Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: paPW2ic3/YNMbmPvrfRI5BHt3IctRXo+iNNgpotzz0M=
Subject key identifier: 0E:D4:2E:0A:81:1E:C1:1E:6F:52:63:76:EE:44:0A:BF:C6:83:11:62
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 019D3940FC8B1CF93BCFB8C72AFA813845C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 17A1
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: RCrEVHPQO5ZNEyF8KAmfbYplEFM.roa (hash: hi87IK6C5zmMGdTPjH6NsPzFrsGUyr24qNPoi0fsEN4=)
2: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: +LczXdd0O5qCh/7hF4+VhN1tU+CdpTKBmClUd/NwPK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fc:8b:1c:f9:3b:cf:b8:c7:2a:fa:81:38:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=0ed42e0a811ec11e6f526376ee440abfc6831162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:04:99:be:cf:6f:d0:2a:3a:bb:7c:eb:21:
1b:56:b0:0a:02:d6:d5:3d:85:97:a0:9e:a4:f7:35:
00:80:f3:10:a0:c4:3e:57:ff:4c:03:12:37:80:82:
08:ad:28:d5:c8:1a:1b:d4:29:e1:e1:59:ea:22:f3:
63:a9:9a:1e:15:22:4f:dc:49:5c:9d:90:e1:4c:7e:
30:56:73:68:9b:41:b2:0c:57:13:e3:6a:80:d5:ec:
fc:e7:ff:a5:70:f4:ac:e2:3c:ad:99:93:e4:55:93:
ae:00:da:44:9e:f5:6f:bf:ab:61:2c:b8:14:b1:18:
0c:15:7a:84:2a:09:04:41:e5:da:bb:a4:f3:58:8f:
c1:d1:26:eb:6b:1a:6f:ef:43:af:7f:f2:09:1c:cb:
e7:86:3f:d7:0d:a3:9b:aa:33:d9:0d:ea:7c:95:cf:
e8:f6:f5:91:e0:b0:05:fb:8c:61:39:1f:eb:f6:4f:
d1:fa:90:df:9e:55:27:6f:41:fd:f5:24:c2:c9:ca:
b2:70:c2:6f:64:4c:d2:b3:12:77:50:1b:8a:73:56:
32:8b:a9:13:49:93:12:3a:d2:7f:ee:3b:76:95:85:
ac:58:11:96:45:6c:3c:27:06:81:88:30:0d:95:7b:
1c:8b:76:95:fd:e5:1b:51:37:e7:e4:f7:54:98:c1:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:2E:0A:81:1E:C1:1E:6F:52:63:76:EE:44:0A:BF:C6:83:11:62
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:71:02:45:59:c8:b8:10:20:3d:5f:70:05:74:d4:36:c3:69:
12:33:e8:92:4a:c2:14:f6:44:bd:e9:3e:9a:44:53:38:65:cc:
9b:51:d5:f4:4a:97:11:ef:fc:e2:93:4e:d6:c7:b7:25:42:b1:
62:6c:64:4c:7c:11:0c:d2:9e:f0:21:70:35:f0:0e:ca:d0:cf:
d4:95:7c:84:9b:6a:7b:47:47:3c:e5:14:ce:55:35:bc:9f:fe:
11:66:dc:be:da:16:f4:0a:e4:44:23:75:08:55:a0:03:4d:77:
da:e7:43:1f:82:53:19:3f:c0:98:03:f7:8e:5a:2a:64:f3:ad:
68:3d:bb:e7:3f:5f:0c:89:77:c3:87:51:62:2c:46:3a:be:ce:
f3:38:a7:26:ba:c0:55:b7:c5:bd:99:d0:8b:cd:c8:2b:f6:1b:
0a:6e:44:d3:75:2b:20:b4:9d:8d:90:39:7e:d8:c8:ec:1e:9a:
77:3b:6a:54:d3:c9:76:79:fb:79:7a:14:a6:c7:73:9f:d8:61:
bd:17:46:65:cd:78:07:9c:f9:78:f0:b1:5c:5a:8a:ce:fb:52:
b0:cf:98:86:15:bf:e6:0f:8b:e6:ed:cc:b3:f9:96:6e:e3:45:
4e:a9:dd:7d:bf:c0:7a:52:bc:21:1f:9f:51:9f:cc:92:ed:54:
39:93:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:32 2026 by rpki-client