Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: Zs/vFsdkk4gDX5cuO87e2wBwQii0gDW6cvfDdJAluQM=
Subject key identifier: 4F:21:D4:2B:76:CF:74:7A:CE:9B:59:89:51:EC:55:C1:97:91:0A:F4
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019D39416F770FE556BBC48C8EC8B78F9D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0B5C
Signing time: Sun 29 Mar 2026 11:01:22 +0000
Manifest this update: Sun 29 Mar 2026 11:01:22 +0000
Manifest next update: Mon 30 Mar 2026 11:01:22 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: WGmo_mU3SAa7xrV4ZnvE-M0GlaY.roa (hash: pAqCFCdg2/as0581Q0MGLjKUIL2u1WKZ22qGZB9i2AA=)
3: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: qWc9u/ESeTuRnjzeE+nCWAiBVrk5klnEdIl3ySHv6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6f:77:0f:e5:56:bb:c4:8c:8e:c8:b7:8f:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Mar 29 11:01:22 2026 GMT
Not After : Mar 30 11:01:22 2026 GMT
Subject: CN=4f21d42b76cf747ace9b598951ec55c197910af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:5e:1c:1c:7c:4a:38:1e:f5:fe:da:42:5a:
e0:df:d3:01:6d:dc:22:23:ec:18:42:be:ea:4f:c5:
6a:d2:6b:51:93:ac:37:b7:0d:0e:db:c8:7e:85:34:
97:55:cb:cf:76:b7:fd:c4:5b:68:d3:ce:f5:67:12:
c4:e3:c1:77:cd:98:18:11:e0:28:c6:f4:d7:0f:21:
05:d6:d8:4e:8e:4d:ac:2c:68:a7:ad:80:83:87:37:
e0:16:18:32:0a:2a:7b:46:b2:bc:c9:66:d3:f8:fc:
19:c5:96:07:f0:8b:39:0e:a0:bd:e4:23:46:58:eb:
87:80:80:fc:70:da:7d:5d:67:10:e9:40:d6:d3:ec:
33:bf:e0:76:aa:85:5c:6b:d7:7f:fd:d9:57:39:60:
70:2b:89:00:d9:1f:5e:5a:bc:7b:1f:2c:23:cf:26:
ec:73:87:a5:de:f4:18:cf:07:27:cf:84:42:71:7f:
c7:79:c3:3c:6b:a9:b9:a9:4b:02:69:55:2a:31:f8:
cb:48:0e:0e:78:36:ca:b3:af:4e:02:b3:be:0b:49:
09:0d:ef:85:50:8a:32:ec:d3:56:db:96:7f:c5:5a:
e8:4c:f5:cd:71:ee:bd:1b:10:21:70:2c:28:11:fc:
02:89:0b:9b:1b:a8:12:85:f9:36:99:e3:e3:f8:04:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:D4:2B:76:CF:74:7A:CE:9B:59:89:51:EC:55:C1:97:91:0A:F4
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:da:76:2b:4d:5f:e5:16:ab:7b:02:c5:af:ca:66:89:00:60:
aa:2e:d0:8f:24:4f:14:f0:99:d2:a5:a3:ad:0e:83:9f:5f:84:
6e:36:96:cb:4f:ea:d7:e0:9e:75:2a:2f:61:c6:8f:44:03:72:
b4:89:b4:24:f6:ed:24:b0:da:ef:b9:38:ec:47:33:c6:ec:aa:
dc:8f:91:83:21:a8:e8:b4:47:f6:6f:e5:2e:33:c1:38:1b:bb:
35:0e:8c:f0:29:5b:88:ae:b0:11:a8:e3:51:39:1e:df:46:df:
91:45:8c:d2:c0:ed:78:6a:ac:7f:35:46:dc:88:7d:9c:c3:61:
fe:c4:e1:43:24:43:01:7f:65:1e:cc:6a:88:29:b3:22:5d:4c:
43:5a:69:d3:58:3a:06:49:4d:d9:21:37:57:2d:f4:e5:85:d6:
f7:b6:a5:67:1c:8c:ad:f1:25:65:52:46:34:9f:5e:56:75:e0:
c8:c4:3a:ac:f0:ac:07:d5:66:4d:d4:67:16:24:01:64:c3:73:
2b:b1:8e:71:3b:48:34:68:93:00:65:13:6a:bc:98:84:47:57:
83:5a:e8:2c:e0:25:95:cd:c2:96:ad:1c:85:14:86:5b:f3:d5:
60:96:b5:3b:3f:94:57:f0:e5:7d:f8:a7:d7:72:2c:99:7a:95:
3c:38:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client