Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: d0l/yC8zjpWaeRpPI9M9mCHWDvxotSmdGzI6q8hyxEk=
Subject key identifier: 7A:57:C7:15:BD:9B:77:97:DE:47:D1:00:FA:88:E3:94:A7:C1:B1:C5
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 019D31F5BD86F4FC7F7FF8140618AD8A2448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 114D
Signing time: Sat 28 Mar 2026 01:01:21 +0000
Manifest this update: Sat 28 Mar 2026 01:01:21 +0000
Manifest next update: Sun 29 Mar 2026 01:01:21 +0000
Files and hashes: 1: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: m4/7mc+LhtQAtm3omWE/MxXS/ZMsjh7MIV2d7HiIJR8=)
2: t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa (hash: j8FLow634/sFX5We1fU/Tl5tl/Iw6/b+Vn5Ia8rywE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:bd:86:f4:fc:7f:7f:f8:14:06:18:ad:8a:24:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Mar 28 01:01:21 2026 GMT
Not After : Mar 29 01:01:21 2026 GMT
Subject: CN=7a57c715bd9b7797de47d100fa88e394a7c1b1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:2b:bc:11:89:76:08:91:1f:fd:ae:81:89:
03:1c:3b:c4:e2:9c:c9:3f:fc:83:45:fe:25:77:72:
d6:a0:90:4a:34:76:a9:9e:ab:fd:ac:ae:ac:26:93:
fe:75:cb:8e:15:ff:be:f5:88:5c:8f:34:13:bd:27:
35:10:09:3d:12:c4:80:88:0b:f9:9c:0a:7f:98:a5:
8c:c8:ce:f3:c1:2f:cc:e5:c5:96:e9:0d:da:65:e3:
37:91:06:a1:af:27:2d:35:de:64:c9:7b:fd:09:ff:
ae:cf:04:bf:e4:fe:81:a0:2f:bd:42:39:c8:15:62:
09:1d:2d:b8:a5:e3:10:7c:3b:fe:65:f9:0b:07:47:
ad:68:74:ed:f2:be:19:cd:c1:3f:bf:a6:b2:7f:01:
66:87:b5:5a:e3:89:54:62:68:e0:11:04:8b:a4:b1:
a6:f3:89:be:3e:aa:dd:ca:ed:bf:90:32:ad:c5:29:
de:87:fa:83:c9:e7:dd:8a:5e:8a:f5:e5:26:e6:96:
80:60:63:f7:30:22:38:d2:c9:2b:d0:ed:05:0f:5a:
22:32:39:8e:2d:1e:a4:78:60:33:7e:8a:52:87:4e:
17:c0:35:f5:39:85:af:d5:a0:55:1b:20:93:6c:77:
93:83:ab:65:c5:a4:3a:85:ca:93:0b:12:5e:41:ce:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:C7:15:BD:9B:77:97:DE:47:D1:00:FA:88:E3:94:A7:C1:B1:C5
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:66:c0:26:ce:30:f7:ca:8e:d4:95:dc:df:2c:d7:d4:e5:d6:
59:36:1e:6b:32:ff:fd:a6:ee:1f:1b:ed:bc:e3:e1:73:1a:dd:
d4:67:18:15:6e:d0:54:85:d3:0c:c5:5b:ba:eb:20:88:b9:b1:
43:ce:92:c5:23:26:f0:77:5e:a9:24:3f:aa:30:df:15:28:82:
63:4f:21:3c:6e:15:d7:8d:1a:1c:70:3d:41:f3:6d:bf:52:4c:
ae:23:32:db:73:4f:94:13:d7:fa:38:e5:42:3b:d4:cb:5e:6e:
a1:6f:de:7e:8a:49:09:27:23:01:97:a9:8b:7f:09:d0:69:97:
ba:b0:4c:5f:df:ca:3a:52:9f:73:0d:9c:61:66:ef:db:b5:03:
4c:f5:bb:b9:6f:30:2a:bb:6c:41:a7:a6:8c:e5:f8:2b:ec:16:
0d:38:5f:c9:77:ed:10:3d:84:de:b4:bf:5e:16:f3:f3:cf:67:
a7:3b:7b:99:35:8b:99:75:a5:49:39:b5:d5:81:49:0a:03:3e:
8c:ee:5b:8a:eb:02:c8:13:95:47:ce:65:2b:16:0b:86:d0:db:
63:99:f7:f3:20:69:b7:81:f4:1e:d6:a7:77:01:3a:b6:e2:56:
37:7a:87:bf:6c:60:14:5d:86:28:66:e7:f7:b2:00:c6:28:ea:
68:31:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:06 2026 by rpki-client