Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: RiG2PMgNiKcgWiW+o4z2XSYgCWkBl1uqjf4C0NnF3Gw=
Subject key identifier: 34:C8:C4:A7:A1:E7:87:7A:B7:39:99:EE:AD:E1:67:50:F5:D7:3F:F1
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 019D326398002F38CCEAA00B23847F355D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 03:01:20 +0000
Manifest this update: Sat 28 Mar 2026 03:01:20 +0000
Manifest next update: Sun 29 Mar 2026 03:01:20 +0000
Files and hashes: 1: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: xYR4llY0kQu8OE83CqAaDBXGmgWFPftxUS8SLaB+FjQ=)
2: w5L3FIDQ5dVgBosrxy8T9UB3MsY.roa (hash: q5Br3i/0tMxLM8djHNXqPKfHBcAZeWinp2LOD2kGfo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:98:00:2f:38:cc:ea:a0:0b:23:84:7f:35:5d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Mar 28 03:01:20 2026 GMT
Not After : Mar 29 03:01:20 2026 GMT
Subject: CN=34c8c4a7a1e7877ab73999eeade16750f5d73ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:43:b3:50:91:f3:f3:e1:c7:52:3b:9b:be:65:
25:00:39:59:33:67:e2:17:c2:f1:b4:85:e9:e3:8e:
0d:8b:58:2f:82:fc:8d:5e:9e:68:e0:4c:24:7c:e1:
db:89:2b:2e:de:a5:00:f9:56:a2:ad:97:64:d3:af:
83:e0:cc:4d:ca:a6:32:a0:2c:76:fb:22:40:fc:2e:
85:b1:df:6c:f3:61:74:39:9e:1e:af:fc:7a:ab:3f:
2e:83:15:6a:c4:79:c0:3b:ff:e7:59:6d:fc:de:d1:
90:e3:70:f2:40:9a:15:ce:fb:4f:c4:be:ae:c5:13:
22:19:69:9b:9a:ea:1c:63:c5:08:54:77:72:e2:e4:
ac:63:df:c8:be:ca:f8:5e:19:36:9d:5c:51:99:04:
85:40:e3:79:0d:2f:1e:5c:8d:dd:3f:72:ed:e6:71:
b5:a3:e0:c0:02:e1:2e:33:2c:44:e6:ea:b6:ff:cd:
57:23:72:b3:82:89:72:3c:3e:77:18:78:33:b3:43:
65:7c:c0:86:3c:41:8a:fe:76:26:13:16:3d:09:00:
c0:eb:3e:60:6b:b0:e1:b2:e2:fa:13:8b:98:71:2c:
6a:99:fd:65:19:e5:63:48:a1:9b:60:e1:d1:ea:13:
db:db:55:18:ca:c5:2b:94:11:db:4d:78:8f:f8:33:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:C4:A7:A1:E7:87:7A:B7:39:99:EE:AD:E1:67:50:F5:D7:3F:F1
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:2a:14:91:79:fe:70:f2:fa:69:c5:50:49:96:75:a1:62:
f4:e0:cc:c2:e8:c6:77:a8:6c:01:97:7c:c4:e1:39:70:0e:58:
c7:46:21:25:ca:c4:fe:dc:5f:0b:cd:19:2f:fa:7d:5d:95:77:
d0:78:c3:0f:54:25:b2:29:25:7d:cb:2f:70:e6:b1:c6:fd:57:
87:21:61:58:e4:91:35:13:b5:49:75:b8:23:b6:80:4f:57:15:
b7:00:e2:93:91:78:90:2e:30:92:a8:93:45:be:63:34:9d:98:
6f:03:01:59:3b:c3:f4:51:76:17:71:de:3c:c9:a6:c3:4d:c1:
be:f5:46:81:e5:16:35:34:40:f7:94:9d:52:98:c3:fe:c9:9e:
16:6e:59:63:a1:3e:ce:56:6e:12:b2:14:a4:3b:30:ad:12:3b:
36:75:66:0f:69:b5:4b:81:bd:02:cc:c3:00:9e:e1:74:86:b3:
ed:dd:6a:62:17:d8:76:aa:f5:9a:0a:23:04:ce:82:c0:3f:7a:
4d:7a:8e:f5:f7:bb:c2:31:0a:7c:e9:a8:bb:b7:73:3a:b9:d5:
87:b5:80:4f:8f:07:f7:dc:13:61:fa:ef:9e:09:17:27:58:da:
3a:58:03:bd:07:52:37:50:25:f1:d2:f9:6f:35:06:ba:37:7c:
34:59:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:25 2026 by rpki-client