Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
File: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft (raw, json)
Hash identifier: sLN9Lc1j9gTgzt89Tlklq4JpjmoA+nThyRdi2NIe24Y=
Subject key identifier: 13:A8:8E:EE:4F:37:3E:A8:19:04:56:01:BF:55:AA:9C:FB:72:7C:35
Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Certificate serial: 019D26CCBD46CAD7707F634D588966DE527C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
Manifest number: 15A7
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl (hash: mBF7Ji5iAB56JpjZsXol/2xFcesuopDqbQLhUHbHFeI=)
2: n2cwiplK4QxCrTwGBHLplO2ULeU.roa (hash: 7aeKHzASb9QXAHN2dhVECcGoHU8aQKfp4EYYcWeuYiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:bd:46:ca:d7:70:7f:63:4d:58:89:66:de:52:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=13a88eee4f373ea819045601bf55aa9cfb727c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:d6:62:1c:49:58:3d:51:0a:aa:e8:78:9f:
0e:1a:24:54:79:d8:b3:1a:e1:0a:41:48:88:49:6f:
d3:26:f7:c6:20:27:1d:f4:fd:c1:c4:a7:21:24:9d:
3f:21:57:0b:2e:55:e5:3f:91:c2:df:b3:e3:21:79:
33:7d:05:56:6d:3d:f0:c7:db:a6:44:91:4c:70:14:
a1:ca:db:be:b0:7d:92:25:67:d1:67:7a:31:57:08:
52:73:9d:e0:d7:49:91:82:d8:bb:68:19:44:e4:82:
d1:bd:b3:e1:a4:0d:00:8f:fe:91:06:3d:10:9d:7b:
58:ba:a5:f1:89:2e:c0:8f:09:db:d5:c7:a6:9e:58:
1e:c7:3a:5b:46:93:90:a6:b2:60:00:0e:63:5d:f0:
4d:49:44:f4:54:24:86:bf:b0:1a:30:94:51:50:0e:
e8:f5:81:04:36:dc:90:1c:2f:ad:3e:8b:28:43:84:
17:ad:02:b4:84:13:d1:c7:40:f3:d9:e2:25:23:c3:
71:99:0c:a8:4d:57:7f:fe:0a:92:1f:eb:54:6a:df:
91:5d:ad:57:35:20:7a:c8:59:93:f7:54:01:68:8e:
d3:da:59:49:90:aa:a1:fb:f9:ce:18:d1:5c:16:01:
e4:d0:90:95:20:e9:a4:5b:8d:15:91:e4:54:0a:91:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:8E:EE:4F:37:3E:A8:19:04:56:01:BF:55:AA:9C:FB:72:7C:35
X509v3 Authority Key Identifier:
keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e2:18:a8:26:7d:f9:6c:48:b0:8b:f6:b9:a9:8b:81:58:c1:
7a:48:cb:2d:62:20:7e:f6:47:44:07:1d:a7:bd:df:f1:35:fa:
85:51:8e:07:8b:40:79:72:da:42:e3:f3:39:91:93:93:c6:07:
d8:13:41:ec:96:fc:c1:0f:f3:da:7f:31:bc:34:ed:d4:c5:32:
c0:bd:a8:c5:d2:6a:87:de:a2:e9:cb:61:50:51:6d:95:0a:49:
55:76:02:39:d4:35:7a:be:72:fa:bf:2b:67:de:92:ee:57:7f:
07:93:f1:70:15:46:57:9d:3d:50:6e:6d:4f:f1:04:85:33:d5:
08:9f:42:87:34:77:b3:a9:73:9b:bf:25:3b:54:ed:a2:83:b0:
92:d3:87:fb:7b:99:1e:f4:04:46:55:39:c0:d6:d0:54:03:1d:
5e:37:af:b4:1d:97:50:b6:f3:f3:3a:70:48:0d:80:d5:a0:20:
a6:c4:68:1e:50:c7:6c:17:6b:6f:3b:98:dd:29:f0:80:f7:37:
2e:c7:fa:1b:b2:a4:16:8c:b8:83:2b:d0:38:db:ff:dd:9f:e5:
22:59:b0:d4:33:cb:db:1e:9d:bb:cc:98:1c:3c:dc:6b:5c:63:
2e:09:5a:77:1d:46:3d:42:64:9c:74:92:ca:f9:40:00:f1:a1:
b1:04:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:07 2026 by rpki-client