Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
File: juAVoDODWjT8FmKMXFuAQ0IW8k4.mft (raw, json)
Hash identifier: fenXPUNsDUjWHk9tBG4LQ4X6/WzloQiGiZiGFoBla1c=
Subject key identifier: A1:F5:38:47:5F:5F:42:96:3A:6C:A2:00:EB:03:09:3D:A7:8D:00:2B
Authority key identifier: 8E:E0:15:A0:33:83:5A:34:FC:16:62:8C:5C:5B:80:43:42:16:F2:4E
Certificate issuer: /CN=8ee015a033835a34fc16628c5c5b80434216f24e
Certificate serial: 019D3940F24743CEC3B535A4C56140431D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
Manifest number: 6D
Signing time: Sun 29 Mar 2026 11:00:50 +0000
Manifest this update: Sun 29 Mar 2026 11:00:50 +0000
Manifest next update: Mon 30 Mar 2026 11:00:50 +0000
Files and hashes: 1: EJfABy6xbptq-YVkmN9Ysa6iIlo.roa (hash: P40yzqL11f3walON7ALTY/q0LTBj9gB5kkP4LzmmZ9I=)
2: juAVoDODWjT8FmKMXFuAQ0IW8k4.crl (hash: 1ozIk600tp55DCp5Eec4ajwQjyfPcbmhY4RsLOFDdhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f2:47:43:ce:c3:b5:35:a4:c5:61:40:43:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee015a033835a34fc16628c5c5b80434216f24e
Validity
Not Before: Mar 29 11:00:50 2026 GMT
Not After : Mar 30 11:00:50 2026 GMT
Subject: CN=a1f538475f5f42963a6ca200eb03093da78d002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:fd:ca:d9:4e:ea:ec:bf:bb:54:29:05:9f:
44:7b:11:5f:70:56:16:19:a4:6f:be:7c:1e:cd:62:
14:be:cc:1b:e8:d9:13:36:2d:35:f6:4a:64:61:6f:
83:cb:a4:5d:0b:47:97:fb:46:fa:03:7a:c3:83:73:
8e:45:09:83:65:96:2f:9c:69:28:ac:5d:c2:70:87:
31:be:9a:0f:f0:bb:7c:f7:a9:fd:01:26:f4:bc:ad:
1e:21:e1:4c:3b:36:41:f6:a1:65:5f:e2:cd:f1:a3:
5c:90:b3:0a:d0:f2:44:dd:b1:f5:11:b3:fa:94:d1:
cf:03:c2:6c:81:96:00:7d:84:0f:a7:34:20:ae:5d:
a1:17:71:5f:83:5d:b8:87:d0:a0:0b:eb:42:58:8a:
d2:76:88:06:db:33:84:d8:95:ee:53:0e:ff:a4:ff:
b3:be:f5:0d:9f:c2:2f:4a:ee:6c:48:e7:87:0b:40:
ab:25:6b:65:34:4e:82:33:80:65:a0:5f:18:6f:46:
eb:7c:39:dd:0e:23:b9:d2:a7:a6:3d:d8:d2:31:a6:
36:2e:21:ae:5c:62:58:b3:2e:32:c6:cb:03:7d:14:
29:90:82:21:25:a4:ca:97:f5:01:ce:34:16:80:23:
53:37:fb:91:f6:bb:3e:34:84:f8:a0:b5:c2:06:8b:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:38:47:5F:5F:42:96:3A:6C:A2:00:EB:03:09:3D:A7:8D:00:2B
X509v3 Authority Key Identifier:
keyid:8E:E0:15:A0:33:83:5A:34:FC:16:62:8C:5C:5B:80:43:42:16:F2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/juAVoDODWjT8FmKMXFuAQ0IW8k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/60213a-edd5-4f21-80d9-d29e8b1b6f2f/1/juAVoDODWjT8FmKMXFuAQ0IW8k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:d7:f7:a2:6c:55:5a:eb:1b:ca:3e:74:a6:b2:ca:12:74:
f7:1d:5d:eb:37:8f:1f:66:81:aa:08:82:ad:2e:db:de:c2:4f:
45:a5:6b:22:50:41:81:32:af:f7:aa:7a:fd:1a:53:2a:bf:3d:
09:e1:bd:aa:9c:be:29:b0:3b:e9:f3:4b:03:df:5b:25:a0:86:
c2:e3:ac:50:15:2e:30:94:9b:54:c6:54:f1:07:67:85:18:e8:
b7:79:0c:6d:cc:be:e0:d3:96:83:8a:05:89:3b:74:5f:a3:9c:
87:01:42:05:04:59:b7:22:65:66:2f:fb:8d:d3:09:3a:76:f1:
91:64:8c:7a:ff:fd:e0:78:a4:ce:58:80:36:fc:f9:12:eb:53:
7b:4a:01:99:b5:3a:57:33:ac:5f:9e:8a:e1:d3:af:90:27:15:
04:01:1e:b0:0a:ce:d6:5f:07:54:be:06:b2:c8:37:82:3f:49:
e3:17:47:09:78:f6:47:1a:91:0c:9f:ee:f7:03:60:50:0d:3a:
d1:18:3d:a2:24:5c:58:74:b7:a9:46:83:9f:fa:20:51:36:e9:
07:51:78:24:47:93:49:4f:5f:ac:fa:cd:c8:01:23:73:97:fe:
1c:ef:3f:71:81:79:3a:6b:76:7b:2b:79:d8:cc:a3:fd:65:98:
92:d7:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:47 2026 by rpki-client