Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: h/d9w6XJRerWLyeUxE5a329U/xuY9WOFYJBy4E+5Vds=
Subject key identifier: 3F:99:54:78:52:78:6A:FB:29:B1:AB:07:79:65:F2:A1:F6:F4:2E:7F
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019D37F707FA0A43EE3DC577D1D1F187D4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: CftdwEFqZEC1ZBtPSGT/+xENSR6CgU6ybhXf7CxHr5Q=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:07:fa:0a:43:ee:3d:c5:77:d1:d1:f1:87:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=3f99547852786afb29b1ab077965f2a1f6f42e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:52:b6:85:59:ef:39:e9:96:6b:ed:ed:44:
b6:e1:a4:22:a1:1d:fd:23:4e:cf:1c:92:2e:16:7e:
d8:11:bd:39:a4:14:fa:2e:8a:59:09:6c:ed:b4:7e:
99:5a:d4:86:af:20:45:46:cb:5c:df:7d:c1:81:2e:
5a:1a:0c:09:71:ad:f7:96:2a:27:d0:5c:c4:f0:1d:
45:e5:7d:e2:a5:ef:db:6f:82:1a:97:d0:39:db:ae:
de:8e:9b:8a:ca:7d:58:c1:e8:41:d2:94:82:2c:a3:
16:19:b3:c5:2a:34:f5:5e:b0:17:80:14:e8:be:fb:
71:04:8f:96:d4:77:78:a2:be:b9:5a:5d:73:e2:22:
c8:59:b3:9b:83:90:14:ba:02:27:59:05:24:f1:d6:
4a:92:d4:21:79:84:df:02:6e:67:71:81:b8:7c:34:
31:db:72:7c:f9:b8:fa:92:82:ec:ca:80:c3:02:fc:
36:1f:c6:ba:c2:36:1d:21:b0:d3:23:64:0d:2b:be:
9f:c5:49:7f:ab:e1:77:aa:92:0c:ce:bb:39:75:57:
da:b8:e8:87:1f:e3:76:fb:91:3d:f7:ac:29:87:21:
16:3c:68:02:85:12:95:1c:39:6a:4d:04:81:ed:33:
86:93:09:2e:ec:b7:a0:ba:c9:44:62:6f:2d:49:1b:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:99:54:78:52:78:6A:FB:29:B1:AB:07:79:65:F2:A1:F6:F4:2E:7F
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7f:19:ec:6d:37:09:c0:c1:af:89:ee:fe:fc:d7:d2:26:f4:
fd:f8:66:c2:3a:55:63:3f:4a:e2:b3:2f:d0:7c:8f:2d:b7:ea:
c1:86:a0:a6:06:ac:2b:20:13:dc:47:02:e8:21:49:05:6b:c1:
d0:fc:55:ea:75:d2:48:fe:34:82:63:f2:ff:80:ff:c8:4c:d6:
6d:12:92:c4:1e:28:84:3c:07:c8:3b:8a:73:2c:51:bc:68:df:
61:96:84:8e:e4:6f:03:85:52:6b:1f:46:67:22:ca:29:67:bf:
fc:ee:5b:ab:e3:18:36:40:f9:40:49:60:d5:a3:24:34:e4:7b:
96:52:5b:e5:19:d4:c0:c3:d0:e5:6b:b2:2d:bd:9b:2a:56:7d:
df:b4:7b:60:e5:6f:a4:3c:dd:02:5a:67:a1:36:14:2c:41:44:
f2:13:5d:33:22:78:d8:af:d6:40:17:c7:65:49:c8:1d:5d:98:
1d:f6:9e:d4:e3:dc:fc:8f:cf:4c:49:d0:1c:68:3f:9c:eb:c0:
dd:9f:82:eb:0b:a9:54:fc:a2:61:88:a7:c4:fb:26:98:02:02:
18:d3:f7:84:8a:5f:8d:2b:a1:31:bb:e8:84:ec:fa:90:42:48:
cc:04:b7:d9:28:13:61:24:14:77:5b:49:f9:25:7a:f0:fa:02:
42:64:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:33 2026 by rpki-client