Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: JGte5gl2C2LbtTcAePiWGpiZWQ1c6NJDeN5PeNcpEO8=
Subject key identifier: 7E:25:C0:7C:62:FE:2C:C0:91:2B:48:4F:B3:C7:46:41:32:AD:27:AE
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 019D39AE7B16BD41DE89139B0751EAB9F013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 09FC
Signing time: Sun 29 Mar 2026 13:00:28 +0000
Manifest this update: Sun 29 Mar 2026 13:00:28 +0000
Manifest next update: Mon 30 Mar 2026 13:00:28 +0000
Files and hashes: 1: O9jTuaIwSklnvAfhZBN0WWcgZXE.roa (hash: TZQoxFlSub9NUs3bu775AFUShxwX/KmkPryQTWD+vU4=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: te5YGF1afaspPGRxgCiRavFET3rL5xNzuj1cBdCS9gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7b:16:bd:41:de:89:13:9b:07:51:ea:b9:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Mar 29 13:00:28 2026 GMT
Not After : Mar 30 13:00:28 2026 GMT
Subject: CN=7e25c07c62fe2cc0912b484fb3c7464132ad27ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c8:aa:83:50:e8:4e:8a:3f:47:61:ce:89:1b:
39:4b:b3:5d:2f:47:c2:3c:63:f8:07:6b:eb:36:3f:
83:94:1e:96:c8:37:c5:70:d0:1d:40:be:fc:dd:69:
b9:22:b1:b1:f6:f6:c0:11:b9:91:cb:93:c5:3e:c9:
e9:08:33:a0:3d:5d:16:24:4b:26:33:c7:64:d0:8c:
5f:a8:07:a3:fd:4a:57:b6:53:9d:9b:e5:2d:ff:0e:
52:53:71:7d:60:73:41:db:da:fb:88:f9:d6:56:f1:
fd:17:dd:30:86:e7:bc:ee:2f:c5:f8:30:da:6f:c0:
0f:ad:f0:42:ae:be:14:bd:1a:ab:63:96:bf:b2:7d:
de:52:d4:86:78:d8:b2:97:d4:93:b0:eb:0f:ed:0b:
e0:25:67:97:6a:9e:59:9e:2a:d3:a9:87:a3:e4:78:
44:b7:7c:98:29:f7:ac:42:60:e8:9b:01:ec:1b:8b:
b5:d7:9a:9e:3a:c0:83:86:c9:ea:34:d5:0f:ff:03:
6a:e5:23:47:6a:9b:37:5a:05:87:dd:06:f3:8a:9f:
29:72:36:2b:4d:26:6c:0f:4b:16:13:2e:6b:93:6d:
44:96:f4:ac:3d:ee:1e:07:a5:22:ea:bd:73:14:10:
65:41:74:11:51:bd:db:44:06:86:c3:11:af:66:e0:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:25:C0:7C:62:FE:2C:C0:91:2B:48:4F:B3:C7:46:41:32:AD:27:AE
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:22:a3:c0:5a:b1:ac:4e:f2:50:86:3c:9f:e6:90:18:df:
76:d1:2d:0c:f9:61:ac:65:d9:13:65:fa:7e:a7:51:03:dc:af:
ca:8b:23:9d:c0:de:8e:5e:2a:50:2f:52:cc:ae:9b:82:ed:94:
83:9e:b3:fd:5c:30:b5:cb:f0:80:6e:87:f3:fd:03:25:b9:11:
ce:d0:dd:eb:d1:84:97:b0:22:6c:6c:39:54:4c:de:75:52:4b:
c0:0d:f3:86:66:00:c7:b4:56:8b:92:e3:94:ff:03:68:19:0b:
9d:ef:af:f8:1f:cb:47:15:e6:4f:0f:56:cb:1f:b7:73:ed:64:
29:be:bc:cf:bc:a0:e9:28:13:75:c7:31:8e:d4:3a:68:3d:e0:
07:87:a0:3f:be:77:db:f1:a2:18:26:b2:fc:d2:bf:60:e8:a4:
b2:32:3f:dd:ce:dc:fb:74:f8:03:a0:20:92:8a:78:03:2f:76:
ba:f6:2e:bf:70:7f:a6:1c:d4:03:12:75:bb:b8:50:a4:00:7c:
b2:79:10:27:6d:62:8d:ec:e1:60:0b:92:03:26:19:6a:17:9f:
04:d5:7a:84:1a:92:6a:88:84:5a:9b:dc:8a:f7:e0:57:b1:ef:
a6:6a:e3:92:60:f7:ef:10:a7:40:2c:60:88:a0:db:f5:6c:06:
cb:e4:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:15 2026 by rpki-client