Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json)
Hash identifier: BvzmodUU0HllcY/vpjesr08yynxUiPs3OyH4QJxszJU=
Subject key identifier: 63:C9:F2:33:D1:0E:8D:8E:C2:E0:09:BE:7C:3F:86:41:B4:63:47:AF
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial: 019D2696126658F2BAF3E524B98DE9580970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
Manifest number: 0FE5
Signing time: Wed 25 Mar 2026 20:01:02 +0000
Manifest this update: Wed 25 Mar 2026 20:01:02 +0000
Manifest next update: Thu 26 Mar 2026 20:01:02 +0000
Files and hashes: 1: Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa (hash: gLzddFQSRg/+84Z04UYrdta+47qpL6E3gmNgoeRKLvI=)
2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: NOzOIh75tMHVN8Pp69teyQ76y4DYaSTe8IWLl0xuiRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:12:66:58:f2:ba:f3:e5:24:b9:8d:e9:58:09:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Validity
Not Before: Mar 25 20:01:02 2026 GMT
Not After : Mar 26 20:01:02 2026 GMT
Subject: CN=63c9f233d10e8d8ec2e009be7c3f8641b46347af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:d1:d0:1a:09:2b:a5:7b:07:5b:57:41:6f:
08:36:08:55:4f:28:44:fb:ee:ec:fb:d9:6d:a7:d9:
3d:53:82:c2:37:e6:7b:97:ca:62:2d:4c:7d:27:e9:
c6:ea:5b:b8:b4:9a:a2:00:54:c6:4e:b0:9c:c1:86:
ac:fb:9d:19:5b:4f:ae:69:da:0b:dd:76:7b:13:7f:
74:ca:d3:6b:75:70:68:4a:2b:b0:73:f1:c2:6a:04:
75:f1:d4:4c:78:8b:aa:9e:76:6b:51:98:d9:17:66:
c1:ea:18:92:e3:cb:73:25:ab:d7:23:53:6d:a6:81:
92:89:a3:19:56:73:d2:46:e5:6f:eb:b6:79:61:9d:
ea:de:2a:7c:80:87:c4:db:e5:98:72:a0:8f:00:79:
fc:f9:3c:aa:70:62:bf:c6:1c:0f:dc:b3:bd:30:45:
62:c0:05:c9:1b:4a:bf:3f:3b:57:bc:f7:9e:bc:bf:
9d:fb:c2:b8:19:c6:80:9b:75:88:d8:02:68:6e:69:
50:10:6e:da:4c:6b:86:65:79:80:8b:c0:f5:fe:7f:
ff:83:8d:cc:37:17:39:76:bf:9e:71:ce:99:22:5f:
ee:a2:3a:9d:a9:db:af:a8:f0:db:02:3b:b6:b3:7b:
c9:ee:e0:9a:af:e4:be:a9:58:b6:4c:5a:ba:88:54:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:F2:33:D1:0E:8D:8E:C2:E0:09:BE:7C:3F:86:41:B4:63:47:AF
X509v3 Authority Key Identifier:
keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c2:2d:36:7d:12:90:d7:fe:41:3c:8d:aa:91:39:e2:b5:64:
65:7d:ab:c1:7d:9f:8d:f6:c0:7b:ec:2e:f1:d1:14:06:90:ab:
32:f7:cf:59:20:a9:4c:2a:e1:9b:bb:97:81:85:07:7f:36:22:
01:29:12:6f:66:5e:5c:15:54:ca:3c:1a:6e:be:69:db:97:59:
07:1f:07:07:47:4d:98:ce:65:04:47:ae:b0:28:3d:4f:83:1b:
a8:59:b8:d6:c9:7f:44:3b:11:7d:20:3e:d1:b7:81:28:ad:94:
f4:43:16:de:50:53:b9:ea:93:17:4a:8e:14:09:7a:d9:d0:dd:
af:a0:17:c5:ab:92:1c:21:7a:6e:38:3b:b3:a9:a6:47:3c:69:
f1:f7:c9:1e:e8:82:57:5f:92:0d:ba:8a:e8:42:ff:11:61:4d:
d6:c0:d2:1c:31:ce:72:20:75:79:7e:78:60:36:0f:75:ce:e8:
e7:a1:d2:57:2e:bf:b0:67:da:57:7e:86:79:b3:96:9c:e7:6f:
3f:87:8d:ed:92:e1:dd:97:6c:40:01:6a:1a:07:07:4b:d7:ff:
6e:83:93:b8:88:7a:0e:f2:0a:1d:78:70:46:93:4a:bd:c5:4e:
5a:43:72:07:01:c9:c6:dd:e4:08:7e:96:5c:60:c1:1b:1d:c2:
81:fe:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:07 2026 by rpki-client