Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: MdPz0dLKLxUKimRrx7nSZULqsbZt6kTtWud8C72QzqY=
Subject key identifier: C7:D2:D1:8B:41:0F:ED:6C:99:37:CE:6A:97:50:C3:FF:A9:12:E0:F8
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 019D3941156E1F915DA4CD24A13D91C093D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: bO6d/EMqnogh3qUeLdwl5sAmFLj69rwyxeLG1ILF6fc=)
2: jrzLdp-DroztQ5yesperw0S2sxI.roa (hash: fM5zeQtq1zhKIrIjHXbNjUQhcEhAHLAsHH7/oZggY6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:15:6e:1f:91:5d:a4:cd:24:a1:3d:91:c0:93:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=c7d2d18b410fed6c9937ce6a9750c3ffa912e0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:81:2f:9a:28:04:95:9e:21:2b:d1:0e:9c:10:
a4:8b:65:94:1a:44:1e:49:32:ec:c5:af:37:c0:cf:
6b:83:a6:19:a3:d3:35:4f:d7:a0:e1:4b:d5:88:c0:
19:af:85:9c:02:31:46:49:79:72:87:1d:be:4a:07:
93:04:5a:9f:72:70:e0:df:12:fb:63:20:fe:28:f9:
39:ec:b8:84:95:36:90:19:61:68:dc:69:19:0e:a5:
b2:03:77:4a:af:51:7a:35:0b:35:f2:89:78:2a:d2:
8f:a7:12:40:26:35:04:52:1c:94:f5:f3:62:0b:61:
f9:05:e6:da:00:b9:cf:29:f3:e9:1d:81:7c:9e:fa:
ef:7c:a6:91:39:ac:aa:ba:11:ec:66:cb:ca:37:a6:
34:f1:d0:d7:9c:9b:84:95:ad:3e:bd:f0:42:1a:43:
d5:cc:4b:5a:d8:31:75:a4:16:87:3e:b4:07:b5:c6:
b1:17:a8:e6:ff:13:68:bc:9c:94:11:f0:05:62:94:
f6:02:a7:be:37:4b:5a:fe:9a:0b:e5:fe:ae:9b:cf:
71:bf:08:4f:7d:a1:09:56:fd:cd:6c:8a:a3:00:c8:
ff:d9:55:3a:70:b4:7e:cc:1e:4d:66:06:4f:35:a2:
80:e8:3b:1a:f0:40:05:b7:e4:81:ad:4b:8b:fe:81:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:D1:8B:41:0F:ED:6C:99:37:CE:6A:97:50:C3:FF:A9:12:E0:F8
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:93:d1:df:37:a1:0d:69:48:0b:56:eb:ce:70:5f:92:e4:47:
43:31:9d:4c:ff:aa:97:7c:cd:76:6a:40:d6:e4:be:fb:ac:bd:
a9:a2:b4:61:1d:d2:91:49:e2:66:aa:e2:1d:d4:ef:54:17:81:
75:e4:32:a9:e0:cc:a2:68:b0:24:c7:e8:fe:bd:2e:54:de:0c:
33:d7:f3:c5:ff:a1:ef:57:28:3f:e1:22:e6:a6:08:21:58:67:
a2:4c:f1:81:a2:e1:e3:1a:62:39:2d:9d:ea:6c:f4:63:05:81:
0c:7b:b2:2c:dd:3b:f7:32:ca:aa:04:38:6b:c3:57:0b:be:08:
08:eb:cf:10:5a:e2:be:1d:db:aa:e5:ff:32:54:1e:e2:61:8d:
9d:3b:35:ea:5e:ac:1a:10:4b:18:1f:cb:f1:1d:cf:f3:59:8b:
ed:4c:b8:11:b8:54:33:dc:c6:e9:2b:50:16:d7:bb:b3:91:cc:
f4:f0:f4:4a:9c:f6:1f:a6:2b:19:7b:36:2b:35:65:e9:43:9a:
a6:94:a2:d7:cf:93:90:0e:5b:ee:e0:e9:5b:3f:94:a6:8b:71:
40:13:1c:4a:a6:ae:d7:15:61:39:c0:d1:00:d0:20:37:d8:c4:
0c:81:4e:6e:04:b7:ba:93:e9:30:f1:9f:db:0d:ed:b5:bd:51:
6e:6c:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:40 2026 by rpki-client