Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: SoNJ49osgEtOaEWyidGQND0rnO+JZdsR7rxPyc/TG/8=
Subject key identifier: 94:E9:5E:9F:7E:87:C7:F5:4B:38:06:47:FB:10:FF:76:54:B1:6E:30
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 019D38D3C55B4E01466388F671E87D790440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0F4E
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: dsLdJMOUiI7q_-APyIwy34yOW5E.roa (hash: POXZCn3rwMGKOplLlMfSl2cF5aSp/HWGstxXZUZFABo=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: BwRicSJkoRyD3c+R/143J+ZZ3E1J1OIaksxtDqUer+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c5:5b:4e:01:46:63:88:f6:71:e8:7d:79:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=94e95e9f7e87c7f54b380647fb10ff7654b16e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ec:3f:ea:7f:f3:d0:1b:ce:4e:3d:cf:55:64:
b1:1e:88:84:4f:db:78:1b:15:61:2a:3c:39:56:ed:
7b:f3:d0:aa:38:1f:40:44:98:b7:a9:6c:75:c6:67:
ce:07:21:a8:54:7c:04:52:b4:fc:30:d3:4e:cb:ee:
7d:e7:cf:14:44:4a:3a:1a:c8:3b:61:8f:e2:78:2c:
22:1d:bd:03:a4:bc:3b:5e:69:d5:90:41:dd:30:68:
6d:23:a8:89:7a:b1:fa:12:02:9c:ae:87:25:b8:c3:
3e:44:dd:ab:f1:28:87:98:3f:27:c5:2d:1f:b5:8b:
70:1f:5f:4a:4b:f1:ca:32:01:f0:0b:02:e4:0b:63:
10:fc:f0:d4:8c:03:44:ce:57:67:b3:14:1e:26:2d:
f4:57:ee:27:7b:6b:b3:dd:2d:fe:20:27:9e:60:11:
d9:5d:4d:81:a6:25:1f:cd:c2:3a:82:a7:b1:12:02:
92:6a:22:09:49:76:92:fb:1f:99:b9:bd:cb:06:ff:
73:7c:74:d8:ab:b6:bd:d1:25:26:14:64:e5:52:45:
29:2b:fb:0a:68:a4:f9:26:0a:7c:9b:8a:89:ae:70:
d9:80:20:f6:d4:43:24:37:3b:0b:4d:49:78:4b:90:
e3:ef:bc:5e:d7:7d:bf:fd:18:77:b4:a2:dd:1a:c7:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:5E:9F:7E:87:C7:F5:4B:38:06:47:FB:10:FF:76:54:B1:6E:30
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3c:f7:88:d6:e9:a0:b9:5a:dc:de:5d:42:93:3f:5c:53:d4:
24:4e:2c:da:ef:b3:92:21:e9:14:71:f6:7a:a9:27:ee:77:37:
ec:36:e7:7b:71:4c:32:19:ca:49:44:41:f2:97:ea:b5:ef:5c:
66:ed:60:c1:4c:dc:89:ec:90:ba:45:4a:00:dc:fa:20:66:52:
25:65:d3:f6:77:ee:c5:f4:b4:c3:44:d4:10:e8:08:e2:7d:05:
d8:47:af:5f:51:96:96:a2:d4:f7:76:9a:fd:9d:ac:af:f2:e9:
72:38:ee:fd:0b:b1:2c:0b:56:78:02:b6:91:c8:35:56:18:f5:
ab:35:5f:0b:ba:2b:ea:6a:7b:d5:02:8b:e9:2a:b7:54:aa:e3:
a0:1e:8c:b2:a9:c5:f0:2d:c9:41:1e:44:7e:e5:7a:73:bf:b3:
1a:61:ce:73:0e:1b:49:be:9b:9b:11:c4:a9:be:b6:b4:da:72:
69:f4:81:52:59:78:c9:84:52:c5:e9:9d:5f:50:84:66:ef:63:
d3:c6:c0:4e:48:4c:40:03:b8:58:0a:f3:f8:c6:a8:1f:71:fd:
51:f5:d7:fa:b9:83:99:e9:c7:02:cb:19:d0:20:09:86:7b:5c:
c4:4a:0a:81:8b:cb:f5:6d:cb:d5:0d:71:49:38:06:96:0e:92:
12:c2:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:37 2026 by rpki-client