Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: TqzOXs4Dprow54TkxrixcnBQInvFsQDv37NaBnQKI+0=
Subject key identifier: 6D:6E:0E:54:DB:9B:08:23:7C:69:98:62:57:2F:FC:26:3D:DD:9B:9B
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 019D2BBBD82EC69B7FD8F1FB2AFC109EFFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 20:00:23 +0000
Manifest this update: Thu 26 Mar 2026 20:00:23 +0000
Manifest next update: Fri 27 Mar 2026 20:00:23 +0000
Files and hashes: 1: Jo4sL8lXLvyWdPSWoSkZwZCVJ04.roa (hash: bS0A196A1VxcXT/9qLUtNV5FjCCPOQid0Srt7nWffI0=)
2: bMn_23nrCl28y9SYIcSyjUBIZLU.roa (hash: CTefdSkQHU087fuAHIXzkavwf4EoaAetVJZcdLfAn7c=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: JKe9o2Pq+COeMpuUJ68ezUQ/NfXEVYLToSgg5/XjL4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bb:d8:2e:c6:9b:7f:d8:f1:fb:2a:fc:10:9e:ff:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Mar 26 20:00:23 2026 GMT
Not After : Mar 27 20:00:23 2026 GMT
Subject: CN=6d6e0e54db9b08237c699862572ffc263ddd9b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:01:c2:46:89:b9:57:0e:3a:81:6c:6c:d6:
6e:96:f7:81:6d:73:60:11:33:9f:ad:57:bc:bf:42:
f3:ce:ca:1e:5e:1c:4e:d7:92:69:07:be:4f:e9:7a:
df:b4:05:13:e6:03:07:5b:5f:d9:22:7e:41:78:6d:
dd:78:70:67:0d:ae:77:3c:cf:53:f4:3f:5e:8b:62:
0c:2c:d7:7d:f1:6b:60:63:ef:c8:e0:99:d2:56:8e:
45:df:53:77:2f:e1:07:6c:6d:5b:5c:8d:4b:91:b0:
ac:0f:50:4b:24:6a:d7:cb:cd:17:b4:5e:a5:d0:b7:
3c:67:de:aa:c5:1f:26:92:a8:10:28:42:d1:5f:b2:
e6:54:13:87:ee:a0:80:ce:ea:17:c6:4f:8b:5e:2d:
51:62:6a:c0:23:c7:17:e6:9f:d5:7d:be:ce:72:2d:
cb:af:a7:19:7c:da:0a:66:c5:74:bd:1c:a9:8a:66:
5b:27:91:63:47:df:4a:d8:e7:80:be:fb:90:30:07:
ce:f9:c7:c9:26:46:00:0d:68:e9:29:92:b6:9c:a8:
e8:58:0d:32:c4:8f:81:c6:3d:ca:26:e0:99:65:8c:
96:47:02:74:3c:bd:11:0c:03:8b:22:f4:94:69:fb:
85:5f:d4:02:96:95:cb:58:94:43:48:4b:ee:df:33:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6E:0E:54:DB:9B:08:23:7C:69:98:62:57:2F:FC:26:3D:DD:9B:9B
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:10:c2:ad:bf:65:db:08:87:be:a8:1b:6d:da:cb:b7:31:45:
a9:36:68:c0:2d:97:ee:29:12:6b:9f:fe:bc:15:50:c6:b4:0e:
49:31:51:c2:36:e2:64:a6:96:63:49:c5:61:f4:4a:62:92:aa:
d3:ab:ba:87:5e:ca:be:86:74:60:c7:60:a3:6b:6e:5b:47:6e:
7a:5d:bd:d3:f4:65:b0:e7:4f:33:ce:24:42:ca:83:1b:58:f9:
f3:b4:32:f6:63:24:9b:86:d5:60:03:58:6a:66:59:36:74:63:
e0:f7:0c:a9:f4:12:76:2d:5a:95:28:af:76:10:26:0e:25:c9:
5d:94:06:f1:f6:5b:40:78:0f:08:5d:9b:55:22:4f:ac:74:6e:
dc:a5:a8:60:91:37:2a:9c:cb:8f:e6:f3:b6:26:2c:29:2f:52:
78:9d:58:ea:15:c5:89:15:d6:83:a5:d0:19:d2:8c:4d:64:93:
35:f6:6d:85:74:7b:31:97:b1:65:67:90:20:8f:93:e2:f0:d9:
19:76:fe:c8:38:6e:11:64:26:6d:5c:79:4c:d0:92:bf:a0:b1:
f2:47:65:23:bb:97:9f:0b:bb:47:87:a3:f5:20:5b:ff:83:42:
97:ef:04:51:e3:81:21:5b:10:18:23:03:2b:2b:40:fa:c7:be:
82:85:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:18 2026 by rpki-client