2f:c5:a6:cc:15:04:ff:42:52:99:ec:43:57:e4:13:50:09:
63:87:e6:e7:77:71:6e:51:4f:c0:9a:2a:f3:43:ff:af:a6:9b:
eb:91:e5:94:f3:2c:e5:7c:c5:75:be:ac:ab:a8:0f:2b:11:6f:
a6:a2:e3:bc:22:5b:1d:a4:c9:26:20:7d:65:90:f9:33:40:bf:
e6:7e:cd:a2:61:16:3b:9e:35:30:e1:38:71:b1:3f:19:b8:5e:
58:ec:2a:47:e8:b6:1c:a0:94:04:ac:26:10:b7:54:1c:53:cb:
52:68:e1:05:49:36:02:64:86:7e:95:07:2b:0f:1c:ef:35:ca:
e6:5d:d8:0f:4d:24:57:35:53:f3:d5:37:60:50:38:26:f9:05:
62:6d:06:f7:79:4b:ae:2e:13:b0:6c:5f:ec:66:f1:e2:fb:06:
f6:7f:1c:0f:f4:93:19:69:90:da:02:d8:20:fb:70:f6:ac:33:
a1:b3:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:33 2026 by rpki-client