Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: +7Ju7XH21YRNJGZb7NRzftBukstj5z5EBVVcFj0EsrU=
Subject key identifier: A2:12:29:5D:E7:42:DF:0D:4A:FB:24:A4:CE:2B:9A:89:0D:A0:16:64
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 019CE36CD8A93AC4DF75E37650BBDE0CB309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 19:01:27 +0000
Manifest this update: Thu 12 Mar 2026 19:01:27 +0000
Manifest next update: Fri 13 Mar 2026 19:01:27 +0000
Files and hashes: 1: Wup1Q1uFK5aAm0q7_cAA8x0spSY.roa (hash: d/XhcWFuK+yDoXR1POg4vJ7o5/6q+n/d2c4kmBYqIpk=)
2: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: S1byPNCLVkQeYYv98ukRpTux2YhPr76nnc26tW3/kD4=)
3: ocDruih2yibbf6CAeSAG3oeE1I4.roa (hash: OFqknVm6G0kk+aIE7XbTQXvAldWSJ1pjOrT88QpbMe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:d8:a9:3a:c4:df:75:e3:76:50:bb:de:0c:b3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Mar 12 19:01:27 2026 GMT
Not After : Mar 13 19:01:27 2026 GMT
Subject: CN=a212295de742df0d4afb24a4ce2b9a890da01664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:19:7b:8f:0b:27:f9:b4:dd:33:c6:70:64:
24:f1:2a:89:65:71:5b:45:c9:c7:fe:75:d1:52:4b:
d2:17:50:1f:86:07:90:40:f0:2c:0c:bd:d0:b3:f7:
ea:ea:e3:78:15:99:6a:00:0f:83:a5:f3:75:1a:28:
7a:e4:4e:13:82:93:6d:54:06:c5:bd:45:05:43:a9:
2c:bf:d8:89:75:09:44:6a:28:b9:e0:2e:b4:51:c1:
bf:59:40:28:30:2b:b0:56:33:e3:9d:58:4c:22:3e:
76:2b:99:b6:01:cb:45:0a:5b:5d:3e:0b:3a:72:8f:
b3:bc:fa:d0:52:40:b5:90:80:f0:81:32:ed:d1:cd:
ef:f6:0c:01:e4:4f:ea:96:04:a2:66:29:8c:5e:a9:
64:ae:16:e6:e2:94:08:7b:1d:93:98:3b:61:dc:dc:
99:28:88:f5:cd:de:f8:55:76:26:11:a5:16:85:e5:
c3:2c:cf:fe:27:d3:a3:a6:df:8f:d6:ca:e6:07:c0:
cc:9b:03:b9:64:88:f9:b6:f3:28:51:50:67:97:68:
b6:9a:bc:bc:d3:76:e9:7b:89:b5:bd:cf:a6:f3:49:
ca:f5:aa:f1:fd:dc:75:c6:b9:20:c6:88:79:e0:70:
c2:07:6e:a8:54:32:51:49:5f:b0:46:60:6f:1f:4e:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:12:29:5D:E7:42:DF:0D:4A:FB:24:A4:CE:2B:9A:89:0D:A0:16:64
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b9:89:70:84:87:3d:a5:19:f5:e7:d7:00:ef:10:26:72:05:
5d:f7:c2:83:63:7d:97:31:02:aa:99:65:82:3a:5e:af:a5:e4:
17:be:5e:31:7d:16:c0:90:8f:d5:d4:4d:81:5a:cc:17:4a:b7:
20:4a:1e:19:0f:49:67:11:7f:2d:8a:52:5c:fa:b3:5c:0c:77:
a1:cc:d9:86:e3:8f:1c:68:7a:f0:60:92:09:8d:88:d7:32:b3:
f8:87:ea:f0:fd:6e:4c:a8:3e:ee:6c:b5:04:01:f2:21:6f:4e:
23:68:80:ec:cd:70:11:f5:71:bc:ef:90:e3:a7:36:cf:77:c8:
19:34:86:1a:33:59:2d:92:9a:4b:a2:0d:76:d2:aa:3e:56:4b:
96:92:de:28:42:bc:bc:5c:12:01:67:b5:79:d6:79:89:7e:fd:
cc:94:05:04:df:85:62:0c:55:9a:7d:42:28:9e:6c:cc:c6:1a:
07:7e:03:c1:67:0a:49:19:5e:a4:80:b4:a9:c3:3c:b1:f1:80:
97:54:c6:6c:48:99:03:ea:cc:3b:af:d7:b0:da:a0:3c:8a:cf:
17:0e:01:50:ce:e0:2d:c1:44:89:e1:46:75:08:76:b7:bd:d2:
c9:60:e2:78:06:1f:4a:5a:fb:97:d5:5f:f5:60:1e:9d:69:27:
28:f7:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:09 2026 by rpki-client