Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
File: _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json)
Hash identifier: VwwRFSY+dG9LDLX08X7sictYeS/++uBOFjhYLlU4D/M=
Subject key identifier: 96:D1:89:27:B3:E8:79:DE:AC:18:EF:A4:94:0F:E1:9D:3F:6F:CE:79
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Certificate issuer: /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial: 019D2772B59BF4D8339898FDECDA7BA41637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
Manifest number: 09A0
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: 8POUdXxydU2NWgTjMAS46lsReJU.roa (hash: NHxwG6zBnwiJw78rQkaCy5d/Y3YySuB1Lrikl1PrCTw=)
2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: fmkGqgh462UVWa9cnogLXzWv9U/X8H+Ozc9AoLK/eAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b5:9b:f4:d8:33:98:98:fd:ec:da:7b:a4:16:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=96d18927b3e879deac18efa4940fe19d3f6fce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:2a:bc:2e:2d:21:c3:09:35:91:6b:8b:3b:
16:c9:a1:bd:d0:8d:96:a1:b2:8d:91:6c:ad:48:54:
ae:de:84:50:37:b1:05:f9:37:cf:6f:90:ad:ad:8d:
8b:44:df:aa:34:d8:51:da:22:74:5a:10:a2:47:9d:
05:4f:3b:3a:75:f7:fd:33:ee:2e:ae:78:d6:51:09:
e2:8d:7c:c3:d0:1d:9b:6f:c6:d4:21:fc:fe:bf:32:
32:2d:0a:7f:59:d0:5d:a3:6a:07:e2:5c:b4:87:ee:
6e:7c:64:81:21:d8:09:1b:9e:23:ea:47:74:d9:53:
6c:69:2c:30:8e:79:ac:8f:93:cb:01:57:c6:e6:93:
cf:20:6f:ee:ae:e0:72:85:16:ce:fc:57:cf:ca:61:
28:ac:67:32:87:1b:38:25:ba:f6:01:d2:92:5c:9c:
c4:18:91:3b:ca:7c:9f:24:6e:c1:7c:d7:0c:8e:97:
b9:b9:58:59:3f:3f:f3:e1:01:c2:71:9d:7c:4a:a0:
7a:42:cb:47:0a:48:fd:1e:a8:e6:69:e4:44:00:e7:
b0:33:bf:8e:2b:bd:2a:61:bc:dc:7f:94:98:7d:5f:
9c:37:db:c8:ac:7f:42:d6:08:1d:4c:5a:c6:f0:34:
0a:68:76:8a:30:b5:1b:a1:6c:94:4f:5f:e3:8e:8f:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:89:27:B3:E8:79:DE:AC:18:EF:A4:94:0F:E1:9D:3F:6F:CE:79
X509v3 Authority Key Identifier:
keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:90:9e:9f:5c:9a:0f:cd:c4:12:d4:91:20:d4:05:c9:54:fe:
5d:72:56:d3:13:70:7e:1e:29:03:a6:d6:31:38:da:d5:db:a4:
62:b3:92:ca:e9:7f:2f:3a:fa:37:81:7f:21:29:f9:9a:86:e0:
e2:a3:ea:01:c1:63:84:f3:b3:6a:5b:c0:3e:0d:5f:72:65:9c:
0a:bd:df:49:74:45:63:76:66:f4:df:87:9e:ce:81:7a:78:9e:
8c:8c:8f:c6:bd:63:d5:62:aa:e0:08:ff:69:e1:53:53:22:1a:
ea:a1:af:dd:10:14:67:35:8d:56:d1:7f:b0:7d:d5:fb:9a:d6:
3a:eb:25:fd:b4:a2:ba:2b:a8:41:4d:f8:7d:d2:84:16:64:02:
25:a8:d5:75:86:9c:16:2b:70:54:92:70:05:3a:8f:a8:95:9a:
d4:11:c1:2d:71:8f:d0:c2:3f:78:d0:3e:13:e0:da:aa:c1:f7:
78:5e:9d:ec:57:7f:cf:8e:37:54:1f:cf:e7:bb:7b:f1:9f:e9:
dd:3d:a7:34:92:d7:aa:36:2a:8f:6b:0c:9e:41:29:e8:2a:d1:
6c:c0:10:be:61:8d:45:88:b5:5a:12:b4:76:e4:73:de:21:fe:
ac:ac:9e:73:64:09:16:e8:85:a9:37:17:a5:2d:e7:3a:77:57:
18:57:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:40 2026 by rpki-client