Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
File: j32Qq83eC8bwvKryHOw6TyrPrk8.mft (raw, json)
Hash identifier: 5nllMmxBZ4NuCfohXAuNRv1pYn7hxtEVEMzrLQXt1eo=
Subject key identifier: 6D:9B:32:1B:A6:35:F2:EB:03:B6:57:40:BA:A8:1F:96:B3:3A:87:A2
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 019D39AEF4F2DE1E87C720D77F7CBA7B635D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 13:01:00 +0000
Manifest this update: Sun 29 Mar 2026 13:01:00 +0000
Manifest next update: Mon 30 Mar 2026 13:01:00 +0000
Files and hashes: 1: j32Qq83eC8bwvKryHOw6TyrPrk8.crl (hash: RUgdyE796JoDZ7VjeM0IvWMVVWZZ25Bjdp9M46xOJEo=)
2: peluW4JrzCD3jf4uXKxy_As6DB8.roa (hash: bj53NpUvQtHTcBwjTcnfuLGQSAy7sVwqOatu/bfRtXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f4:f2:de:1e:87:c7:20:d7:7f:7c:ba:7b:63:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Mar 29 13:01:00 2026 GMT
Not After : Mar 30 13:01:00 2026 GMT
Subject: CN=6d9b321ba635f2eb03b65740baa81f96b33a87a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:7f:50:12:6d:e1:5d:91:14:e0:5c:ee:21:
6a:51:f1:2d:84:e5:7d:51:c0:5e:59:ea:40:8c:92:
89:b8:ca:65:e4:7d:5b:d5:d7:7e:a5:69:0f:ba:9e:
44:30:cf:ae:50:40:d1:ca:31:91:3c:31:a4:b6:64:
47:dd:96:ed:c4:87:96:86:1b:c0:0a:3c:a3:58:8d:
7b:7c:2c:31:cb:0a:16:ed:29:1b:72:fd:31:31:c8:
9c:14:a6:9b:c1:69:37:4c:8f:96:f2:1b:21:f6:e5:
76:ea:b9:b7:27:e8:76:6c:7d:7c:27:42:c5:fb:9c:
9f:39:9b:d7:07:13:d1:03:6b:ee:9d:25:a6:1c:e0:
35:9c:dc:d0:6d:49:fb:b5:09:7c:b3:63:a1:d2:fd:
33:25:fc:d7:4d:74:ab:51:9c:72:23:73:2d:61:e9:
c7:73:fb:3d:fd:fa:c6:a4:e1:11:ba:4d:ab:d1:47:
dc:28:5e:ef:b2:f8:32:af:54:ee:61:39:9a:20:93:
4d:5a:2d:f1:54:13:52:f8:d1:94:85:f4:83:7e:f8:
ce:9d:e7:ec:1c:9b:38:26:55:5e:11:4b:72:15:54:
bb:e6:db:12:23:df:dd:b0:a4:e3:5b:96:a6:12:4c:
6f:fa:11:3d:db:f4:74:1b:1c:28:da:6f:4d:27:16:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9B:32:1B:A6:35:F2:EB:03:B6:57:40:BA:A8:1F:96:B3:3A:87:A2
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:20:e1:86:99:0b:95:70:b7:83:cf:ee:da:51:d8:35:1c:26:
6a:ba:68:a0:1b:7d:c6:fd:6b:79:22:e7:cb:f4:7f:43:66:61:
2c:6f:31:9d:3f:63:80:ac:3b:58:d9:88:d7:cf:59:bf:93:ac:
95:b9:b6:0b:d9:f6:94:80:2d:c9:07:6b:99:48:12:cc:28:42:
15:fe:3e:79:f5:fa:0a:00:38:99:21:89:1c:7e:23:6a:79:4f:
7b:18:a1:ff:b0:68:52:d7:7d:cf:12:e5:96:d4:ba:6b:5f:36:
91:3c:ca:f8:d4:26:e6:58:3b:3f:04:93:59:5e:36:b9:73:e7:
85:87:a5:84:76:ac:fc:eb:34:ca:13:72:c6:f8:0e:8f:c7:65:
38:3f:67:92:f9:ca:53:fd:3a:1a:df:03:82:be:b4:4c:1b:4a:
d5:ee:7d:8f:2c:0a:5e:2f:db:9a:8e:ac:10:52:41:81:bf:2b:
31:62:eb:15:aa:fa:ce:1c:7d:91:1d:6d:06:25:bb:c1:c8:33:
9a:e2:f1:e0:b1:71:ef:cb:46:57:7c:7b:15:b5:4d:33:bd:d4:
68:9b:db:35:4b:e9:21:32:32:75:43:e9:c7:e1:dc:5e:97:05:
ba:b8:e4:b4:35:70:1a:5c:0c:c3:dd:e8:8a:8a:0e:20:f6:b3:
b6:53:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:13 2026 by rpki-client