Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: tsLJXp1pPxBBhrFpSO5xhXkzqUZ1OdG3iQPTeDkTxTA=
Subject key identifier: 4C:B6:7F:6A:1B:4B:87:EE:FC:A3:91:0A:AC:A8:52:B2:CC:A0:50:6F
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019CECA6453EC9D586CB3F22E39C279D6994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 186A
Signing time: Sat 14 Mar 2026 14:00:45 +0000
Manifest this update: Sat 14 Mar 2026 14:00:45 +0000
Manifest next update: Sun 15 Mar 2026 14:00:45 +0000
Files and hashes: 1: MBje2Kaa62IBDG3vLdQ11jbu-BY.roa (hash: gjY1RtH2j/aQua697MsSq0fqSF6zUpGLdhWZ8DhMdzU=)
2: Ww9xlTTYnd90caDgEeVmTVfm-BE.roa (hash: 7JRO1QHni0n7t5LFba599MfSp8my+dFKoYt3fvY4Y8A=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: 0kBUSu7kgQqMhoY23/vhqfei5ZJAEqtT+Pw0Z2spINg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:a6:45:3e:c9:d5:86:cb:3f:22:e3:9c:27:9d:69:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Mar 14 14:00:45 2026 GMT
Not After : Mar 15 14:00:45 2026 GMT
Subject: CN=4cb67f6a1b4b87eefca3910aaca852b2cca0506f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:90:ed:0f:d4:bf:08:04:7c:51:68:f3:90:
b4:8d:9c:91:85:f2:91:96:54:93:88:c7:4d:c3:51:
da:26:90:4e:28:76:dc:75:c4:ec:88:48:86:28:f0:
74:28:60:ec:1b:5f:dd:fb:1a:57:a5:6e:da:5e:06:
0d:f6:5d:58:10:7d:fd:57:7e:af:d9:21:46:b9:15:
f7:e2:35:36:11:9e:ec:ce:5b:cb:c5:12:1c:43:38:
f5:87:57:86:be:2e:47:a9:ec:54:8a:d5:48:99:5f:
2a:46:05:92:a7:1b:23:f4:4c:5a:06:c0:41:42:7b:
3f:8d:f5:3a:32:8d:d5:a2:e3:b8:bf:77:26:2e:50:
e2:4b:d4:e3:b5:f7:60:26:8d:ef:3b:10:9b:50:29:
e7:fd:aa:51:26:d1:42:ea:91:d0:7e:65:bd:00:5a:
24:7e:83:ff:a2:b9:a9:17:0b:f7:09:91:2e:d1:d4:
d9:31:0d:05:e8:1c:86:78:81:23:a0:5a:fe:95:76:
06:f7:e9:ec:45:5a:ae:a2:49:2c:ed:53:1f:30:c3:
7b:bd:b0:51:14:9e:ee:87:24:9f:4b:a0:65:3a:c9:
b9:74:84:66:3e:43:8b:23:fc:63:3d:01:48:23:38:
25:2a:4d:a7:79:83:83:58:1c:a0:d1:2c:04:3c:68:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:7F:6A:1B:4B:87:EE:FC:A3:91:0A:AC:A8:52:B2:CC:A0:50:6F
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2b:0c:6a:c7:c6:7f:3c:dc:bf:55:32:79:6c:ba:5c:e0:a6:
aa:b7:24:f2:4a:4f:f9:00:e9:2c:7a:51:0d:6f:88:25:ac:1d:
56:60:4d:49:8f:3a:fb:87:9a:27:9c:62:59:5c:5b:3e:11:32:
a8:35:bc:d1:2b:e4:78:35:9e:60:59:77:fd:f9:27:3f:5e:2e:
f9:30:59:de:d9:36:4c:8b:57:8a:d2:cc:f2:11:74:24:d0:52:
18:9c:b8:a7:f6:61:16:85:9e:2a:02:6e:f5:f9:d3:18:35:aa:
43:fe:b9:5e:ed:c0:16:6d:2d:c5:b9:d6:b6:3f:1b:13:0f:94:
59:97:c4:aa:9b:8f:db:94:52:38:2e:65:e9:c8:75:b9:6a:0e:
ba:e4:2b:38:ac:8c:6c:d9:b1:15:47:9d:5e:70:d6:af:eb:2a:
f8:34:a8:03:15:f9:1f:b8:fa:c1:06:2f:64:b5:fa:00:7e:d9:
0b:15:c7:76:a9:58:8f:76:44:ad:e2:c8:fa:fb:ec:88:9b:f2:
a1:0d:2f:ea:9d:a7:f6:14:38:22:10:77:6b:86:0a:db:d0:f0:
4c:a7:0f:02:0e:72:80:4b:22:71:89:f2:f4:5a:83:86:e7:0d:
51:7e:1d:6f:a6:da:1e:f1:64:eb:6d:fa:5a:5d:b6:db:f9:78:
20:6d:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:50:47 2026 by rpki-client