Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: Y0HmpddFbwePGgYGizVoLw6TLSfVYw+CootsTp/w3Ic=
Subject key identifier: BD:0E:A2:93:B7:D3:13:9B:02:38:2D:72:39:0E:69:0E:96:F9:46:B9
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019D39408880FC6C656CAB29D93A21385D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: Knk4VYHDcIiBaCF1Fb23lu5Bxhc.roa (hash: 92P0sRZzCNI5Tycv/hRZey2LUOQu+EgEzREqInMSicw=)
2: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: PDaIbJpwILxcM+0AcEDscfrH9EI1qqHLkyahXZlcLdw=)
3: tEF7W8QAASjmD3ZJv31PpbtJPmE.roa (hash: +pnJPXwKfh/vR28pIs9jPAqM5aVgozefoHrHe0Y59Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:88:80:fc:6c:65:6c:ab:29:d9:3a:21:38:5d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=bd0ea293b7d3139b02382d72390e690e96f946b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:d1:45:9f:9d:f3:e1:d2:d5:ef:16:17:e3:
eb:43:0b:6a:1b:b3:6d:75:bd:5b:f6:4c:94:f1:ed:
06:a3:61:8e:59:8a:7a:f3:40:c8:45:8e:5b:b6:7d:
bd:20:49:22:9d:6f:40:48:fa:99:8e:d6:20:84:b0:
6c:b1:3f:83:1d:ac:37:03:58:cf:36:67:81:15:26:
10:66:96:91:6f:c3:07:c6:fa:34:9b:67:cc:ae:f6:
0a:51:6e:ae:cc:8a:68:a7:c3:44:24:8c:f5:03:c2:
cc:5f:6c:8d:05:66:d7:a4:5c:c6:55:62:40:5d:88:
bb:08:69:a5:68:43:94:b7:05:cc:42:ce:46:81:31:
b6:c4:08:af:ec:26:92:72:62:7b:3d:92:f5:c8:13:
23:46:37:80:85:a6:24:78:40:85:3f:3c:81:ff:4d:
f9:fe:47:69:db:d7:db:60:89:42:03:0f:71:14:34:
96:eb:3b:bc:5b:33:12:42:0d:d6:05:b3:2d:5c:7b:
56:6a:49:78:e5:7a:47:60:23:ae:dc:d0:5a:c9:15:
f2:fc:31:0e:1b:95:2e:1e:04:9a:ef:fc:bb:18:d2:
6d:ca:0f:02:3f:be:63:1a:6c:dd:81:b2:2a:e6:b8:
80:15:69:fb:aa:9e:a5:db:bf:72:e1:2a:d6:87:2e:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:A2:93:B7:D3:13:9B:02:38:2D:72:39:0E:69:0E:96:F9:46:B9
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2f:5f:a7:56:15:e1:e7:ae:2f:00:59:ba:f7:54:ec:3e:75:
cc:54:89:a8:dc:78:d9:db:24:4a:02:99:4b:cf:50:de:76:1c:
0d:57:b6:d8:53:03:8f:3a:22:6f:8a:18:2a:75:92:33:a3:0d:
13:30:b3:5e:1c:74:50:a8:fb:25:f2:6e:38:a5:4d:59:57:c2:
ec:22:1e:ad:e2:48:d7:3e:47:7c:85:99:03:d4:b5:5e:0e:15:
7b:02:17:ff:f5:7a:6e:0c:a9:b6:36:78:29:d0:de:17:2b:0b:
1d:3c:e0:ce:9a:d0:92:9f:ef:d4:91:f9:24:c9:67:7d:bd:ff:
33:d6:6b:99:d8:75:7f:29:39:11:50:aa:f4:fb:fd:09:25:57:
eb:f7:0d:c9:51:66:91:92:d3:6e:8e:fb:37:01:d5:b7:b3:05:
0c:3d:a7:b6:f2:49:d3:8f:37:e9:07:93:69:e0:3a:42:65:cc:
0b:5b:a2:82:d5:73:33:c8:e9:81:08:66:39:f2:f6:67:cd:7d:
b7:3d:ed:e7:51:8b:0c:0a:bf:e7:54:dd:21:10:9e:8b:6a:15:
7a:07:c4:b8:06:c4:d9:e2:de:6a:40:d2:7c:12:28:b2:02:22:
54:e9:a2:ae:3d:e9:f4:9f:34:dd:3e:60:42:50:a1:29:2f:e3:
46:0b:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:17 2026 by rpki-client