Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: f2y8R0EJauXvjLPhDuH0tI3xpGj/MbROjiv+MvN2Kzg=
Subject key identifier: 1F:51:08:E4:EF:26:F1:7A:B7:BB:15:5C:9F:45:EE:CC:B1:07:D4:A6
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 019D3789919C49F48DAEBB90F1F1F01778EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 1522
Signing time: Sun 29 Mar 2026 03:00:55 +0000
Manifest this update: Sun 29 Mar 2026 03:00:55 +0000
Manifest next update: Mon 30 Mar 2026 03:00:55 +0000
Files and hashes: 1: W5uRfZYMXNW2milH0L5Q1SQBK_Y.roa (hash: twzlUdXhM38SqnTujzlhunBgW581D9DNlyRL1ec0bWg=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: elf3OLKVgb+kiVo8uJ2ohUIdBOOZWbDfq4Qqt/BiPoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:91:9c:49:f4:8d:ae:bb:90:f1:f1:f0:17:78:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Mar 29 03:00:55 2026 GMT
Not After : Mar 30 03:00:55 2026 GMT
Subject: CN=1f5108e4ef26f17ab7bb155c9f45eeccb107d4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:87:04:b4:98:9e:57:99:2a:65:c7:5c:c2:
a2:60:4a:4d:b1:f0:10:02:de:0c:2b:54:22:fc:b0:
d1:d1:8b:2e:84:03:59:ce:ea:df:bf:d5:1e:d1:29:
f3:e1:c1:60:06:fe:01:e4:fa:92:2e:94:91:72:a0:
c7:19:75:c7:9e:6f:2c:86:6a:48:0a:12:55:5f:a6:
66:f8:71:e6:99:8b:fb:76:34:43:9a:c8:5d:e7:36:
44:fe:ca:83:7e:d3:c7:29:5d:1e:e2:a4:3c:f3:4c:
4e:2e:43:ac:71:ca:cb:2c:84:c8:86:04:de:92:5a:
8a:e9:b1:83:49:8b:f8:5a:c8:a1:90:a9:b5:d6:40:
97:0f:20:d9:1e:b3:0e:d7:8f:8b:4a:e1:c0:ca:8e:
23:c3:ef:81:41:ff:26:b1:92:9c:eb:6b:0b:3e:36:
5e:60:ac:93:a9:d8:78:1d:63:db:2f:dd:69:93:d9:
1a:4d:1a:07:65:2c:f2:75:6b:a4:6f:dd:e1:40:44:
32:df:4e:a8:97:1c:55:57:a3:ec:c2:a4:3d:62:77:
4b:e5:ea:f4:a2:25:ca:b4:53:df:8d:b0:8e:1d:19:
93:04:90:84:7e:4b:3b:b9:66:80:1b:16:8d:97:a5:
6e:76:17:0e:19:56:73:e5:67:b8:c5:49:5e:0a:65:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:08:E4:EF:26:F1:7A:B7:BB:15:5C:9F:45:EE:CC:B1:07:D4:A6
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:31:e2:f4:d5:80:66:22:60:77:1b:27:bb:4a:c8:3f:16:60:
54:3e:ab:b6:13:d0:47:7c:01:cc:91:1b:f9:27:5c:3a:ce:3f:
f0:fc:ef:28:2d:b5:d7:34:b1:87:2c:f5:72:75:f8:5c:e3:0e:
02:2f:22:62:76:57:4b:24:84:ce:14:fc:5c:b3:fa:f1:22:cc:
f1:3f:17:82:1d:82:15:60:1e:1a:d2:41:01:e7:01:17:37:6e:
8c:01:46:0a:76:4d:34:36:1d:78:c5:b6:51:dd:49:34:ae:ae:
2f:2e:5d:4d:85:84:72:a1:84:28:9d:b6:0b:a4:0b:86:d9:cd:
91:ce:37:d8:0d:dc:b4:ca:ab:37:a2:c6:01:f0:bd:95:61:76:
88:c3:f2:88:46:f6:b1:04:52:fd:57:b2:e7:40:c0:99:3a:68:
fd:e2:84:98:fe:20:bf:cb:0f:86:be:51:3a:77:33:7c:c3:6f:
0f:22:6b:2a:76:a6:fd:7f:1c:ef:5a:94:06:5e:db:0b:67:c7:
ed:d0:52:f0:1e:c3:5d:52:e6:af:52:f0:5c:7d:02:61:de:d1:
cb:db:96:52:24:8f:b0:7a:cf:44:9b:50:fd:bf:0a:95:62:40:
b2:db:29:87:41:1c:78:7a:8a:3f:d0:54:ec:df:11:67:b9:2b:
b9:2e:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:50 2026 by rpki-client