Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: 3tTj7prU+61gi29ea+VBC9yDSdOLUwI4YjxGU3pCICU=
Subject key identifier: AC:15:06:3E:04:13:3A:52:05:95:48:53:65:AD:0C:A5:2E:53:62:24
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 019D2929B01217833EF3DD0A822A1762B73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0CFF
Signing time: Thu 26 Mar 2026 08:01:30 +0000
Manifest this update: Thu 26 Mar 2026 08:01:30 +0000
Manifest next update: Fri 27 Mar 2026 08:01:30 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: 2C/NNzcbph7VRLj9tzzHmMC/Sly5869l98nFabnTXYg=)
2: uIfxedIoPtI6sFt6tLFbdFhBmow.roa (hash: Q+T15udJmpOitf8fa/5KOsL5hhkwGZ8F5qC5MKVKRFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:b0:12:17:83:3e:f3:dd:0a:82:2a:17:62:b7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Mar 26 08:01:30 2026 GMT
Not After : Mar 27 08:01:30 2026 GMT
Subject: CN=ac15063e04133a520595485365ad0ca52e536224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:18:a7:05:fe:00:de:31:1a:da:6c:51:7c:
09:c8:a0:08:6a:80:4b:ea:d8:b0:61:f2:9e:a7:76:
32:e3:64:03:00:ea:65:59:44:2a:a9:51:fe:98:98:
0a:87:8f:7e:e5:d5:73:fb:b9:2e:49:9c:cf:8f:74:
28:3c:c8:96:66:49:c3:be:de:e7:06:97:03:28:2c:
8f:3a:78:ee:74:64:4a:69:c3:8f:71:ae:af:5c:82:
d2:c3:7b:0e:20:1f:87:e0:db:a4:e8:1f:4b:bf:ef:
dc:0d:ee:ab:5d:5e:7e:aa:a0:30:af:3b:a1:40:76:
ee:67:a4:87:02:14:8f:ad:38:37:8d:ca:30:a8:a9:
98:ac:f1:dd:dc:dd:54:42:78:a5:32:71:64:9d:e4:
0e:b9:0d:30:e1:89:9e:7f:72:ed:5c:ac:95:eb:d0:
dd:bc:8c:e7:44:5b:cb:66:52:15:e5:7a:01:77:bb:
05:b8:c1:3b:ce:7b:fb:3c:b1:76:c1:32:53:3e:fb:
fa:89:dd:79:d2:f3:09:6e:2d:83:20:89:ca:8b:07:
3b:72:09:0f:65:4f:61:ef:c4:4b:3a:1f:a0:dc:83:
66:08:e7:58:ae:df:3f:e3:4f:af:8e:fe:ff:90:b9:
1d:fb:17:20:9a:b6:8e:97:d5:7c:96:02:fa:52:0d:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:15:06:3E:04:13:3A:52:05:95:48:53:65:AD:0C:A5:2E:53:62:24
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0c:2a:cb:37:ef:47:34:c8:b0:3d:28:8e:d8:c2:bf:cb:ce:
ac:0c:a1:8a:77:8c:6e:b1:30:0d:30:cd:dd:a5:de:f9:d1:c6:
d9:d4:53:97:f0:20:96:2e:bd:8e:64:07:84:d2:5c:9b:40:44:
2b:53:e3:63:35:b4:e5:26:4c:15:07:c6:b7:30:2e:3a:08:db:
8a:d3:c3:10:a3:97:02:d8:a9:dd:c1:cd:0e:c1:93:e6:b6:1b:
e8:c7:d7:9f:43:be:81:2a:97:18:3a:e0:f1:58:30:e1:08:a0:
c5:db:5d:72:83:5c:b4:3b:56:70:5e:da:01:e5:dc:8f:b9:b9:
c7:c9:6b:fe:21:e3:42:ce:10:27:79:09:8e:d4:09:2a:53:86:
78:13:a7:89:09:b4:23:cb:c6:91:12:30:e8:5c:b4:25:a5:b7:
2f:36:73:d1:21:fc:e4:74:4f:24:8c:22:77:f1:29:8b:cc:da:
e4:a0:e2:04:d3:7c:58:10:1b:cc:94:31:f3:23:28:dc:3b:65:
a0:fd:4d:77:75:b1:52:85:83:3d:62:2f:bb:e7:44:29:65:66:
e2:ab:24:a7:3b:54:eb:4d:12:3b:60:a3:31:dc:a6:48:c0:3e:
5a:02:05:3b:42:e2:83:5f:39:68:7c:e6:08:67:14:89:f0:61:
9f:9e:50:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:43 2026 by rpki-client