Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File: jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier: 44pfgiqlegdD/RrI2yyc/id/KiRei3/UhG77fSvcKJo=
Subject key identifier: 11:63:B4:81:91:2B:41:B9:48:E9:E1:FC:65:2D:AF:82:FD:08:12:55
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 019D389C47ABBB5AF20145E48E9FD2963659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number: 08D1
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: PQ4kixVMpunmZd3Y9lneEnubVHU.roa (hash: Yf8PqpssV4aPe31IuLnMjahZv8QaQaygjHQtEb4Jhyc=)
2: h8m3UyCHdJZvavzOM3kO78iBzSs.roa (hash: 7o6/q7pQ3291TBvgsO2xLF2/udPbMNgFs9of9Kxrm4o=)
3: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: 0Cx65APj1sDBdDG1/8TrgzCwYcxpnv2IPVCdgsR4+gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:47:ab:bb:5a:f2:01:45:e4:8e:9f:d2:96:36:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=1163b481912b41b948e9e1fc652daf82fd081255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:ba:16:e1:b0:19:8f:c4:8d:95:64:77:28:
2b:e2:85:6b:4a:58:5b:a9:5a:7a:bd:cb:fb:f1:ec:
4b:a5:7a:25:98:6e:c2:5a:4d:2b:7c:88:2e:5d:34:
02:ae:2f:5c:a8:cb:db:7c:85:45:7b:d9:f7:55:18:
10:a0:8a:5f:e0:89:ea:cf:73:34:a5:03:1d:de:fa:
26:ac:9e:24:b2:14:da:94:06:3d:ea:78:e4:75:4e:
2b:0e:73:2e:0c:3b:5c:c1:e1:68:ce:52:8b:90:f9:
ec:6a:05:32:52:bf:39:29:4f:0b:db:b0:24:86:16:
2b:d7:95:f5:64:6e:45:fa:39:97:94:9c:7d:67:04:
83:93:59:13:20:20:5b:76:2f:d2:b9:a0:60:3c:86:
db:f3:84:76:55:f4:30:44:a6:52:2c:26:6d:13:8d:
e7:31:b0:6a:b1:36:29:8d:73:5d:e6:1c:b7:ca:4a:
81:a0:21:02:7c:df:1a:81:10:e8:0f:2e:99:da:87:
93:5d:ea:9d:69:b1:de:08:1e:76:ab:a5:16:79:48:
09:09:9d:b5:9f:eb:24:ee:1a:d7:bf:50:fc:6a:45:
12:16:b4:92:6b:c2:39:e7:5f:c6:3f:b2:9d:da:8d:
66:f1:20:f7:fe:e1:6f:b2:7e:09:38:54:34:45:05:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:B4:81:91:2B:41:B9:48:E9:E1:FC:65:2D:AF:82:FD:08:12:55
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:62:d3:5e:93:7e:aa:0d:51:48:10:3c:6e:7b:56:76:6b:
d7:7b:91:87:6a:2c:4f:74:ec:1a:e0:4e:5d:27:34:79:b3:64:
97:7d:db:a7:36:3f:e0:2e:64:cd:00:b2:d3:a2:9d:bc:12:9e:
c5:90:17:b3:ce:09:9e:f2:5b:6d:0e:05:5a:32:41:40:e4:0b:
2b:5b:e6:7c:ad:40:78:13:06:23:48:ff:d4:ce:a9:4c:11:d8:
d0:d5:8f:1c:ef:e6:b0:86:80:a3:32:e0:b3:c8:32:b6:fe:9d:
7a:0c:95:4f:5a:9d:74:c4:3c:d1:39:2b:97:c8:75:5f:5c:64:
83:2c:bf:86:c2:fb:cd:b6:13:83:03:86:c3:8d:e8:6d:e0:56:
de:69:09:68:ca:ed:d5:e2:b7:d7:16:6a:ad:74:73:94:58:87:
29:11:64:a8:4e:eb:fc:85:50:68:30:f2:3c:1b:d2:11:af:ff:
2f:a7:85:a8:71:80:0b:bf:6b:35:45:00:46:c5:23:eb:c2:bd:
28:e2:f5:27:67:ce:82:ba:ac:14:a5:67:22:cb:54:0a:99:69:
0e:85:47:4f:c8:63:28:8f:71:06:fe:9a:b8:83:14:f3:47:ec:
b1:d6:88:5b:e9:24:c3:c2:b1:16:28:2f:ab:73:80:ae:d1:b6:
04:56:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:14 2026 by rpki-client