Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: v2F1C/gEbTmklwGlMpuF+yYlN83k4iTLF10hIYZ3nbM=
Subject key identifier: 80:EB:5B:65:C4:07:B3:55:8A:59:42:CA:C2:E5:49:3F:79:E6:C8:B4
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 019D37527DC9005D60B8101C55F518C280A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 0B4B
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: LYaFYMEtcoFiGgzC4zUuCixHz-c.roa (hash: AtKbSMq1WsG+Z5PcGQrZUh5zBo6rNO+8G8e4EJ3y1yw=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: pneRO8tTkAomdoM1+MM8q16t++YcEbnTP4w/ttp/Fe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7d:c9:00:5d:60:b8:10:1c:55:f5:18:c2:80:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=80eb5b65c407b3558a5942cac2e5493f79e6c8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:cf:fd:2b:bb:13:f2:1c:d0:e6:dc:72:a3:
ec:a9:93:02:59:51:ad:92:75:a6:dc:1f:ee:ba:82:
ce:c2:40:1f:a1:e8:9a:8c:28:6e:5d:cd:71:df:7c:
b6:11:17:89:53:86:88:3d:62:73:9a:57:92:be:01:
57:f0:b6:83:bc:f0:a3:9a:f0:77:0c:e2:93:a4:65:
2f:68:ec:d1:1a:30:b3:e8:a4:45:52:16:c8:cf:fe:
ae:69:89:8a:80:9d:11:04:65:19:6a:17:b7:f4:69:
80:2a:e8:1e:dc:d8:80:17:99:5b:ee:c6:3e:b5:90:
75:fa:26:df:60:0a:d4:9d:e9:eb:fd:ce:aa:f6:22:
8f:1f:f4:dd:f1:ff:f4:a7:16:e7:3b:40:1b:d4:98:
49:ad:e7:8b:3a:ca:db:db:bd:b0:58:bc:80:68:8b:
22:c6:fe:dd:32:d9:f5:c8:6e:26:bc:df:61:14:4e:
31:6a:40:38:61:3d:ed:07:79:8a:23:d6:ac:dd:a3:
2f:e6:6a:bc:e0:e4:69:ee:79:8f:74:b8:55:8c:98:
ba:34:cb:57:4d:5c:8d:32:19:3c:2f:11:22:2f:76:
e5:52:f6:1d:9e:71:67:c0:cb:73:44:84:5e:d3:3c:
ad:86:a4:34:19:ec:cc:86:be:1e:36:9f:6f:2a:40:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:5B:65:C4:07:B3:55:8A:59:42:CA:C2:E5:49:3F:79:E6:C8:B4
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:96:bb:8c:d7:33:07:69:89:88:b9:4a:c5:ac:d7:af:cf:
1a:4d:ea:8f:38:a2:d0:85:31:49:e9:bf:79:1d:9b:f9:56:dc:
b8:19:6d:f3:15:0d:7f:df:d7:7b:af:4d:1c:95:89:97:a3:9f:
5a:09:85:b4:65:af:cb:fa:a6:80:6c:22:59:67:7a:53:a5:a1:
f6:d4:a9:39:42:c3:48:68:c0:d6:45:0d:24:8e:6e:f5:ea:66:
79:fa:9d:e2:04:ea:d7:20:b6:c8:7e:7f:12:85:82:d2:39:ef:
ad:0a:8d:11:7c:89:12:e1:8b:29:55:92:80:df:62:da:40:c0:
a7:65:4b:d0:50:85:9b:ef:1b:18:09:f1:44:b8:5e:91:8a:06:
41:0c:fd:90:99:6f:23:b4:5b:db:32:73:d2:d6:7d:31:fa:8a:
84:a6:ec:da:80:b5:ca:d5:22:62:ae:19:80:1c:00:2b:46:ec:
4a:4e:94:60:b0:7f:8d:26:16:3d:9a:13:4b:94:80:39:c7:33:
64:ca:c4:fc:00:54:88:52:35:06:4c:df:89:41:b5:cf:c6:91:
94:b1:bd:5f:d4:04:e6:5b:3e:e0:fe:10:b0:9f:26:9a:ed:54:
0f:e2:b2:c6:21:de:e5:db:a5:c0:9f:67:38:74:2c:fa:8c:2d:
3a:be:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client