Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File: jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier: Z+gC/i6RDr3MGiGKxCW44DAfQdNErbTTrpeXxyDGuQc=
Subject key identifier: F9:D4:6E:CD:DF:F0:64:63:98:EC:2A:87:40:1C:B8:BD:3A:D2:41:23
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 019CB923A5596540B91E1E92DDA64FCB4C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number: 09EA
Signing time: Wed 04 Mar 2026 13:57:26 +0000
Manifest this update: Wed 04 Mar 2026 13:57:26 +0000
Manifest next update: Thu 05 Mar 2026 13:57:26 +0000
Files and hashes: 1: DSk3FFy5gvsaRRg3bB7ZK-jhcAA.roa (hash: agD/2aG2MKwnSsEi4KQWHy0PJS0DxUvEeAaH6juJCD4=)
2: aS0hnguB3wClSQpmYD5FzYEMPg0.roa (hash: 31GWKlXGu0Qmox7TLiPrHYDKyJ/J1v6CE/ERUrNKaLk=)
3: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: vQo8w6nCa78JBUfBTMZlbOBYDfbJopfnC/JZd/8mFrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:23:a5:59:65:40:b9:1e:1e:92:dd:a6:4f:cb:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Mar 4 13:57:26 2026 GMT
Not After : Mar 5 13:57:26 2026 GMT
Subject: CN=f9d46ecddff0646398ec2a87401cb8bd3ad24123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:ac:59:f0:69:02:97:46:de:be:61:76:b8:
de:43:4e:43:dc:f8:69:f9:7d:71:df:82:13:30:a9:
ec:01:d6:b5:82:c6:0b:42:b4:b3:5d:0f:95:12:71:
b5:f4:ff:c8:62:99:e8:a8:12:1f:e1:be:10:a5:15:
f2:56:84:11:9c:e4:5d:31:65:55:6b:93:de:f0:25:
10:2b:c6:1d:92:94:96:53:b7:8f:a3:d3:6b:34:cf:
53:fa:d8:bb:de:92:1a:ff:2e:b4:0a:d1:fe:c0:42:
00:1a:fd:54:d6:9e:27:de:b4:5d:77:87:ac:d7:7f:
5f:2b:0c:0a:71:8e:4b:09:3c:4a:f7:dc:1d:e7:69:
cd:ba:12:05:c0:f8:a1:ce:98:a6:da:bb:9c:10:9d:
e0:d9:cb:60:48:5b:54:d5:2a:b1:2e:4e:25:3c:c1:
f9:49:8f:19:9c:99:82:83:c3:dc:16:35:1a:d5:81:
d4:ad:09:f3:84:27:7a:5d:1b:f7:84:8b:13:c2:f6:
81:18:8f:1e:73:c3:92:47:bf:bb:6b:84:e8:4b:88:
56:82:40:3d:9e:50:53:a0:3f:67:b5:2b:9f:1c:cd:
93:79:e5:95:c1:bd:ab:f2:20:15:93:29:37:67:90:
79:67:fd:9b:58:ad:8a:41:85:ac:01:77:b9:d2:c1:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:6E:CD:DF:F0:64:63:98:EC:2A:87:40:1C:B8:BD:3A:D2:41:23
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ce:f5:ee:d1:44:f6:48:5d:e8:7b:e9:a0:62:0e:fa:ac:64:
2f:39:3a:bf:c1:73:f3:73:97:83:e3:bb:22:dc:6f:02:fe:f9:
00:b5:8c:16:5d:14:82:a0:dd:b1:21:a0:b8:a5:ab:2d:d2:18:
15:2e:bb:8b:50:0a:10:45:1b:00:75:33:b6:b2:35:f7:32:34:
cd:c7:00:8e:fb:6a:b6:60:67:cb:2c:d2:83:8b:fc:6d:1b:0b:
37:30:1e:b5:32:9f:ef:47:cb:44:3d:94:05:71:86:aa:47:fa:
6f:1c:38:eb:03:9e:f4:a8:f3:26:32:48:cc:39:f0:c1:7f:fe:
69:78:e3:de:8f:7b:3d:8f:10:4a:db:57:75:95:f6:ba:67:1a:
48:23:f4:c8:c8:34:24:0e:64:e6:1c:30:14:87:bc:f7:fa:4e:
3d:92:02:c4:fe:5e:5a:b7:e6:d2:73:e6:4c:57:32:bb:78:5a:
a0:93:06:f0:99:7e:f9:41:e1:fb:f4:56:66:69:25:e6:f9:ec:
23:dc:68:1b:08:0e:8f:5f:cc:4b:d7:d8:2c:d2:30:17:79:1f:
2b:0d:ee:43:2b:ee:0f:a4:64:d3:2c:a9:68:cb:0a:41:da:45:
8b:63:d6:db:40:38:33:8f:7f:59:fc:d2:a1:6b:be:20:4e:59:
25:b4:69:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:49 2026 by rpki-client