Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: u6yYGK3sAzq+SKaXYt1DRQ3bIyKxBlybak7dPfAC7qE=
Subject key identifier: 63:F4:69:CF:82:3A:52:AF:7D:E3:9C:DA:53:B1:88:EB:2E:F7:E5:BC
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019D37F707C621CAA31876CD7FD7986C7CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 1606
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: 4MRTmkybgsKADHc0kUNRdvScColSKOCkutsNWMxOkEY=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:07:c6:21:ca:a3:18:76:cd:7f:d7:98:6c:7c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=63f469cf823a52af7de39cda53b188eb2ef7e5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:ba:8a:3a:9d:e3:12:77:aa:9e:f6:7d:b9:
58:a0:1e:f6:7f:72:82:50:ed:27:cd:77:40:d5:0d:
57:5f:10:1f:ec:b8:e5:41:59:2d:20:6e:b4:b9:41:
03:1f:05:a7:5d:0e:fa:ea:79:51:6d:a6:0e:36:1f:
3e:e7:a2:b0:3c:b1:8a:54:9b:96:3c:b7:a2:b4:71:
02:7c:65:7a:9b:bc:83:a1:52:98:15:6f:95:87:44:
d2:bf:20:9d:1c:76:df:83:ca:80:78:c0:ae:a4:27:
bb:71:49:61:53:f2:4e:3a:a7:c8:79:e7:e4:47:40:
d4:c9:6c:0b:f6:cc:62:b1:6b:c7:dd:cc:9d:39:6e:
8f:52:ef:16:03:13:1e:32:5a:9f:ac:1c:b0:fe:0c:
45:94:62:a6:16:61:f8:53:1c:25:d4:86:44:9c:c6:
d1:9a:53:99:04:36:a1:3a:67:5d:eb:e9:7a:79:b1:
92:f7:4a:b8:b0:85:73:c7:82:df:aa:8a:3a:93:4f:
72:95:71:d0:89:80:ae:63:f2:c1:59:3a:af:5e:ed:
47:28:81:88:07:fb:45:1f:e9:ec:f5:1c:f8:57:33:
1b:34:65:11:94:55:e1:ae:d3:7e:7a:3c:05:af:c8:
e2:59:ac:57:c0:9b:ad:84:87:e7:7f:8a:d6:dc:40:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F4:69:CF:82:3A:52:AF:7D:E3:9C:DA:53:B1:88:EB:2E:F7:E5:BC
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c4:35:57:af:39:68:08:34:80:89:b3:ef:67:2b:30:d9:e0:
47:e8:55:df:94:f3:cd:e8:72:54:ee:7e:5e:88:41:0a:39:e5:
35:c4:11:69:4e:d9:0d:38:1c:47:87:ba:5d:4e:1f:6a:79:d7:
7a:42:9f:2a:78:8c:c1:02:50:34:f0:42:36:65:34:17:61:e8:
5d:34:a3:1b:e3:47:d7:73:f6:5f:b8:74:e2:65:3d:38:25:49:
f9:fc:c5:e4:4c:fb:18:e0:c3:e6:41:43:6c:e1:b9:ca:e3:08:
de:63:66:c1:f5:97:29:82:12:78:73:f8:6d:c4:5d:d3:7a:ed:
63:07:7b:05:5c:3c:6a:fa:4a:7d:c3:8c:93:56:ab:7f:67:56:
22:c0:f4:81:37:20:98:32:e3:d9:05:74:d7:f8:7e:4b:55:26:
c8:d1:65:7e:34:60:3a:e1:7a:64:b6:48:9c:70:23:3a:aa:c5:
d0:1a:6b:7b:79:d7:89:81:2f:df:7e:4f:6b:c3:52:b2:2c:ac:
6e:12:c4:17:3f:33:92:ca:b9:70:ed:07:7f:25:71:02:aa:21:
3e:f9:14:53:e6:4f:af:3a:01:82:1b:17:2d:75:7f:a3:0f:e6:
1d:47:cf:d7:a0:a2:36:3d:05:cc:60:fa:da:e6:97:4d:d6:f5:
c6:1e:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:21 2026 by rpki-client