Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: 9ffH7TGkdgBdN4e1e8KOeu+996zz2VS9qzk6vV30yxM=
Subject key identifier: 3F:8C:42:2B:BA:F1:B8:90:24:4F:82:F5:39:BD:F3:A4:75:2D:7E:1C
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 019D25F1B5ACB8F0EFAC2F7AAA7A17387CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 14A4
Signing time: Wed 25 Mar 2026 17:01:30 +0000
Manifest this update: Wed 25 Mar 2026 17:01:30 +0000
Manifest next update: Thu 26 Mar 2026 17:01:30 +0000
Files and hashes: 1: 5BqcS5YAd2CqG1Bqr1DMz14XLBs.roa (hash: hc3I67ClpXYlhmM2IyIqXgYM+yQAnq3AX4m72or+MyQ=)
2: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: CWaylBxbi/f8/dvNBJwZ2QJZyX81Q+6s1W4wiA9iF8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b5:ac:b8:f0:ef:ac:2f:7a:aa:7a:17:38:7c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Mar 25 17:01:30 2026 GMT
Not After : Mar 26 17:01:30 2026 GMT
Subject: CN=3f8c422bbaf1b890244f82f539bdf3a4752d7e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:80:89:36:1e:87:28:7b:c8:91:df:64:6e:
ae:3c:3a:c2:70:da:9c:44:f6:5d:db:35:59:dd:a2:
f7:dc:d4:9c:1a:d1:d2:0e:ac:46:db:03:55:61:9d:
4a:ab:ef:44:30:e4:2d:ef:12:fa:6b:c1:5c:5e:45:
a8:e9:4c:30:af:a3:86:68:63:5b:fe:90:30:82:9c:
71:e4:59:55:7d:51:07:16:0f:02:1e:28:3e:ef:e9:
70:68:d4:63:ae:c2:43:91:85:39:89:64:06:2e:7b:
3e:d3:d6:b6:b4:2f:fa:13:20:e2:eb:09:bc:cf:8b:
5b:84:86:30:91:a3:8c:e9:c0:84:b8:bb:91:b9:7d:
01:70:0c:51:c6:04:03:60:e5:5c:af:c4:1f:5b:2c:
17:d6:a0:04:9a:d7:02:5f:0b:49:4b:28:e7:42:83:
26:30:24:4a:70:7c:93:8b:0e:1a:10:c6:97:be:29:
33:32:be:44:fc:e7:05:aa:36:3e:cc:c2:88:a1:f6:
a6:cd:44:d0:fb:a5:bb:68:c0:62:55:f5:0d:27:a8:
72:43:e2:1b:bd:e4:a7:50:c4:0e:d0:a4:51:8a:0b:
42:71:d9:35:55:ef:a1:8b:db:c1:e5:3f:44:bb:db:
b3:41:26:48:b9:2d:4e:52:cf:32:2c:6c:ac:d7:3d:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:42:2B:BA:F1:B8:90:24:4F:82:F5:39:BD:F3:A4:75:2D:7E:1C
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:25:3e:71:e8:3b:34:c6:21:36:99:7a:50:7d:2e:79:d9:
52:73:25:88:05:7d:23:d3:80:85:b8:56:1f:6b:30:9b:02:17:
fe:89:06:75:70:e9:dc:1f:5c:c5:18:4e:96:f7:88:50:80:56:
94:19:c1:e5:b2:62:55:28:59:3b:be:ef:1e:28:9f:f3:70:99:
27:ae:97:11:29:98:ac:d8:86:23:17:fb:80:ba:7e:0c:d8:32:
b5:56:2b:31:71:4d:dc:91:ac:9d:96:88:56:4e:06:88:89:b8:
88:75:a8:1a:c2:78:e9:ca:dc:e1:6f:58:a7:2a:ce:47:98:75:
5b:aa:c8:11:5c:34:14:55:8b:d6:ed:34:6f:67:76:8c:76:d1:
04:9f:39:60:b6:09:39:9f:b1:a5:8f:6e:d3:7e:8d:95:09:97:
14:db:26:4a:54:9a:81:59:78:39:16:67:2d:c9:ab:70:c5:49:
6b:53:b4:08:a2:b7:97:00:26:be:c8:17:14:0d:24:2c:63:f5:
8d:fd:47:31:86:ab:ed:2e:4d:42:99:5e:f4:91:3b:46:d0:5f:
f1:4c:67:e1:9d:43:59:fd:94:ec:a4:c0:1e:2b:4c:9d:43:0f:
18:ef:86:57:87:25:97:64:03:09:07:27:bc:09:37:c5:ca:95:
df:2f:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:27 2026 by rpki-client