Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: +yGTxbMSJztskIov2b1QeIOYWdPakJmlfsmw+MGaTb4=
Subject key identifier: 03:54:9D:24:09:0D:4A:5D:DC:BA:96:F6:38:DE:62:31:D6:2B:FC:57
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 019D3865B27049A88BE258589CB34D48A459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 178E
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: JbQak1AHMgi1qfOaMonuPRObwoY.roa (hash: Juh7X9uOOXLlYXsFrZb1hTO8VS9wOnWEcXeGaWt5Akw=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: F/2d3IB1bZyhV+wmx/WyLKhRde22VRUYjnrsSPe7LHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b2:70:49:a8:8b:e2:58:58:9c:b3:4d:48:a4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=03549d24090d4a5ddcba96f638de6231d62bfc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:d1:ea:bb:38:0f:e8:a5:0c:6e:84:a6:72:
5e:35:66:8f:c4:0d:b9:ba:bd:4a:04:7b:32:10:a0:
49:0d:0d:51:77:27:f9:41:74:31:7b:85:04:03:a0:
36:22:cf:63:5f:6a:b1:00:ef:61:b1:83:a1:c2:79:
05:86:e6:05:fd:aa:57:c9:c5:3b:24:a4:81:be:fe:
e8:77:c8:7b:3c:6f:ac:1b:db:61:85:92:61:09:c0:
0f:73:0d:8a:48:f8:e4:55:38:7c:a0:b4:a5:3c:93:
ff:08:dc:bf:3b:75:1d:aa:9d:9e:d4:64:9f:43:bd:
f3:18:92:34:02:f7:89:54:f1:94:79:fc:4a:10:f5:
5a:68:a7:60:fe:6b:f2:8d:bc:60:a5:62:8d:d5:76:
89:3d:7f:b2:19:9f:a5:1b:12:bd:b9:a3:eb:4b:1c:
53:ca:1c:41:ab:8b:5b:b9:d1:41:78:3d:c3:26:5a:
6a:6f:f1:8f:ac:13:ec:02:51:11:d3:7d:3a:e9:46:
cb:f8:5f:74:58:c6:4d:c6:5c:d0:c2:53:a4:4a:81:
10:1f:b4:70:e0:03:55:2b:9f:73:a3:9e:9e:1b:91:
01:47:e2:80:dc:6a:4c:10:6d:0b:bb:39:e5:3a:dd:
ec:f9:85:70:b2:11:a4:ca:7e:b7:2b:66:7f:6d:9f:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:54:9D:24:09:0D:4A:5D:DC:BA:96:F6:38:DE:62:31:D6:2B:FC:57
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:7c:62:0e:46:c9:df:c9:ab:7a:6c:0f:77:80:d7:6c:32:
38:28:04:f3:f5:eb:37:ac:c2:d4:8b:a4:45:12:4a:f1:b0:ec:
57:0b:4e:fe:b7:f5:e1:20:c8:03:1e:b2:b5:0b:62:9f:b3:d6:
75:0a:89:28:46:3b:21:95:95:55:e4:06:f4:96:95:b2:77:54:
ff:67:fa:47:31:0c:0d:5f:43:ba:a2:d1:87:8d:12:c4:77:e3:
53:8e:5a:99:2d:5f:ab:95:81:df:32:0b:61:04:e1:ea:c1:53:
a9:21:1d:9b:28:df:18:40:9b:95:fa:eb:b0:6d:30:07:e0:5f:
00:a3:14:3c:a0:47:e1:a1:ba:e3:47:a1:3c:d0:3e:d5:58:21:
29:e4:37:56:13:47:ad:f5:2e:b7:4a:61:86:6a:7f:7b:e5:b7:
4c:8e:2e:9f:41:92:a3:ef:69:b6:dd:15:b7:6c:43:67:34:ab:
1f:fc:4e:cb:09:f7:da:9c:25:03:5b:ba:a1:8c:bd:97:1e:f5:
05:05:68:8c:41:cf:62:ec:c6:23:0e:26:90:ab:9d:31:5e:32:
83:a7:5d:c0:12:df:a9:69:0a:48:e9:89:29:35:c4:fd:16:11:
84:cd:04:33:ca:87:02:30:0b:1b:e7:bb:67:93:d7:fd:b5:ac:
a0:f3:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:50 2026 by rpki-client