Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
File: j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json)
Hash identifier: ij49v0ZLbRVaZSg2+qX5Y37vd2/uT1wtCqLaC7T1uHM=
Subject key identifier: 9E:3E:57:45:03:1E:2D:E5:99:21:DD:B6:B9:19:DF:98:01:39:3B:D9
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 019D38D3848C46F5EFD4DE5299CA7B9D7ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
Manifest number: 177F
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: Ah3niV9GqymVsfVa9sivOa3QD9uM8fOYgD9zmsU+EqE=)
2: vqpQX6Iz06R1EggExW7BWU4tAbU.roa (hash: bBqYQdht/WXkhmcATy+bfto0/P5AbnT3jolfRGDWBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:84:8c:46:f5:ef:d4:de:52:99:ca:7b:9d:7e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=9e3e5745031e2de59921ddb6b919df9801393bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:9c:9f:c1:0e:89:26:63:ec:12:4d:b2:70:
00:b0:3f:e8:ee:a7:20:42:ae:9f:30:29:dd:fd:30:
21:e9:8e:85:96:7d:68:c3:28:c9:fa:9c:54:ca:53:
bd:ca:fd:98:27:8c:6d:d2:0e:02:da:2e:b7:dd:3a:
8a:e9:4d:8c:9f:4d:d6:eb:6d:33:d0:03:80:3c:af:
99:24:bd:80:fa:28:ab:dc:ea:f1:67:8b:20:10:d3:
5d:f3:4a:73:57:b7:5b:1a:89:a9:f0:e5:9d:15:a3:
51:5f:a6:58:e8:8a:0f:5d:3e:ab:1f:ff:d1:e5:6d:
10:ef:cd:88:13:7a:28:8c:fe:12:30:af:f6:14:46:
70:3b:5b:80:68:7a:54:60:ba:f0:b5:54:c4:82:fe:
73:0b:ed:7d:69:fe:ab:0c:8b:8c:90:4f:c9:78:b7:
de:54:49:c0:64:38:7f:1e:ec:e7:d0:18:e9:05:b6:
73:ac:b4:76:af:aa:5a:dd:63:8b:aa:cf:be:46:64:
72:3c:db:26:6e:17:8f:b3:e0:17:e3:ec:6c:b1:8d:
fd:6f:59:4c:9b:79:25:db:fc:67:16:3f:4d:53:58:
40:67:76:d5:8a:d7:94:44:c4:19:d6:ea:ce:09:6d:
27:44:23:41:f0:b6:f2:8c:1d:1c:01:eb:d2:76:26:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:57:45:03:1E:2D:E5:99:21:DD:B6:B9:19:DF:98:01:39:3B:D9
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:de:57:0d:c2:95:a0:ac:89:4f:df:01:14:a4:aa:24:e6:38:
6d:fc:46:4d:52:23:e6:b8:77:b6:31:c8:0d:f0:17:2e:8a:06:
77:92:26:29:06:53:5c:99:61:7d:47:67:c4:5d:43:cd:f0:17:
aa:e7:6e:f2:8a:fa:e0:42:74:ba:c8:42:9f:30:62:6b:bb:cd:
7b:f0:3b:de:b4:0a:6f:d0:4d:12:c4:4c:10:eb:04:83:07:b7:
0b:2b:14:46:f3:d1:98:5f:2f:06:d3:0f:90:6f:cd:98:a4:c1:
bb:db:bc:ab:4c:48:40:de:98:f4:ae:e6:5e:ac:f4:8e:2f:11:
c4:b1:45:89:fc:e7:6d:08:32:e8:c4:64:f7:e1:25:e0:5d:5d:
9d:90:59:bc:7c:00:f9:d8:49:c2:51:23:5f:e9:fb:f1:09:a6:
75:d7:49:60:55:b9:59:98:83:62:f4:d3:ac:fb:e4:a3:9e:63:
2c:b2:7a:53:2d:a1:6f:7a:5c:0e:31:62:51:8b:cb:b8:da:d2:
e2:12:de:27:59:4f:1a:17:61:01:11:4b:6d:c9:aa:6c:7d:3e:
4c:10:ba:e3:77:63:a6:81:c0:74:6b:24:dc:6f:6f:4c:c0:82:
76:c4:48:03:4b:aa:8f:2a:69:0d:cc:c6:b1:12:e6:14:2d:20:
6d:41:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:51 2026 by rpki-client