Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: kSxUPMjD9wnYvO6uSTx8r/Zh4RDz8M+ImhH+l0aU+ic=
Subject key identifier: 62:88:25:7B:C1:19:28:8B:AE:0C:9B:46:D7:3C:4E:63:49:1E:80:A7
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 019D27A915B51CCB29952FB73039898CF469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:25 +0000
Manifest this update: Thu 26 Mar 2026 01:01:25 +0000
Manifest next update: Fri 27 Mar 2026 01:01:25 +0000
Files and hashes: 1: Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa (hash: 16yeZ21Za1Z/lNRNjThEGWHSFlEFLlT8Kt56uKRyMVA=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: chsxVRkh2aFqTQbzXWhiyUL5Dg8qMk6uvgWh2rQGskU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:15:b5:1c:cb:29:95:2f:b7:30:39:89:8c:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Mar 26 01:01:25 2026 GMT
Not After : Mar 27 01:01:25 2026 GMT
Subject: CN=6288257bc119288bae0c9b46d73c4e63491e80a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:54:ea:b8:75:65:7f:07:0f:70:a2:c7:d4:
2c:ca:aa:71:c3:b7:ee:87:14:22:ca:fd:7c:64:4e:
df:02:76:0a:cd:32:24:92:9a:53:ce:c6:94:8e:01:
f8:51:e9:6a:cf:87:60:2b:01:38:d8:e0:04:ad:2d:
42:8b:38:a2:18:70:94:1b:b3:e0:ce:ae:73:d8:57:
44:f2:b0:8d:9d:56:88:bb:03:89:17:7e:eb:c7:e4:
67:64:e5:b8:8e:75:fe:00:75:ba:68:ed:b8:f6:66:
f8:4b:05:82:48:ca:76:4d:4f:3f:b3:ef:4b:ff:b0:
83:66:38:94:ac:2c:f5:00:46:38:fe:b5:67:eb:29:
d9:3b:94:47:86:5e:0d:75:fc:52:ad:db:75:9b:ca:
25:4c:92:95:25:b7:b8:91:07:40:4a:81:83:c3:30:
d4:56:9f:17:27:7a:7c:cd:ff:dc:d0:7b:0d:a6:53:
7f:b0:b8:b7:40:57:bf:eb:4d:c6:d5:f1:86:73:16:
5e:1e:83:65:54:93:2d:6d:50:f3:e9:46:29:a7:4f:
9c:95:4d:c8:03:73:a0:b3:b9:41:2a:ea:b8:1a:a8:
f2:a1:d1:af:77:7d:e9:64:55:a8:8c:82:fb:36:8c:
a0:6e:ee:12:f3:91:64:1b:ad:a0:ce:8e:83:44:93:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:25:7B:C1:19:28:8B:AE:0C:9B:46:D7:3C:4E:63:49:1E:80:A7
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ad:6e:5d:bf:fa:f7:2e:d9:9e:14:6d:ca:ee:00:20:3f:04:
7e:04:3a:4d:27:22:fb:cb:d4:e3:1d:92:ed:06:e8:d8:4d:74:
88:5e:8e:bd:20:79:ec:d1:79:cf:a0:c8:ac:db:75:6f:e3:11:
a6:c1:33:58:ba:66:21:ba:d5:67:f0:33:b0:cd:90:22:44:1b:
96:44:75:e0:c1:7b:0c:16:6b:c7:8c:b6:c2:6c:fb:17:d5:16:
35:b6:9f:5a:24:1b:f8:2e:ce:c9:eb:ed:22:38:f0:35:53:c9:
a3:e6:4d:78:9f:be:4d:49:1a:7a:a2:24:73:d2:5f:ed:96:c1:
46:db:ce:ac:31:2d:cc:a1:c0:65:56:db:9c:2c:9a:d4:2a:af:
da:15:32:f0:e8:6c:15:91:fa:3e:02:d9:58:41:fd:21:3c:9d:
4c:b9:67:c2:55:52:30:ec:09:1b:75:ba:5a:00:97:45:88:17:
2d:70:55:d3:70:71:35:6d:96:27:72:e1:90:07:87:e8:5e:4a:
ef:ad:11:79:8e:5c:59:33:00:f5:3d:09:c5:b0:10:59:d7:1b:
b8:ba:95:a6:6f:f0:d9:ec:bf:ec:d6:23:86:dd:46:0a:fc:0a:
7b:31:2b:51:e3:de:d3:ee:8e:1a:b1:e2:1c:6c:6b:27:b8:e0:
fb:cc:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:29 2026 by rpki-client