Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier: VOgB24L5I2rTA4+ZtP+UGfqrcbO5PjvVT7ckP8QnDkM=
Subject key identifier: A1:7C:74:7D:00:C8:38:41:F1:B2:2D:8D:01:9A:F5:7B:E5:AD:AE:86
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial: 019CE824D6D28C4F3ECDAD6F14D1865C760C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number: 02DD
Signing time: Fri 13 Mar 2026 17:00:54 +0000
Manifest this update: Fri 13 Mar 2026 17:00:54 +0000
Manifest next update: Sat 14 Mar 2026 17:00:54 +0000
Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: RM9deZoW6icnmr7RYHAA1LdBc4h64piky3CUjSkFFz0=)
2: YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa (hash: H49ZMq3qndN5kJWaRAax7kiG0pAT3uE2jIvdrAJiUlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:24:d6:d2:8c:4f:3e:cd:ad:6f:14:d1:86:5c:76:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Validity
Not Before: Mar 13 17:00:54 2026 GMT
Not After : Mar 14 17:00:54 2026 GMT
Subject: CN=a17c747d00c83841f1b22d8d019af57be5adae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:09:9e:06:0a:fa:ee:0f:b7:5d:4b:33:8e:
10:4f:8c:3d:d6:b9:b4:de:df:61:9d:af:a5:0f:25:
9b:06:6f:1c:99:bb:d5:4e:5a:ba:c8:81:b6:2a:0d:
14:de:32:35:cb:f5:6b:2f:31:af:d3:ea:04:2d:55:
50:3d:eb:2e:31:18:e0:05:4b:c9:f8:ea:53:3c:f8:
11:39:01:6e:1c:7a:c4:65:77:c9:c3:50:a8:63:81:
00:b4:c5:cc:7a:7b:cc:a7:a6:ef:25:b0:53:89:e4:
5b:b7:30:88:0f:7b:0f:9c:f8:8d:d8:1b:ac:fa:00:
d0:e7:17:05:77:81:fd:5a:dc:72:ff:01:7a:55:27:
6f:00:d7:67:ea:c4:32:00:da:b5:d2:fb:17:fa:9e:
62:da:cb:66:6f:0a:30:ba:60:77:64:84:bf:61:8b:
99:37:43:05:db:ba:1b:92:f9:2b:06:7b:11:b2:a2:
64:67:b7:22:06:df:b7:18:55:1b:6a:8f:51:6e:55:
b2:46:81:22:f2:14:09:99:a0:6a:54:93:28:f6:69:
f1:2a:8b:f5:82:75:36:52:17:fc:38:45:45:5b:6e:
8e:08:97:4e:a4:6d:7c:e6:ca:bc:d4:bd:d1:d7:f4:
09:d4:a1:4d:53:6b:aa:7a:7c:f1:be:e2:12:4d:1f:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:74:7D:00:C8:38:41:F1:B2:2D:8D:01:9A:F5:7B:E5:AD:AE:86
X509v3 Authority Key Identifier:
keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:b6:fc:55:a8:b4:4e:5e:8e:54:04:34:33:25:bf:31:35:e3:
89:b8:d6:4e:37:ae:df:b3:ba:16:be:a4:0f:5c:f9:a6:71:88:
be:10:d1:0c:b5:d4:82:55:41:7d:c3:61:b2:13:35:4a:15:ed:
d6:95:15:20:60:43:43:f3:d7:d0:b5:40:1c:a9:48:57:32:fb:
f2:4c:03:81:ca:e3:c5:56:cb:41:45:de:3d:5b:01:86:64:7d:
3e:b1:8d:18:12:3b:a8:7c:07:ff:4f:60:19:2c:71:3d:22:d4:
27:8e:b0:b2:3e:19:38:12:2c:8d:3c:b9:58:49:85:98:ca:f8:
c8:9b:3f:a9:0a:92:47:68:b4:3c:c1:77:57:6a:bd:e2:54:33:
b7:31:d4:9a:f8:9b:c2:9c:b8:00:7c:f5:e8:0b:de:f8:fd:a4:
36:56:32:87:65:43:00:14:98:ea:18:0c:cf:75:e5:f9:4b:f4:
b1:65:76:9d:c2:a0:44:35:7a:67:dc:de:c9:dd:8c:33:fb:18:
ed:6a:06:5b:81:4c:6f:6d:bd:d1:b0:ae:e5:34:ae:9f:23:9f:
db:6e:79:58:77:b6:b5:6d:1b:bb:54:42:90:a0:34:ee:a3:d1:
90:f1:be:e1:51:47:05:69:3f:9d:49:eb:81:d5:6c:01:bb:82:
d1:6a:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:06:51 2026 by rpki-client