Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: Pn/STjCW2FVKVUNL92jQhojYQBEmzPTPdHi8NwX0FgA=
Subject key identifier: 0F:B6:D2:E1:6A:4F:D7:40:8B:4E:2D:E5:2C:15:B3:26:79:47:B1:DF
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 019D37F6FB2A0A2F0E86CCACED170A03E3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 0802
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: ZdluKAeiGgNMdIKSFBpouvQoMFU.roa (hash: c9wab7GyUrk1eImAM4TBW2aXlrKgz7syJ0UrZ/J8cJ4=)
2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: mhvOxKzjPDUhrvX26JtSf+ijkmdVmpzHgFB6N1hPuBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fb:2a:0a:2f:0e:86:cc:ac:ed:17:0a:03:e3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=0fb6d2e16a4fd7408b4e2de52c15b3267947b1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:aa:dc:1b:96:de:ec:46:cc:4b:1d:6e:b7:
1f:ab:a4:e7:fe:22:2d:6f:56:46:a3:a3:1e:5a:4e:
d5:16:ab:11:ef:67:f9:4f:6f:fa:0d:93:54:3e:45:
f6:c9:53:fd:b8:12:68:23:5f:5d:5e:24:29:22:a6:
9c:7d:0c:0c:00:41:ee:83:39:8a:bf:c2:4b:42:80:
cf:d0:1c:b6:59:21:73:5b:24:ce:60:60:14:bc:74:
b8:0e:c0:1e:b3:fe:1b:7c:72:ed:17:81:29:01:69:
bc:90:e7:7d:a5:06:7e:ef:69:ef:3e:09:4f:32:23:
4f:fc:b1:31:1d:93:76:39:b4:9d:30:f7:9b:ad:8e:
46:e1:a3:9b:6d:63:35:b5:72:ad:27:f5:a3:b5:75:
c6:0a:dd:6d:22:34:f2:ac:34:e6:88:f9:6e:9f:7f:
69:c7:80:6d:20:50:62:a9:cc:65:1a:ff:4d:a8:0b:
7a:7f:b0:c4:f9:b5:91:b6:c4:21:57:f1:7e:04:d9:
23:cc:db:79:f7:d3:06:90:5a:9e:9a:c5:5f:1b:22:
5c:46:2a:d9:8d:d8:03:62:20:ea:27:f6:83:c6:87:
f0:33:6b:7a:d8:57:4c:41:78:f2:a2:66:aa:99:51:
7a:4c:77:46:bb:ca:4e:e9:0a:51:5d:de:9f:bb:2c:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B6:D2:E1:6A:4F:D7:40:8B:4E:2D:E5:2C:15:B3:26:79:47:B1:DF
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:87:36:de:7c:00:09:17:73:ef:fd:bc:2e:39:60:a3:70:f2:
ee:39:f1:34:5f:04:a1:8e:ec:33:31:e2:ea:bb:ac:ab:2a:eb:
d1:ca:f5:d6:04:2e:6b:de:88:2c:36:93:80:79:44:74:bd:6c:
7d:da:5b:cb:18:c5:f7:33:ed:13:b8:50:1a:76:5d:e5:19:47:
20:66:98:63:20:90:07:6b:27:d4:a4:44:b2:33:3f:ca:a2:ca:
d4:75:9e:0d:48:cb:20:0d:8d:8b:cf:5f:55:ec:b7:7f:97:d7:
83:0f:6d:23:bd:6c:bc:6a:61:94:08:72:19:e1:0d:00:31:bd:
ca:15:22:91:e2:5f:74:c9:86:e7:36:c8:a4:1d:eb:3e:7e:56:
98:d6:70:03:aa:27:de:a1:54:13:51:a2:06:c8:e3:e2:62:74:
25:3b:68:af:25:0e:d1:41:84:d7:b3:00:4a:fe:ce:c8:b9:7f:
5d:dc:43:3b:6b:12:35:93:86:97:21:d2:8a:45:0b:f5:5d:f2:
fa:15:db:78:78:f2:60:d4:3b:bc:bf:55:df:9f:63:c6:a8:1f:
26:68:f2:7c:39:5d:c0:74:7e:96:56:7d:fd:0d:64:e7:b5:a1:
7a:03:d9:d2:ea:90:3f:16:2d:10:30:c3:07:51:bf:b1:e2:b8:
3f:54:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:56 2026 by rpki-client