Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
File: j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json)
Hash identifier: kYFW6lN219PRbuEHUMzf35vWzf2UErakkc6kbcx4vPY=
Subject key identifier: E3:8F:1E:FC:4C:0F:10:50:E0:46:69:48:4F:A7:1F:59:D7:9B:77:48
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 019D14C6B708893CBB6F9413305CAEA80922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
Manifest number: 0138
Signing time: Sun 22 Mar 2026 09:01:00 +0000
Manifest this update: Sun 22 Mar 2026 09:01:00 +0000
Manifest next update: Mon 23 Mar 2026 09:01:00 +0000
Files and hashes: 1: 0WmwmFuoCWNqsLL6k_gxBPAC3h8.asa (hash: 60+Or+X6S9hfGP6c+jd5ZM8DEfkfCWQ0yiF3OykR4jE=)
2: XiMWlcnYu15otXM1SpS0Znny3pM.roa (hash: HhN+oEh/TLjrfvVsB28CfHRheFgOREvZ8MiqN/vatGw=)
3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: dGjIv0epXw00P7oRfvRKf2bOKod5ozc3gsH1+NHi1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:c6:b7:08:89:3c:bb:6f:94:13:30:5c:ae:a8:09:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Mar 22 09:01:00 2026 GMT
Not After : Mar 23 09:01:00 2026 GMT
Subject: CN=e38f1efc4c0f1050e04669484fa71f59d79b7748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:e4:a7:3a:bc:b1:56:93:b6:24:f2:4f:e6:
14:2e:44:11:12:71:21:35:e9:8e:29:aa:0e:b9:3b:
7a:a9:a9:ec:61:86:b8:1a:aa:cb:4f:8d:52:ad:2c:
4d:8a:37:e5:25:de:8e:17:8e:b0:2c:f9:05:93:57:
01:dc:38:1d:97:bc:28:54:30:d8:bc:68:2c:41:be:
ba:db:b8:80:41:0d:8e:06:bd:80:c9:f4:79:60:0a:
1a:c6:2d:d7:2a:eb:c3:73:f6:f4:f9:70:94:b8:01:
09:0d:cc:69:a2:0a:04:53:3e:53:1c:be:12:ea:8d:
c7:01:c6:9e:05:a2:a5:0c:1e:1a:a8:b9:89:85:f8:
de:d6:60:d1:28:6d:56:5e:91:0d:6c:5a:9e:28:32:
93:3e:0e:b9:23:45:8c:73:3a:dd:46:bd:1b:04:4a:
11:e8:5f:49:f0:d9:a6:7a:7d:ad:2a:1c:16:5c:5f:
89:fb:c3:05:ee:e6:b9:a8:a7:69:f1:97:e0:30:83:
8b:40:78:4c:a3:ff:38:c2:d8:18:aa:f2:69:c1:07:
4b:78:68:d8:b8:b1:c0:6e:ea:2f:4b:b1:20:48:ae:
ca:65:41:4f:60:ae:83:e6:1c:49:30:23:d7:a8:7f:
19:bb:30:68:0c:8d:97:31:06:36:61:a3:da:19:c8:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:1E:FC:4C:0F:10:50:E0:46:69:48:4F:A7:1F:59:D7:9B:77:48
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fe:f5:81:6a:52:11:84:64:be:79:fc:8a:37:aa:2e:6f:05:
fa:43:fc:de:8e:58:ef:c6:1c:9a:0d:26:04:1e:e0:29:24:96:
a6:08:1a:5d:7c:21:a2:6c:4d:da:b5:61:71:d5:ce:f3:37:fb:
2e:a8:3d:6b:cf:ff:1c:64:fe:dd:d9:77:ab:6d:a7:9b:10:19:
3d:9f:15:58:9f:f9:2f:3a:ed:0a:21:a7:45:dc:60:8a:96:4e:
bd:66:1d:85:11:f1:32:01:de:5d:ea:67:69:a3:e3:89:da:1f:
18:0c:42:7e:70:48:6e:bc:08:3d:05:38:25:cc:5c:49:1b:a5:
92:db:e7:ca:f8:4d:0f:34:97:e7:4e:70:5f:32:eb:4d:60:41:
91:70:5f:1e:ef:e6:65:ce:6b:74:be:74:6b:07:e5:12:c7:f0:
f8:ce:53:1e:2a:35:80:60:ec:41:d7:ba:41:fe:76:28:96:f3:
bf:ec:fe:83:d0:f4:6c:cb:7e:71:db:84:57:1c:98:c3:43:0b:
1a:f8:15:10:b6:43:ab:6e:40:b4:f1:14:18:8e:ea:dd:3d:ab:
85:ac:4c:08:80:8f:ca:ba:5c:30:c3:bc:39:27:fe:b5:1d:f6:
c7:aa:2d:d0:32:9d:69:59:e2:2b:76:cf:9c:85:74:39:c2:10:
9e:ec:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 17:41:00 2026 by rpki-client