Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier: Qwu0oRx8OFrA5D/1pYZL3q1gbWuhyrL5pLMztbS9Taw=
Subject key identifier: B6:F8:64:55:AC:0A:91:FC:88:2D:8C:25:95:03:02:5D:76:85:E2:7D
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial: 019D29CE63187F928AD5360212CE5F7C3783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:24 +0000
Manifest this update: Thu 26 Mar 2026 11:01:24 +0000
Manifest next update: Fri 27 Mar 2026 11:01:24 +0000
Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: hbnAWff7Khrn+PBEsb/CT88ObBLSMKumhmOKiPlWFZI=)
2: oHmE_s2IgxzPCRH2-ThzQIvXCO0.roa (hash: sNd3D2Nl25u7Dz2DARN3+vH2eQ72TG1JHi7rWfuknfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:63:18:7f:92:8a:d5:36:02:12:ce:5f:7c:37:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Validity
Not Before: Mar 26 11:01:24 2026 GMT
Not After : Mar 27 11:01:24 2026 GMT
Subject: CN=b6f86455ac0a91fc882d8c259503025d7685e27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:f5:3a:79:97:89:91:42:c3:22:94:29:94:
ff:c6:b3:2b:7a:a0:d5:d9:ce:0a:ff:77:34:b3:c4:
ed:65:89:21:74:e5:59:40:b2:26:71:75:9e:3d:db:
36:57:67:4b:f9:16:26:5a:bf:ce:56:39:89:f3:2a:
d6:37:1e:fc:ff:07:6f:2a:d1:29:a2:b3:56:4f:e1:
a9:37:24:1a:5d:4a:56:70:49:dd:2d:8f:6c:e7:82:
82:5e:a6:24:2b:09:d2:3c:43:fc:38:4b:f0:8e:f1:
36:c1:ce:5e:bb:63:c5:71:b6:70:f3:4a:65:19:15:
ee:ab:50:6c:63:56:4b:4f:70:2c:f0:8e:ee:6f:47:
9c:3a:8e:e8:b5:1e:2d:ac:20:f3:02:49:c1:87:7a:
f6:62:b6:03:d2:df:7c:64:9b:8b:f6:dd:89:83:b4:
8b:d6:5c:27:ea:a2:79:0c:e1:97:fb:99:8e:fb:45:
c4:62:76:2f:36:1e:51:a1:ef:49:c0:a0:93:3e:fd:
87:bd:21:d9:92:09:fe:3c:4b:1b:65:ec:c8:ec:72:
72:48:1e:a2:97:e6:03:57:0d:d3:23:b9:f0:fd:55:
c9:26:5c:89:c5:b6:b7:a8:48:c0:25:30:89:78:81:
1c:c0:4b:29:76:cb:ae:d6:86:c1:c3:f4:bc:5b:3c:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:64:55:AC:0A:91:FC:88:2D:8C:25:95:03:02:5D:76:85:E2:7D
X509v3 Authority Key Identifier:
keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2b:e5:fa:2e:e8:5b:14:51:cb:fa:a1:3a:e4:a0:28:4e:f2:
6a:c3:a7:b9:69:ea:6d:46:ec:a9:6f:f4:aa:2d:41:45:b6:aa:
be:4e:4d:1c:f2:4c:1f:5c:55:07:5e:06:0d:8d:9b:42:42:7c:
6b:d8:6f:b7:6b:58:7f:f8:8b:8c:ad:b7:d2:79:b4:14:a7:a4:
30:6d:1f:a6:6c:d4:1d:e6:04:3d:2f:e7:c5:0b:04:ca:1f:81:
10:a6:15:ec:79:4e:98:c1:94:92:16:3c:ea:51:70:00:33:ac:
6f:f9:71:87:3d:99:3f:f3:1b:f4:02:34:ac:a5:66:70:d6:dc:
d2:22:d5:66:26:bd:88:a3:98:5e:68:25:5a:72:ff:51:fb:45:
a7:e5:e8:bb:11:db:c5:df:f3:ae:5d:70:dd:5e:b5:9f:c8:f6:
ef:c1:3b:f3:1e:66:47:dc:9c:be:d6:60:ad:7f:65:51:80:ff:
04:4a:84:3d:43:4e:83:f8:35:76:4d:cd:6c:18:09:cf:09:d9:
72:51:39:00:4c:7c:8d:6f:04:b9:ab:b9:64:ab:23:14:8e:0b:
45:6d:fe:34:ec:99:ed:24:5b:2c:fd:39:39:8c:67:f9:f5:e5:
b5:96:3a:73:40:75:5a:08:b8:a9:7e:67:35:29:bd:bc:0b:4b:
07:51:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:57 2026 by rpki-client