Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: WWV+SxJ9Ye7x6LNgg9YZ60e0yWV9br1UxJOAlAAlptA=
Subject key identifier: 42:F2:E3:5D:72:D6:F3:84:C8:A2:06:F6:37:CD:44:F1:24:5C:76:A0
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 019D115793F4A40D06A1F410085F0A2FF546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 0A2C
Signing time: Sat 21 Mar 2026 17:00:45 +0000
Manifest this update: Sat 21 Mar 2026 17:00:45 +0000
Manifest next update: Sun 22 Mar 2026 17:00:45 +0000
Files and hashes: 1: aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa (hash: 5JOSX/QZCccK/gUOeYHPT0U61k8N4LEoiccIN7jDjPo=)
2: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: 9DWfdxRcLMsq09MwAufxa17PtHUPA/6SCPzJhpvp/pM=)
3: nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa (hash: SjtdaWQXMJk13J5xCejsgWLSIcSxD709iSf13daT5JQ=)
4: yd8JpikDeAGL1RyToXLtaBhLXs0.roa (hash: WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:57:93:f4:a4:0d:06:a1:f4:10:08:5f:0a:2f:f5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Mar 21 17:00:45 2026 GMT
Not After : Mar 22 17:00:45 2026 GMT
Subject: CN=42f2e35d72d6f384c8a206f637cd44f1245c76a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:71:02:23:27:21:47:b3:e1:5a:f1:63:1e:
bb:73:b6:ab:2b:e6:c1:35:37:de:e2:01:77:58:92:
2d:4a:4a:c4:43:7d:eb:d3:af:14:6e:c4:41:fc:4e:
23:6b:d9:95:bf:21:97:b5:2a:1f:46:d6:63:3c:38:
2b:69:59:b2:06:5c:d9:43:4c:94:d6:4e:25:82:07:
c4:3d:98:f9:08:8f:4d:f8:84:d9:d5:8e:ba:dc:8f:
4f:8e:9b:4d:2f:68:b7:9f:c4:7e:75:2d:e8:da:7e:
e1:8c:7b:3b:a3:41:e0:9a:1c:3b:67:b9:51:bf:cd:
ed:4f:52:28:a2:8e:19:f6:31:d6:7f:a0:67:ed:b7:
8e:df:4b:98:0b:35:04:6d:dd:f3:a2:4c:54:07:0b:
3f:a1:c2:f0:8f:cb:4b:e6:f2:cf:1a:28:91:bc:90:
9a:ad:13:dd:52:a1:55:c6:4f:a5:69:cd:fc:57:13:
44:0a:f0:e5:71:a6:d0:f0:2c:08:94:23:0c:a7:8e:
ab:36:3b:6e:13:3e:c4:59:b8:04:e8:72:aa:0b:0d:
82:32:5a:0e:bc:dd:6f:96:b9:20:6d:68:b9:b9:89:
7a:25:7b:27:42:0f:4e:23:08:8d:8f:a8:04:9e:16:
2c:16:da:c0:04:0c:15:b4:0a:aa:73:46:e5:d7:ec:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F2:E3:5D:72:D6:F3:84:C8:A2:06:F6:37:CD:44:F1:24:5C:76:A0
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:53:45:f7:54:9e:ca:c7:ec:d7:3b:91:cf:9a:04:a4:57:18:
5a:f6:19:bf:44:43:8c:fc:dc:8c:0e:f8:0a:3a:fb:2c:d2:ac:
91:3b:51:cf:6a:2c:df:71:e7:a4:f4:2a:5e:6a:9b:85:02:be:
59:5e:99:5b:f7:2b:ea:a2:0e:5c:9c:c4:3c:27:48:15:15:aa:
79:f9:4d:96:f6:7b:b1:9d:56:35:ac:67:6b:d7:a7:d8:41:f2:
12:5b:a2:24:28:99:5d:41:15:1b:e2:91:78:5d:88:09:3b:ac:
40:26:a7:d1:a4:a0:b4:a5:e2:2a:cd:8b:7d:10:34:70:f8:d4:
15:f6:47:13:0f:1f:63:63:41:28:5a:c8:cb:3b:26:4f:de:13:
6a:01:62:1b:74:04:5a:89:8e:0c:cc:7c:8e:1b:cd:e1:a0:dc:
bb:51:37:5e:26:c1:db:d9:fb:8e:e5:e1:c2:73:7a:b9:6a:ff:
43:0f:42:7f:15:7a:03:f6:28:e8:6e:c2:2f:3b:fa:91:38:d3:
1a:0c:9b:10:77:92:d9:58:82:e2:79:65:d1:6b:22:cc:4f:3b:
d8:0c:3b:48:9e:8e:5e:2b:e2:b3:b7:37:0e:82:b5:f6:00:bd:
4f:98:0a:be:b7:ad:96:13:45:a4:ac:ec:68:3e:c5:6a:c1:84:
4f:a7:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:09:50 2026 by rpki-client