Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: znFW5cWCaoEnO4VbXWmmg7PGcaEWWhpCcgAKFnxhX1A=
Subject key identifier: FC:E3:29:0B:2D:0C:73:82:4D:A8:65:52:A2:3B:76:FB:D4:16:E9:20
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 019D37BFFB51F4B04BD8BD5D6E02D12FDD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 070C
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: TXQWqwg-_fg03GSnLtq9K2P-qXo.roa (hash: Ax0Uac+SRfpjnik5CivlZoRajYWhAEb1KtSZ4OnL+e0=)
2: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: NzWlHyq18nVwfO90Q3RMJ5dfZJo9rSnX+3T1On2cNAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fb:51:f4:b0:4b:d8:bd:5d:6e:02:d1:2f:dd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=fce3290b2d0c73824da86552a23b76fbd416e920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:1d:ca:ef:57:04:3c:a4:07:95:69:1b:a1:
e5:34:7d:0a:26:0b:e7:f8:4b:07:7c:28:91:30:4c:
90:1c:b7:b1:0a:67:aa:b6:d3:05:97:68:66:98:0f:
84:6c:00:0a:d9:41:6f:ef:d3:ee:91:0f:bd:7d:f2:
b0:2c:d5:0d:e2:79:e8:bf:80:b7:d4:a9:54:50:95:
c8:4c:6e:01:92:ff:fa:e4:bc:38:77:91:3c:8a:0c:
78:b9:30:7f:9c:ba:2c:43:a1:ef:5d:d4:5a:95:5e:
09:45:d2:8e:c7:45:61:9b:b8:d7:9f:a5:48:6f:1f:
6c:4c:10:e2:fd:50:58:aa:d5:2e:56:fa:cc:e1:55:
a4:d4:62:83:26:41:92:88:16:18:0e:94:4f:29:d4:
ce:fd:a8:7a:0f:2f:b6:91:60:bd:77:5f:f9:11:0f:
90:31:44:77:15:77:1a:1c:e7:62:7a:29:6c:be:df:
05:28:7a:7d:d5:d4:88:7f:f3:4a:35:53:fe:b4:57:
68:d8:35:40:ce:98:9d:cf:66:39:58:e4:d9:1a:08:
15:f2:c3:2d:09:2b:7c:9f:56:36:9b:be:d1:6b:ac:
ec:7a:2d:3b:7c:c6:99:b5:d1:33:6e:0b:6c:7f:83:
c5:a1:f1:bb:f1:68:fa:ed:a2:56:86:66:46:62:4b:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E3:29:0B:2D:0C:73:82:4D:A8:65:52:A2:3B:76:FB:D4:16:E9:20
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2e:42:24:84:45:c2:9a:6e:f9:41:dc:ed:c1:4c:de:e9:8d:
32:ff:5e:31:d8:ba:3d:8a:58:b8:28:a6:b0:87:aa:de:c7:9f:
00:02:7f:f9:41:73:ef:73:e6:49:9d:c1:5a:7f:3c:a0:62:f6:
79:04:2a:2a:95:5a:60:7b:ec:45:b0:df:7d:60:8b:ef:83:9d:
99:44:9c:40:43:be:5d:23:9f:75:5b:53:17:d0:26:8f:8b:db:
76:3d:34:cd:c4:45:ec:10:93:b3:b3:f1:ac:e7:5e:dd:25:fb:
6c:a3:af:ea:da:53:cf:81:cd:79:22:70:79:37:c3:aa:9d:a2:
95:58:25:d3:f6:57:57:b7:d0:17:11:23:60:67:8b:4b:9b:3f:
70:73:7c:52:0f:b3:ae:f4:2b:09:c1:50:c2:d5:4b:62:77:27:
d1:0c:5b:e2:86:cb:ee:82:0a:7b:0e:e6:06:1c:2f:b0:ae:6a:
f6:91:5e:00:fd:82:61:cb:f2:21:5a:b1:b7:14:1e:77:ee:18:
34:e7:5e:04:b4:6e:db:e0:3b:45:af:cb:b5:63:14:b1:3c:9a:
02:37:66:86:32:54:c1:8d:21:0c:4d:b4:8c:ac:e3:b0:0b:b1:
e1:1c:31:35:3d:00:16:f7:e9:9f:a9:aa:bf:55:0c:d5:51:bd:
1a:48:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:16 2026 by rpki-client