Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
File: jFdSEbjx8EzuCr3brasqBsw05gA.mft (raw, json)
Hash identifier: U+qwbT3+2OCm16xFuSaBLtOEFAzMo1LXM62rEfM83kM=
Subject key identifier: 86:D1:DD:4F:7F:04:19:EB:0E:2A:A7:DE:24:E1:6B:9F:40:C7:4C:FC
Authority key identifier: 8C:57:52:11:B8:F1:F0:4C:EE:0A:BD:DB:AD:AB:2A:06:CC:34:E6:00
Certificate issuer: /CN=8c575211b8f1f04cee0abddbadab2a06cc34e600
Certificate serial: 019D37891C0BB537B173C128E8118A8750F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
Manifest number: 7C
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: b4mQrv2JTgcWO8F1cjJyeYQBVb8.roa (hash: iaSN44aIIFU4B37XMu9thx+iSA2kuFPJ2xwDFwtro2U=)
2: jFdSEbjx8EzuCr3brasqBsw05gA.crl (hash: TK0n8eFAaO8PxYfOSsLD3lm9ZSQkXvsx/vZdLdYhIc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1c:0b:b5:37:b1:73:c1:28:e8:11:8a:87:50:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c575211b8f1f04cee0abddbadab2a06cc34e600
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=86d1dd4f7f0419eb0e2aa7de24e16b9f40c74cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:3c:07:05:77:13:21:77:a6:28:49:a2:da:
e7:f8:cb:ca:bd:a6:83:2a:95:7e:9b:e1:a9:91:02:
9c:89:d1:16:a5:d2:77:0e:d7:2e:ba:30:45:80:69:
8d:38:6f:3a:3f:1f:a1:1e:54:e8:47:c7:34:72:ab:
c1:75:2b:32:8e:77:7e:29:05:47:45:c7:2b:69:ed:
29:d5:ff:02:2d:03:b8:0f:18:b4:2c:8c:e8:19:23:
2d:ac:8a:57:b5:76:8c:4d:9f:f7:3a:1a:7b:23:6c:
20:08:63:f2:4f:1e:39:b2:56:29:0c:58:68:4d:76:
91:40:9d:e7:db:a1:22:ac:ce:8d:e4:06:0b:bd:3f:
e2:08:40:ed:30:d8:03:e9:10:02:09:7a:20:fc:71:
18:6f:91:28:6a:99:be:0e:1b:cf:3b:32:97:22:92:
54:ce:c2:c4:c4:c4:8e:d1:70:02:b0:2c:0e:9a:ac:
06:54:65:97:74:d1:7c:04:7a:5b:0f:fc:b1:04:97:
7d:95:1a:89:16:db:53:44:54:d2:f0:9b:07:7d:6a:
d3:e8:2a:6d:1c:cc:28:f8:b2:76:3a:1d:f3:7e:3e:
f0:14:82:74:c5:db:c7:71:f4:5e:1c:0d:45:3f:24:
b5:59:1a:e4:5e:6c:a4:d4:39:a3:87:1a:6b:c5:2b:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D1:DD:4F:7F:04:19:EB:0E:2A:A7:DE:24:E1:6B:9F:40:C7:4C:FC
X509v3 Authority Key Identifier:
keyid:8C:57:52:11:B8:F1:F0:4C:EE:0A:BD:DB:AD:AB:2A:06:CC:34:E6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFdSEbjx8EzuCr3brasqBsw05gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9df70c-8eea-4484-9602-c6f8518e628d/1/jFdSEbjx8EzuCr3brasqBsw05gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:97:6b:63:da:fa:75:0f:26:58:24:f3:1e:7b:0a:c6:b5:c2:
d1:8e:55:9a:9c:31:c5:9b:73:be:12:e2:30:08:0a:bd:7e:28:
d7:dd:cd:c1:39:38:87:5a:16:ef:ad:bc:ed:f0:88:b5:64:bb:
9b:03:7d:9e:dc:2f:af:35:99:a3:81:3c:97:44:96:d0:b4:ee:
c6:4a:2b:9f:03:b9:10:ca:2d:50:b6:88:67:d1:a8:58:9c:99:
e5:30:cf:31:ca:76:78:89:6a:a1:76:22:fe:6d:02:c2:03:f8:
06:c2:65:73:a2:b9:10:fa:69:8e:b9:e6:12:7f:d4:9c:02:34:
60:1b:97:e2:25:6b:58:2f:f5:fe:d8:41:c7:e6:44:5b:93:16:
30:0d:76:55:71:da:4a:e6:18:e3:68:7d:61:9a:a0:d6:06:ad:
9c:ff:44:90:56:2e:cf:5d:35:01:22:f3:37:74:b6:70:5a:ba:
8a:92:b5:7f:fe:4e:5a:b7:15:bd:9c:f4:67:41:de:9a:e0:f3:
71:08:42:46:35:cf:50:6d:29:8a:b1:ee:ef:f1:55:09:38:c2:
0e:c1:a9:90:df:6e:53:9a:85:b9:e5:cb:7b:2a:77:49:b9:d8:
27:07:c6:91:57:c8:6f:7a:a0:f7:f7:8a:9e:ca:9c:25:d6:55:
1d:7f:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:11 2026 by rpki-client