Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
File: j493R7eqBqdUJRZiDt45nQHlx-Q.mft (raw, json)
Hash identifier: mvP1/iO7SgsSpnBlbo98tBdDmjPmhX7SqeruDxJCZZk=
Subject key identifier: 53:9A:62:40:9D:D1:C2:71:D1:72:62:B4:AE:79:8C:47:E4:CC:AC:78
Authority key identifier: 8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4
Certificate issuer: /CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4
Certificate serial: 019D38D3985C56A84F54985668993755F623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
Manifest number: 01CE
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: ggsIrEG_pjBN7NymXoDR3lMKSmc.roa (hash: NRoN77G1sKo2JMNbfCRILKnaLnywaXx2abNeVRqQfhI=)
2: j493R7eqBqdUJRZiDt45nQHlx-Q.crl (hash: 1AZOKk3fjkuZFRB0iWNsnSrSzP8aqqJ/mkf0rr6tgsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:98:5c:56:a8:4f:54:98:56:68:99:37:55:f6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=539a62409dd1c271d17262b4ae798c47e4ccac78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:f1:64:97:00:ca:11:fd:9f:c4:84:97:f7:
68:86:37:70:44:b6:46:f9:54:e9:05:87:e0:b0:6d:
3c:32:76:e9:f6:ff:0c:2f:47:dc:12:67:10:24:fe:
da:92:49:65:a9:c2:26:1d:d3:36:c4:44:22:51:71:
16:fb:77:4c:3b:11:e4:6a:e1:f1:0b:d2:78:cc:95:
e8:5a:96:5e:bd:94:c1:f7:bc:2c:25:a0:52:70:ca:
c9:7a:8e:d4:4c:6d:2d:78:f3:3c:a8:56:5b:83:e9:
1d:fe:23:27:6a:23:6d:9a:43:37:0b:d1:ea:79:c4:
ff:d4:3c:c2:c6:ce:25:e4:90:08:55:9b:a9:59:c4:
0b:88:f3:8d:79:f9:e1:45:36:24:72:a8:18:6a:33:
2f:a2:1c:97:c9:7d:c1:99:5d:0a:43:b0:66:03:b9:
a3:4f:a9:0a:35:30:96:67:a0:42:bf:6f:74:5c:83:
b3:11:27:f6:1f:a0:60:37:cb:3c:14:d3:b2:15:d0:
8b:49:a7:59:b3:8d:95:d1:c4:94:75:0e:42:c2:a9:
69:a0:a4:8d:e2:d3:69:cc:6a:34:9a:b7:85:5f:a3:
f0:7d:96:89:66:3f:ad:50:4c:94:79:3b:af:2c:b6:
f0:8e:a4:a1:72:0f:1c:e4:41:3a:19:f4:34:c0:5b:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:62:40:9D:D1:C2:71:D1:72:62:B4:AE:79:8C:47:E4:CC:AC:78
X509v3 Authority Key Identifier:
keyid:8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7b:58:45:9f:22:af:19:84:4f:5a:c2:1b:e3:f3:5e:9c:77:
67:80:0f:f5:fc:b7:3b:ed:b9:2a:33:ae:42:c0:cb:d5:b8:27:
15:51:07:5b:02:e5:29:f3:e2:b2:45:43:86:e9:fb:ef:aa:f7:
ab:d2:78:61:76:33:a6:cb:e9:f2:5b:fa:51:04:b3:1c:a4:0a:
49:be:92:42:b3:05:84:a9:47:bc:ee:67:d0:72:e8:e8:e7:5a:
4b:51:f8:8e:01:10:01:87:24:22:32:1b:54:22:1b:1f:66:31:
6a:2a:21:44:cd:81:5b:f5:cc:36:93:3a:23:bd:96:29:37:a1:
d7:87:79:3b:c3:53:7a:63:7c:ac:45:a8:8d:15:4f:a8:a4:31:
99:dc:5b:68:c1:be:97:26:7e:25:4b:60:ca:94:eb:47:26:e0:
0e:ed:6f:0e:df:d7:ae:fe:69:f8:92:b9:95:34:19:64:92:3d:
31:20:f6:ba:46:f7:81:2c:2b:f4:87:56:4c:d7:e7:0c:03:66:
7d:fa:d6:9b:7e:b5:4a:85:1e:e7:a5:25:45:f3:a3:0d:c2:b0:
e3:b9:39:3c:34:f7:c4:fc:99:7d:44:bd:23:3d:4a:5d:b2:72:
f4:4f:95:45:6b:4b:91:ae:92:ba:2c:48:1d:9f:f8:5b:90:f7:
e5:67:e0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:15 2026 by rpki-client