Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier: j0/ptDEqWajPTFovHG22Do3n5/AP6Fc+mbqVLf2Xj+c=
Subject key identifier: 9A:C3:17:A3:2D:64:F3:5D:67:FD:61:9B:67:8C:B0:AE:33:35:B2:B0
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial: 019D37F743859303D4283C588A08AF4BA888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number: 06B5
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: hEPLWwWf7jJuBwfcBot8uZscUzg.roa (hash: MqR78deoycBbmzcw7LAPrygstqswKZFRL7vJYn9//Dk=)
2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: hGN2ZZO5RP4OIpndlCBhamT2JtK10TliM1f2EbCgmPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:43:85:93:03:d4:28:3c:58:8a:08:af:4b:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=9ac317a32d64f35d67fd619b678cb0ae3335b2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:e5:3a:6c:1d:34:a8:c3:40:ba:bb:3f:6d:
49:46:87:a8:e1:4e:de:55:4e:03:88:17:c7:53:45:
77:41:39:f3:2b:8e:fd:d6:af:fd:00:d9:57:c5:b9:
82:23:48:af:ec:cc:0e:fe:48:fa:a2:79:0f:7a:b9:
89:06:3d:08:8d:f0:50:0e:36:3d:a4:a9:7f:09:f9:
8e:25:07:7b:b4:f3:6c:46:eb:d7:85:96:9b:ff:4e:
24:f3:c4:d8:a9:1e:86:37:be:19:19:76:2e:35:e5:
00:76:48:33:87:0b:3b:a4:4c:00:5a:2e:7e:cb:a1:
1f:9a:d2:e1:90:98:a6:eb:13:8a:7c:2b:7b:6c:2c:
bb:4e:bb:c4:51:02:e1:64:22:fa:2a:26:15:ed:4d:
a4:3d:ea:b5:a6:ab:fd:83:09:3c:05:0c:22:6c:98:
85:4f:f8:c0:0b:fc:ac:4a:12:42:b5:12:96:e5:a3:
b8:09:1b:53:cb:3f:a3:f9:2e:6c:79:7f:c2:97:e5:
f3:7c:0e:18:9e:85:1b:5a:1c:50:6c:9b:c5:83:1e:
be:01:8d:ed:c6:f6:5c:0d:0f:f0:12:9a:20:2b:8e:
56:1c:cc:50:8e:2e:71:83:85:71:d1:a3:b5:93:44:
35:92:7b:b8:b6:04:cd:90:20:9d:df:03:ba:d0:e8:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C3:17:A3:2D:64:F3:5D:67:FD:61:9B:67:8C:B0:AE:33:35:B2:B0
X509v3 Authority Key Identifier:
keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:be:4c:3b:dd:15:cb:8d:ee:84:f6:de:b9:a0:ca:4f:36:63:
5d:40:9a:59:6a:6c:3b:30:49:ae:04:71:f4:c1:ad:55:85:d2:
c9:f8:89:17:7a:3c:4b:05:91:89:a9:28:e6:60:73:a9:8e:ca:
14:2c:b0:05:97:1f:04:f6:b1:bb:5a:49:82:e7:30:64:6c:64:
20:8e:d3:88:da:9d:c3:ce:d3:19:b4:49:71:52:31:e1:89:28:
41:71:52:15:3c:3e:9b:10:01:cf:dd:55:df:85:be:ad:5d:91:
5e:69:98:74:eb:1e:b5:99:fa:98:ff:11:db:7d:bf:6c:69:aa:
0c:e8:f4:b7:aa:6c:7c:f6:d8:fe:f7:b6:94:5e:5d:63:a7:a0:
95:70:37:62:38:39:db:c9:7c:6a:42:cc:42:a4:67:58:04:af:
28:48:d7:1a:91:2e:96:c2:a2:15:c4:e8:02:f6:f3:6f:5a:6d:
ac:83:b3:6b:9b:2a:4f:07:87:a1:fa:07:04:61:c3:e3:74:91:
b5:49:a1:a8:d1:2c:6a:7d:dd:42:2f:63:e9:b8:80:69:85:12:
03:2d:4e:aa:1b:7b:e6:5a:50:be:67:0b:21:a9:1f:29:7e:28:
65:c9:19:56:8e:38:1c:4f:ba:21:4b:15:1b:de:07:97:84:45:
2c:99:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:54 2026 by rpki-client