Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: ODBuUm58fG6sDVkwrXoVSCRhVje+i0EMpjsB4E7mn8Y=
Subject key identifier: B6:72:B8:63:98:3F:03:DD:A1:1D:99:C5:E5:31:3A:75:53:54:AC:70
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 019D389C1A2FC9BA087B7D22257865AF7B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 0B45
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: Fy0o8DcLjvyiXEkdH4nVpnIu0xk.roa (hash: X9h7PiPkXXLiZTwdUCr+/0DnytD+kDfLjARYK4Pdh9M=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: k4P/+4TB7rI3gYGR/+SoJfaC9vn6VJY7n3X3rv/u1AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1a:2f:c9:ba:08:7b:7d:22:25:78:65:af:7b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=b672b863983f03dda11d99c5e5313a755354ac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:7e:fe:a0:97:97:04:d2:40:26:d1:68:39:
77:a2:d0:68:66:51:59:51:24:9b:c4:74:af:c3:b9:
36:91:a3:f3:07:af:ec:b0:0e:e5:a3:21:45:64:f2:
16:30:b4:8c:ae:5a:0f:38:97:46:a7:92:6a:41:5a:
08:32:42:84:a1:1a:5b:19:4e:19:24:ea:35:14:87:
af:9e:11:72:46:a6:54:03:e1:8d:13:cb:e1:97:af:
2b:2e:9d:e1:3d:6f:58:1e:29:15:bc:6a:f2:fb:cf:
1f:06:2c:aa:c3:c6:b4:84:56:52:93:88:53:ec:2c:
ea:26:75:68:d1:f5:7d:3a:58:7d:fe:fb:0c:4b:a5:
b6:50:21:4e:4c:39:b2:a5:47:16:d2:67:3f:64:6b:
0a:fc:bc:96:77:04:a9:64:a5:2b:88:6b:87:cd:74:
ef:25:09:ae:94:54:c3:ba:eb:0b:81:e7:1a:b8:a9:
a9:28:96:5c:b8:4b:93:d5:3b:20:e1:e4:7c:ff:1f:
88:09:4c:84:aa:e0:01:42:17:71:f1:71:82:a0:04:
7e:bc:ee:cb:c2:58:98:f6:6d:cb:7e:f1:2b:80:10:
a1:65:12:4f:66:bd:8b:31:48:85:3b:7b:7a:bb:c9:
d2:4e:c4:2d:dd:39:45:f6:ae:df:d5:8c:50:61:41:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:B8:63:98:3F:03:DD:A1:1D:99:C5:E5:31:3A:75:53:54:AC:70
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:75:fa:9f:3f:f0:19:30:8d:cf:51:dc:5b:05:cc:55:4b:09:
02:73:f7:f1:3c:a3:08:1e:e3:73:ca:8a:cb:0a:b5:83:e2:1e:
d5:20:8d:a2:93:ad:f9:b9:bc:1b:c3:00:2a:09:02:57:1a:06:
dc:28:75:a4:8c:b8:39:bd:a7:05:cd:ca:35:de:95:3d:63:d2:
46:20:23:2c:7a:bb:3f:79:05:71:d2:b4:b1:4e:3c:3c:21:2d:
14:f3:ac:4d:6f:51:d2:8b:22:be:3b:9c:5f:ca:af:4a:7c:b5:
5c:01:1b:e6:4f:ba:7f:4c:b1:5e:f4:46:39:cb:c2:e2:0c:2a:
8f:bd:db:a5:59:c8:55:2c:ab:54:18:7b:d4:ca:70:51:30:30:
1e:00:ad:2f:48:25:ca:b4:2c:da:6d:46:95:a4:4f:68:71:aa:
0c:23:10:06:c0:61:65:38:7f:1f:d5:59:ee:c7:77:d3:3b:ca:
3b:f4:fc:05:b9:5b:0f:39:f6:4b:2c:fb:d0:81:0e:78:36:34:
08:cb:1d:1c:b2:9e:3c:7a:5d:fc:ad:60:56:91:df:a5:15:48:
71:06:2e:24:a0:7d:86:78:6c:e0:3a:d3:6d:97:5e:9b:ea:3e:
1d:c4:3d:16:37:e5:b7:8e:10:ea:cd:93:2d:54:4b:24:73:93:
e2:7c:19:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:49 2026 by rpki-client