Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: /QXFCtdqGPtshPxlmjKPNfDpuURPAo+Swq+EPgobuFI=
Subject key identifier: B1:6D:87:77:26:EF:EE:2E:19:4C:7F:AB:6F:69:B9:43:22:B2:7C:F7
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019D38D2946A9B9553544DF7FB43E2565465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0BBF
Signing time: Sun 29 Mar 2026 09:00:17 +0000
Manifest this update: Sun 29 Mar 2026 09:00:17 +0000
Manifest next update: Mon 30 Mar 2026 09:00:17 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: GBiOR7ok8QS4BgL+4oeP/WoTAEuDaBo3aBlqYD/6rqs=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:94:6a:9b:95:53:54:4d:f7:fb:43:e2:56:54:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Mar 29 09:00:17 2026 GMT
Not After : Mar 30 09:00:17 2026 GMT
Subject: CN=b16d877726efee2e194c7fab6f69b94322b27cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:0a:fd:e8:8d:58:f6:0d:43:2f:08:71:5f:
ac:d9:86:51:7b:4c:ab:40:ad:60:b8:ef:04:72:0a:
1b:f0:b4:86:57:81:b1:58:fb:13:35:ed:1c:91:0a:
fe:ae:c4:b3:85:90:fa:ac:1e:7e:4f:cd:5d:d4:61:
db:c0:e7:30:e2:9a:b2:51:a4:bf:3f:49:31:56:32:
eb:34:29:6c:b8:fc:e1:3f:e7:8d:e4:6f:91:27:e3:
b9:ba:47:f0:3d:10:1e:17:48:5a:39:49:65:08:73:
34:0e:b0:85:0f:7b:9f:61:d9:d2:dc:0a:c0:f8:7b:
6b:19:23:ef:f9:ec:b5:c4:08:9e:0a:e0:e3:de:22:
a5:f7:7f:fb:79:53:4a:1c:ea:21:b3:ca:dd:4c:03:
c9:51:0f:f6:81:5f:b9:a2:07:ab:0d:c8:cd:73:ca:
01:49:dc:99:dd:5f:c5:1e:c5:4d:e4:34:77:c3:d3:
eb:c7:53:01:0d:aa:00:73:6a:f6:4f:ae:21:f3:8e:
50:c8:41:12:18:2d:74:a0:ae:58:43:01:56:9f:f3:
dc:34:13:ea:76:dc:f9:c9:fd:90:a4:38:43:c1:85:
b4:b8:b0:19:e2:c7:58:ca:56:95:dd:5a:52:34:84:
7f:43:58:07:c1:64:a9:04:23:9f:16:55:8e:b2:94:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:87:77:26:EF:EE:2E:19:4C:7F:AB:6F:69:B9:43:22:B2:7C:F7
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:99:f8:49:bb:66:25:f9:ca:b1:c7:d4:bc:45:c3:fd:54:04:
26:2f:eb:b2:af:2c:f6:1b:a2:bc:75:3e:78:8c:b4:be:4c:36:
d9:cc:c0:f8:f5:3b:8d:5b:5e:5c:82:1f:3a:d1:17:7b:ff:7f:
59:82:ab:9e:bf:30:ea:e0:5b:fd:03:04:36:e7:dc:05:23:87:
8d:e1:d3:bf:57:2e:3f:a5:22:45:82:27:82:b8:05:18:d4:7f:
b7:cf:09:d9:d3:1d:4e:da:10:5a:08:a6:69:48:3e:29:eb:a2:
72:9c:15:c2:b4:ae:36:b3:95:82:73:61:51:e7:5b:f1:66:e6:
bb:cc:e7:18:b9:50:9e:0a:c2:e7:b5:27:20:27:15:e7:dc:db:
7e:13:f1:4d:e5:93:e4:1d:39:f5:a2:e1:a8:e6:23:07:d2:d3:
cb:9c:7e:53:7a:95:2a:91:45:b8:77:c1:04:c6:64:72:c5:9b:
96:4a:36:c4:31:43:e5:09:0f:c4:e3:00:c6:de:0e:57:b3:0a:
71:71:16:2f:95:1a:d4:c4:c6:92:10:c7:0d:ce:af:3b:64:74:
11:ae:c8:45:7b:af:8e:7f:64:61:96:eb:fd:e6:90:5b:c9:e2:
a2:87:b2:30:e7:5b:8a:ca:31:87:69:78:89:50:5a:e4:f7:e9:
8b:4b:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:49 2026 by rpki-client