Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
File: jVqxQkxBKz-_Tvrprh5o42wr7oE.mft (raw, json)
Hash identifier: UU+j2/+svgJlNvyQ8/Huu3JQY6CeetsEtyEU7c7YWJk=
Subject key identifier: 98:AC:B7:1D:3C:21:96:C7:67:BA:D9:AA:29:D4:74:12:CB:41:C0:15
Authority key identifier: 8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
Certificate issuer: /CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
Certificate serial: 019D3977FF83AD38842EF8DC5FCB0AFA9309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
Manifest number: 01F8
Signing time: Sun 29 Mar 2026 12:00:58 +0000
Manifest this update: Sun 29 Mar 2026 12:00:58 +0000
Manifest next update: Mon 30 Mar 2026 12:00:58 +0000
Files and hashes: 1: jVqxQkxBKz-_Tvrprh5o42wr7oE.crl (hash: HAqNXdxz1qV5wrI64aq8P953oFP74/uab+p/yJZz/To=)
2: p4hBn6CYtn1VKDaiKsyhOMqHgsQ.roa (hash: haUohiyH5mbkoLGOMq3EZCD2dc1b/l0VJe9Q5+fs1Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ff:83:ad:38:84:2e:f8:dc:5f:cb:0a:fa:93:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
Validity
Not Before: Mar 29 12:00:58 2026 GMT
Not After : Mar 30 12:00:58 2026 GMT
Subject: CN=98acb71d3c2196c767bad9aa29d47412cb41c015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:31:21:37:9e:87:6e:69:43:7e:d6:05:aa:
96:25:3c:49:b2:00:84:c3:d2:d5:78:af:68:18:65:
3f:bc:0c:92:10:f9:b0:75:04:71:0a:d9:ed:ca:7d:
0d:1d:29:53:af:39:bc:d5:2e:97:67:8b:bb:39:4b:
7b:1e:87:ba:b1:cf:99:0d:80:43:39:31:92:da:44:
c6:a2:b6:15:b6:18:80:1d:fa:81:b0:c4:ad:dd:38:
48:3e:8d:dc:c0:86:91:91:6b:84:ca:df:73:68:01:
a9:1f:58:67:4b:4a:f7:0a:45:95:51:d4:72:0c:2c:
9e:53:7c:6a:b1:07:90:32:b2:69:cd:49:f7:b4:15:
08:62:3f:6d:11:2d:dd:19:d6:01:90:3d:70:22:76:
b4:82:d8:94:f0:fa:c5:ba:2d:3c:42:e4:e1:7f:e4:
30:ea:e7:be:c8:a8:29:01:84:3f:8c:6b:bb:cd:f5:
67:19:15:16:f2:90:d5:3d:74:75:6c:19:01:ce:b2:
ea:ab:18:fc:0c:a1:dd:58:87:61:f9:ba:f6:1e:c5:
6d:1d:78:85:83:6c:03:8c:26:46:b0:b7:9d:cb:2f:
eb:7a:17:27:49:a8:c5:b4:00:a2:99:52:2e:ad:22:
01:a2:18:ed:6e:21:1a:de:43:b7:4d:f2:39:6a:27:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:B7:1D:3C:21:96:C7:67:BA:D9:AA:29:D4:74:12:CB:41:C0:15
X509v3 Authority Key Identifier:
keyid:8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:89:38:8b:db:56:8e:86:f9:d7:59:de:a4:86:d6:0f:f3:52:
1f:ce:97:f7:47:53:68:fe:03:94:c1:a7:08:b9:3d:18:1e:d0:
d0:65:f5:4d:61:54:51:b3:a8:50:ff:65:e1:67:8d:87:b9:2a:
1d:5a:6a:0a:29:98:75:eb:d3:5a:d8:ae:4b:95:bf:16:74:47:
07:49:31:d9:7a:e4:13:de:f5:1b:7e:50:3d:50:5b:83:d7:5d:
03:24:24:78:ce:07:02:ba:58:ac:d4:04:66:58:bc:8e:6b:ec:
f6:7e:0e:e9:8a:d0:ca:65:59:67:18:34:19:3e:90:f7:14:24:
f9:47:1b:d6:63:0e:80:27:d8:21:29:a8:c1:01:b4:5e:08:cd:
75:36:f3:04:d1:5e:a9:f0:85:5e:dd:14:28:c5:5b:89:db:fe:
1d:d6:ca:ae:7c:3c:8d:d9:a0:ba:71:55:c3:bc:fa:de:35:f1:
8a:6e:20:d2:43:6a:3d:04:b4:c0:37:2e:76:6e:23:fb:ca:ae:
34:e4:1b:ea:77:14:22:9f:bd:07:4a:fe:88:3a:f8:13:48:5d:
74:b9:71:90:4e:34:34:6e:5f:19:ac:e8:56:6d:6f:7b:43:53:
1b:a4:e4:5a:11:98:3f:84:94:fc:00:11:6b:69:61:e0:97:86:
4e:aa:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:45 2026 by rpki-client