Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: 7hR2h85fncpM5bLEiz/1uVeUcb3kMNAg/k9RROn4jUw=
Subject key identifier: 78:DB:CC:D9:10:A1:E6:71:6B:2C:53:49:A7:0A:61:CC:40:AA:19:32
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 019D2703D64002705DF88A2E9A2F0FD8EB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:00:56 +0000
Manifest this update: Wed 25 Mar 2026 22:00:56 +0000
Manifest next update: Thu 26 Mar 2026 22:00:56 +0000
Files and hashes: 1: FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa (hash: 8L9pbzjRhlXXYzdKFRwuzPzPptTX51ON4RUCMnWRonY=)
2: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: STPdAJWuYNzV3JNOTUTxM1RpXT1Es9/6ghBGByWr3PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d6:40:02:70:5d:f8:8a:2e:9a:2f:0f:d8:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Mar 25 22:00:56 2026 GMT
Not After : Mar 26 22:00:56 2026 GMT
Subject: CN=78dbccd910a1e6716b2c5349a70a61cc40aa1932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:20:e2:4d:f8:38:c8:b1:26:ed:b0:57:a1:
f3:dc:45:22:47:d3:ab:bf:db:44:9c:20:a0:09:c1:
d0:f0:b6:f8:a9:20:91:1d:8f:ea:cf:c1:a2:fa:9c:
48:c6:0f:3c:cd:25:47:2e:74:4c:f3:03:d9:3d:4a:
75:f1:ea:53:79:30:7d:ea:10:b0:56:09:72:ff:3f:
5e:ee:e1:33:b7:22:b6:3f:fd:cc:28:31:01:0f:88:
57:41:b5:6d:3d:5a:17:c7:62:f2:44:99:d7:ca:87:
3a:f1:0c:5b:f4:46:02:1d:10:cc:e2:ab:93:99:32:
46:b4:e3:16:79:68:ca:75:38:65:10:cf:21:35:cb:
5a:cf:e0:57:8c:4d:72:27:0f:8d:48:81:e8:12:44:
d5:6e:d1:59:44:44:56:fd:b0:3d:ae:ce:e8:56:1f:
cd:f9:3b:2a:2c:d4:2a:ad:49:ae:90:7a:4a:19:50:
8e:79:4b:2e:9b:f8:5e:0d:f6:c2:82:e2:40:56:c9:
90:e3:24:69:8f:b0:df:36:6c:cb:48:dc:2d:c2:bd:
9b:8c:19:94:a6:cb:df:9a:a3:33:37:2c:ed:07:8e:
15:ad:ba:4a:d9:79:e0:9e:4a:6f:e0:90:bd:88:f2:
7a:72:dd:15:9d:be:a0:29:a3:d8:9c:e6:9a:64:d0:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:CC:D9:10:A1:E6:71:6B:2C:53:49:A7:0A:61:CC:40:AA:19:32
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:aa:b4:f4:17:7d:45:2c:bf:9e:82:1b:9e:7c:4e:8f:df:
49:91:37:48:bb:25:a9:34:8c:c8:67:dd:65:69:d8:8a:06:25:
c0:b7:c3:c5:eb:f5:1e:9b:29:d8:81:c0:43:ec:9e:13:2a:4b:
5c:dd:10:24:52:5d:1e:e8:9a:8e:79:ce:d9:a7:5c:7b:ab:53:
51:12:5d:68:c8:4b:c1:1a:ab:b0:40:db:97:f7:c9:fb:a3:db:
23:ea:85:eb:8d:4b:84:68:9e:7e:b8:4e:66:84:6c:ce:f6:79:
aa:47:e2:5f:98:1e:49:84:61:a2:7c:e8:44:02:43:82:cf:87:
47:5f:84:4f:6d:dc:57:db:42:b3:ce:fd:9b:1e:e1:3a:35:44:
9d:19:0f:a4:c3:cf:c4:b0:31:99:12:06:f3:7f:14:15:32:ce:
c1:0e:b4:2f:3c:03:1d:ec:7c:23:d5:79:c5:95:90:7b:03:1d:
1f:14:da:86:3c:ed:98:bb:45:82:35:00:7b:53:0b:a1:6e:d9:
cb:1e:e2:27:15:85:e3:01:69:bd:79:a5:c5:23:c6:d6:a4:04:
b0:97:46:47:5e:d2:c4:a0:82:a7:c0:72:b5:8d:40:5b:7b:26:
8e:4a:c5:4b:2c:34:4a:88:3a:65:27:58:a2:7b:0b:ac:46:1f:
df:95:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:57 2026 by rpki-client