Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: kr7RGzSbO7Va6PqU+IsgEXleeo/iXp639mxrEmKveBI=
Subject key identifier: 2C:DE:EB:03:26:45:55:C8:38:77:9B:2D:73:92:B6:1C:4C:9B:35:99
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019D25F1C5FE75FF83D9C8F9F6053A9BE493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 15C7
Signing time: Wed 25 Mar 2026 17:01:34 +0000
Manifest this update: Wed 25 Mar 2026 17:01:34 +0000
Manifest next update: Thu 26 Mar 2026 17:01:34 +0000
Files and hashes: 1: 9cLaCRMmkUSsyxFDOIgTHYqGjrA.roa (hash: M8D9X9HUQkQdMWCylk5MMocwUSM9A6MJTfk46/lEGqw=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: QYajoNKabiKoy67ADOyS34asbGxA+Bou856rbwjkaj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c5:fe:75:ff:83:d9:c8:f9:f6:05:3a:9b:e4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Mar 25 17:01:34 2026 GMT
Not After : Mar 26 17:01:34 2026 GMT
Subject: CN=2cdeeb03264555c838779b2d7392b61c4c9b3599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:77:d2:71:13:a1:f2:a6:a7:de:2c:fa:08:88:
36:d5:ae:bd:96:ed:2e:cd:93:d8:18:1b:3f:7e:a8:
27:f8:21:dc:fb:87:b7:29:7e:62:05:c0:21:8f:eb:
78:75:5c:f7:ae:64:77:a3:f5:71:13:ae:5f:ea:8a:
8a:95:7a:b4:1c:f2:47:75:a7:05:a0:d1:18:7d:e2:
4d:bd:dc:22:63:6e:55:36:89:c0:d1:83:cb:80:eb:
cf:38:2a:90:30:6a:7b:37:18:86:ca:14:6d:f5:ff:
f9:f5:c7:d3:b7:e0:b6:c9:fc:16:7f:48:1c:c6:f1:
2c:19:ed:0a:1a:92:47:10:d0:3f:0c:94:24:f5:d3:
41:0e:d6:66:5b:d8:f6:39:45:f9:bd:c0:81:33:96:
ed:c2:87:ca:b8:61:3c:f7:86:c7:49:9b:e9:99:fa:
64:36:6b:eb:8a:80:75:79:ee:1b:dc:a2:54:df:b0:
e8:05:68:95:ae:28:9e:a0:e3:18:4b:33:4d:e3:77:
1d:f0:83:35:5c:d3:78:0d:98:90:9c:50:be:4d:e5:
7d:ca:5c:a6:ba:36:5d:25:37:ac:2e:f3:d6:f5:b9:
68:70:e4:6e:23:6e:dc:f3:69:78:b4:c9:0e:07:eb:
b3:c7:ce:d5:e2:12:b6:75:0a:43:e7:7e:33:76:15:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:EB:03:26:45:55:C8:38:77:9B:2D:73:92:B6:1C:4C:9B:35:99
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:07:d0:6b:5a:96:95:38:52:80:3d:e9:9e:41:25:6d:93:ac:
d7:41:35:f6:a0:7a:ec:21:93:ac:37:ad:c6:91:42:5f:d9:cb:
71:dc:91:e1:e8:9a:70:66:4d:91:06:6e:72:33:71:63:e9:c1:
23:2f:54:7d:97:4c:3a:25:ff:31:67:27:65:c7:9d:da:57:a2:
56:00:11:0c:31:77:cf:c8:27:b6:2c:d7:56:0f:3b:43:c1:0d:
32:04:b3:6a:85:2e:33:11:1f:e6:a5:f6:4f:b1:0f:4a:ca:ed:
0a:b2:73:56:da:bd:0d:7d:e1:ee:7a:e1:37:75:ca:d2:99:7b:
3f:31:d8:75:ba:e8:61:d9:bf:f3:70:e8:40:0b:49:6a:e6:ce:
ea:e6:19:9e:c9:3d:9a:fc:e8:05:d5:27:db:cb:c9:db:cd:72:
3f:00:c9:87:9d:a1:48:e5:a0:ec:bd:0a:67:13:13:06:b3:f3:
4f:09:27:09:46:5d:f2:00:38:d7:5e:cf:3a:a2:4a:63:dd:53:
90:e5:ba:c7:6e:9b:a7:e6:d1:ee:1e:b2:53:e3:59:87:92:4b:
44:01:6e:cc:df:1b:59:f3:af:f4:51:0d:c7:c5:e9:72:f2:22:
e3:a9:8c:8a:bc:21:eb:b7:07:dd:91:fb:2c:8b:3f:bb:a1:07:
8f:79:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:19:10 2026 by rpki-client