Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier: ie+tWt/XhvUyXyo7XWKi45JmG3NxB5KEeaQlx4O5o+A=
Subject key identifier: 67:46:43:05:32:99:88:73:FC:E6:7F:C5:A8:B6:E2:5B:B7:41:48:33
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 019D37C06D39F2CA3DF981918C1D65F72437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: ZQcJiCDolglCKGyy4Y++eUIgWdnvg5ZGafJqi3YM6kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6d:39:f2:ca:3d:f9:81:91:8c:1d:65:f7:24:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=6746430532998873fce67fc5a8b6e25bb7414833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:15:a8:68:bc:a2:ce:a7:ce:70:13:b3:e4:
f5:ca:fc:4f:f3:7b:b2:4c:62:99:5d:a9:80:44:4d:
9b:84:a0:13:0e:ce:74:5d:2e:8c:05:88:36:f2:69:
53:de:06:a3:67:c4:05:21:d2:ff:7d:e1:24:d6:91:
02:b4:07:35:95:61:30:b2:66:c5:d6:7c:35:fb:49:
90:6d:41:01:32:65:7f:34:0d:88:23:24:6f:f7:a7:
79:88:03:bd:90:6f:ce:7f:f9:e5:ef:7b:b6:f8:3c:
e0:dc:ae:8a:b7:fa:a4:38:89:a9:2c:24:5d:b4:2c:
f4:7c:62:9a:05:b9:86:e1:dd:6a:d0:37:73:a1:12:
f5:97:f7:e0:a3:52:59:16:a4:94:94:8c:72:12:c1:
7c:f4:14:69:38:c4:05:44:5e:b6:1c:df:c9:42:47:
6e:a0:73:71:5b:b9:4a:08:bf:36:a0:7b:cc:e5:75:
9a:b8:8b:c8:c9:17:df:39:96:63:ae:6b:13:2e:1b:
f0:1e:a2:28:f3:96:bb:56:2a:d2:ca:c0:d1:86:a0:
49:29:c0:f5:9d:2d:c9:4c:b8:01:e4:47:c5:63:f6:
cf:7a:4a:ac:42:c0:7d:f0:9b:84:a5:8e:11:1a:2e:
5f:fd:44:1a:b7:f0:30:e8:13:f1:94:1b:81:7a:a3:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:46:43:05:32:99:88:73:FC:E6:7F:C5:A8:B6:E2:5B:B7:41:48:33
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:65:6f:29:19:d6:48:c7:9d:4f:24:9e:c3:4c:33:5d:a2:e6:
1a:11:f6:35:1d:56:16:00:fd:15:cd:10:aa:dc:e4:cc:63:2b:
69:3b:30:be:81:50:a0:c1:ef:19:9a:75:41:68:1b:4e:03:a5:
48:0f:2d:d6:25:72:e9:e2:9f:95:45:73:48:b6:2b:7f:e0:db:
5e:53:42:9d:56:c8:7c:b5:1d:fd:aa:40:ba:0a:e0:03:19:a4:
7f:62:3e:e8:9f:55:83:bb:8b:a9:5d:83:8c:39:be:44:8f:1d:
37:23:a0:6e:b5:e1:24:6b:a3:9b:f8:ce:8a:95:3c:80:77:f5:
be:39:6b:e4:f1:6e:43:18:aa:04:7d:de:ff:e9:9c:17:57:2f:
d2:3f:29:b2:f4:0a:53:d3:cb:21:bc:e0:86:39:62:02:39:fe:
32:10:fa:b4:89:67:fc:4e:50:58:99:b9:0c:bf:f2:2c:1a:51:
81:76:80:7e:45:53:99:85:11:92:91:90:60:90:02:af:19:ad:
7b:3f:63:88:2c:34:44:08:91:76:af:29:ee:c7:9c:02:79:d2:
90:f4:18:fc:e3:1f:f5:99:d2:64:8b:f1:98:0f:62:7c:ac:14:
48:20:8e:ac:7e:f2:d4:28:1f:b8:a0:81:06:8f:03:f1:86:62:
dc:6d:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:06 2026 by rpki-client