Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: 1BW/brNI50MBOlr4hh5ITXZBpKgVMSBaJa2d1jvnA2o=
Subject key identifier: 65:E2:B9:00:B4:89:3A:FB:B3:23:C5:C5:7E:3C:08:CE:5D:0B:FC:A3
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 019D37F6F62AF8A013224ECDDA3F748C140A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: 03AF
Signing time: Sun 29 Mar 2026 05:00:24 +0000
Manifest this update: Sun 29 Mar 2026 05:00:24 +0000
Manifest next update: Mon 30 Mar 2026 05:00:24 +0000
Files and hashes: 1: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (hash: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: SfktD0kBKr57Qa1n8TmPOJZqs8Sg3dnQhzYI28uu358=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f6:2a:f8:a0:13:22:4e:cd:da:3f:74:8c:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Mar 29 05:00:24 2026 GMT
Not After : Mar 30 05:00:24 2026 GMT
Subject: CN=65e2b900b4893afbb323c5c57e3c08ce5d0bfca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:a8:54:82:14:9a:51:a6:61:19:76:37:38:
22:99:07:b8:b8:10:fe:5d:18:c3:ca:76:c6:74:b4:
1a:b5:47:fd:3f:30:a6:52:80:73:a5:2a:bd:1d:ba:
1d:8b:b0:a7:5a:43:25:0d:92:54:ec:2f:86:4d:92:
e9:6d:c5:2f:f6:20:a0:8c:fb:72:7e:03:05:eb:97:
83:1d:1e:83:9b:09:b0:74:03:a7:4d:5f:d1:3a:52:
e5:a1:6d:59:9f:4b:25:03:d5:8c:7d:aa:0b:d8:cd:
50:fb:a1:e8:d4:ca:f0:68:37:bb:78:6f:14:ba:7d:
6d:28:c2:09:cc:f5:71:40:dc:7a:74:b5:80:2b:00:
a8:6e:3d:9e:47:bb:0d:f1:b9:03:65:2c:3b:7b:38:
e8:ae:f0:f1:57:04:6c:d4:85:f7:ea:e2:90:61:a0:
5a:a9:ce:22:be:b9:50:29:d4:d7:87:19:58:a3:d9:
3b:73:dc:b7:7f:b1:e5:8e:ae:3c:53:9b:51:70:30:
6e:4e:8f:5b:7b:5b:10:5e:7b:de:63:53:6a:e0:8e:
13:80:08:09:91:a4:23:50:0e:9d:61:06:98:bd:6e:
ca:58:38:cc:b2:dd:81:a4:5a:e7:a6:77:57:3f:48:
40:43:e2:43:f9:0b:f2:04:d9:94:86:34:82:2a:03:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:B9:00:B4:89:3A:FB:B3:23:C5:C5:7E:3C:08:CE:5D:0B:FC:A3
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d5:15:60:17:8f:86:18:d4:0c:22:b3:e1:b5:3b:4c:1e:bf:
ed:84:c1:65:57:2a:ee:ae:34:3c:ec:e6:8d:2a:af:16:96:d5:
3a:48:f1:c9:03:1d:d0:1b:14:29:7a:60:d5:3c:bc:04:9f:3a:
59:30:99:e4:23:56:36:84:db:7d:85:54:ab:73:b9:f8:10:a4:
1e:63:36:6f:94:af:80:c6:13:f5:e2:c4:76:1b:ae:6b:88:9f:
01:18:c9:a0:51:f8:7c:ee:bc:19:53:e3:78:92:0a:df:5d:a1:
29:51:b4:9d:b9:24:09:4a:ae:e3:08:47:d1:28:72:ff:42:00:
8c:8f:15:40:fc:ab:44:c9:5e:76:45:92:53:69:05:f1:3d:47:
91:7c:68:1d:f0:21:2b:75:83:a7:0f:53:10:e5:e2:da:86:e0:
4a:0f:09:d0:b6:7d:07:5f:84:e1:78:3d:7c:eb:32:4b:d2:b7:
c1:d8:22:5d:e9:0b:cb:6a:88:fb:c9:fe:90:23:34:f1:6b:e0:
0b:46:75:67:4d:c1:93:34:ff:9e:b6:f8:bb:13:4a:d8:24:bb:
dc:e3:f6:05:91:48:60:e6:c3:6f:0c:10:16:21:d1:7f:c4:79:
bd:1a:92:25:c5:95:93:f5:9d:18:1f:f7:3e:eb:f1:f0:fd:b7:
6d:3d:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:41 2026 by rpki-client