Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: vAUQIMoAWCvMyd5yKizw3TTTNV+jBeI9saS9Koegfw0=
Subject key identifier: 78:E4:47:0C:68:2D:74:01:45:DD:A1:FD:9E:7C:99:DB:01:3E:49:85
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019D2961AC30F80CA90F10E40CD4326E65A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 1597
Signing time: Thu 26 Mar 2026 09:02:40 +0000
Manifest this update: Thu 26 Mar 2026 09:02:40 +0000
Manifest next update: Fri 27 Mar 2026 09:02:40 +0000
Files and hashes: 1: RXn30h9BpJvoZDBG_VhKAWNPT5w.roa (hash: e20aIXT8+TI5fnLf21yjBd8FPloZZbocy7TNGbWjDGk=)
2: eiBAjPlDdAEJJvNoTH-1fALVwBg.roa (hash: tHK9gw0NecINRkXtDNFXNpkwOaFhBnt8zEFuvT1+in8=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: ryeHDpeehgZJLnmb2de1fIW1tfgCJSd5Rc7TyZEyGow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:ac:30:f8:0c:a9:0f:10:e4:0c:d4:32:6e:65:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Mar 26 09:02:40 2026 GMT
Not After : Mar 27 09:02:40 2026 GMT
Subject: CN=78e4470c682d740145dda1fd9e7c99db013e4985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:65:b5:fc:68:1d:76:57:ba:45:75:74:0b:
b5:76:de:89:b8:82:aa:d6:a6:f9:2a:a9:73:71:3a:
cd:0b:ad:1d:4d:2a:02:ed:06:f8:f9:33:8f:7e:1d:
1c:46:49:88:97:43:44:20:d2:d1:58:f2:74:ff:b3:
6d:a2:8d:c5:86:7c:31:ce:c9:9d:80:5c:19:b2:86:
18:1e:e1:30:66:42:af:5a:55:03:56:11:b7:50:8e:
c9:11:1c:ce:d9:41:04:53:81:02:7a:87:d1:46:44:
69:b7:25:8f:de:c5:22:c9:e6:f8:68:f2:28:49:88:
0e:7f:ad:be:11:2a:40:8a:02:d5:75:3d:31:f0:ef:
3a:20:23:54:c5:8c:e4:b7:b2:1d:0a:79:9a:a4:55:
32:14:27:92:35:db:a1:82:c2:ee:10:44:68:ef:25:
18:62:b1:5f:bd:46:8e:d5:7a:34:2d:0c:e4:d2:cf:
84:e5:ad:71:5f:31:86:8c:9b:4d:fc:21:7b:70:5f:
b6:d4:9f:43:5f:7d:32:8f:7e:c6:59:ab:95:4e:6b:
cc:d2:45:68:61:89:f0:ab:50:89:84:75:1c:b4:fb:
9e:0b:61:04:16:69:ae:7a:98:ba:09:ff:cf:cb:d8:
91:2a:3b:69:76:fe:df:44:4b:6c:24:af:9e:d6:75:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E4:47:0C:68:2D:74:01:45:DD:A1:FD:9E:7C:99:DB:01:3E:49:85
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:77:ba:e7:3a:70:08:59:ab:d4:47:dc:f6:6e:e0:2d:8a:4a:
7e:7c:80:a0:de:5c:db:a5:93:5b:4e:ca:77:c7:e2:f1:3c:0e:
f1:83:5a:3b:f0:d3:7d:17:6f:95:b0:e4:71:06:9d:34:66:60:
b3:62:f9:1c:63:b7:5d:c4:e7:9f:86:19:ae:33:c1:2d:af:e7:
44:98:ab:11:2c:42:1e:e8:79:b1:ad:79:ad:89:5c:e8:f7:bc:
b6:59:ec:d9:02:74:9d:a7:18:be:42:54:5d:c5:f3:1e:16:ec:
2a:34:a9:a2:a6:b5:4d:5c:a1:57:9d:14:dd:a9:66:2e:03:4c:
48:df:46:e6:d7:00:e5:a1:90:4a:81:b0:41:00:b2:35:66:54:
fd:94:97:3b:16:fa:9e:96:23:8d:97:34:c2:2e:01:09:88:44:
13:71:da:4d:d1:5f:fc:3c:76:12:2a:86:b1:41:1c:92:7c:d8:
69:5d:84:f3:cf:34:40:39:cd:1f:5c:eb:5a:a0:ba:0f:92:23:
de:05:bc:17:53:df:39:f6:73:dc:23:4b:17:83:75:e8:25:16:
f2:f1:41:bb:0b:d9:d8:63:af:89:2b:02:94:9e:9f:ea:f1:31:
d1:61:f4:7b:a9:92:eb:76:4e:56:2d:c1:5c:99:cf:4e:ae:b4:
8e:4c:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:57 2026 by rpki-client