Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: PImaJA0vnz40+cviVg/BcDKShkO4jlKNlICH4Iw6xho=
Subject key identifier: 85:3D:42:9D:4A:99:C2:9A:F0:58:DE:4B:2A:4D:26:37:13:AC:20:94
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019D37F71D92D55D401A75789A96A2D4F6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: jB5p9oLWPwK2PsywicrbY+FMzSYOwi6Qfoo72RMOToQ=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1d:92:d5:5d:40:1a:75:78:9a:96:a2:d4:f6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=853d429d4a99c29af058de4b2a4d263713ac2094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:7d:7f:56:1a:75:99:7d:fe:39:f5:ed:0c:
a4:81:95:ad:72:c5:cc:cb:44:e8:54:64:c3:aa:ff:
13:2b:6a:42:16:a7:c8:6c:bb:b9:ab:10:87:89:4b:
78:22:09:2c:4d:b2:49:a4:62:c5:1b:2a:74:91:f7:
96:84:53:06:b6:3d:a0:d4:0d:80:4f:5c:4e:39:81:
98:b6:8c:2c:6c:dd:12:55:e7:e9:11:04:e1:26:7a:
32:27:16:7b:88:6c:54:6e:84:65:55:76:48:c8:12:
99:03:1c:7e:b1:32:fa:bb:86:56:41:eb:5b:12:6b:
96:a2:99:a2:ac:62:a4:59:83:75:44:1b:a2:34:3a:
e1:de:69:76:2c:48:a4:5f:0f:05:c7:14:b8:7a:be:
6a:ec:c4:bc:96:ae:81:c5:c6:9d:c0:d0:68:35:dd:
0e:c6:48:fc:be:d8:04:63:3b:1b:06:b7:71:f1:b9:
f9:cc:12:84:6e:7e:7d:5d:b5:2e:28:31:67:44:ae:
8a:56:89:81:43:96:d8:13:12:58:58:bd:93:ac:be:
55:cb:30:53:f7:1b:d9:bb:e6:a8:ea:08:f0:a8:19:
b7:5a:44:f2:24:46:5c:37:46:80:7e:c2:a3:da:a7:
88:84:c9:bb:09:2e:84:3f:fe:71:21:0d:08:e3:b6:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3D:42:9D:4A:99:C2:9A:F0:58:DE:4B:2A:4D:26:37:13:AC:20:94
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:52:99:e4:46:83:66:52:01:cc:40:ea:b9:a2:fe:f8:c8:c0:
ef:c2:26:34:e4:25:53:d2:fb:30:14:25:0e:d6:30:ce:d6:51:
2d:d9:59:5c:ce:5a:96:6b:0a:14:84:75:6c:b2:a8:b3:5f:2b:
d5:16:3c:96:a0:79:70:83:f5:bb:55:9f:f3:fa:13:02:59:7b:
e6:fd:a7:c2:cd:29:01:fc:b4:eb:17:c9:ce:ec:ee:87:b4:bc:
80:0d:ba:48:fc:63:73:82:d7:67:c2:b1:7c:8a:10:eb:ca:af:
68:8c:d7:f1:bb:da:26:31:f7:01:d2:32:aa:f2:85:d3:a7:f2:
2d:f0:9a:18:06:ba:73:73:fe:60:33:dd:a0:65:1f:d2:95:93:
3d:ab:03:ca:60:07:dc:c8:b1:66:b8:5b:bd:fc:08:c3:d1:51:
a9:6b:93:d1:d1:91:4c:dd:9a:47:5d:8f:64:f4:d0:06:b3:1c:
92:d0:fa:93:84:c9:99:c3:c1:48:09:7c:a5:ba:df:83:99:23:
5d:a7:02:6b:64:54:5a:c4:05:6f:e7:3b:ef:1c:a9:33:f1:b5:
93:63:35:ba:ef:fd:18:01:31:0f:b1:69:17:6d:1f:42:db:a4:
b2:4a:07:95:45:0a:09:20:52:52:a0:23:60:77:15:51:09:47:
12:76:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:54 2026 by rpki-client