Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: NfZpc82NYicreXG0R/Z1cq+MMNI1zpMLlfn6RJRAZWE=
Subject key identifier: 7E:0C:D9:C4:86:18:A2:A3:66:F6:C5:5F:A9:9E:DD:45:EE:24:0F:90
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 019CED14356D4EC3764E6EC5616CF988F36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 186C
Signing time: Sat 14 Mar 2026 16:00:50 +0000
Manifest this update: Sat 14 Mar 2026 16:00:50 +0000
Manifest next update: Sun 15 Mar 2026 16:00:50 +0000
Files and hashes: 1: K7imHnGp5a0GZEXjdJA9ycC0yM0.roa (hash: WpPn3I2nrpKd+2H696eaEy1UwnJ6zYF2icMGlpKEWrE=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: +A98Avgr4JIKJ4xUtDa50BKYvi1UhE6vyD2AhcBxHOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:14:35:6d:4e:c3:76:4e:6e:c5:61:6c:f9:88:f3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Mar 14 16:00:50 2026 GMT
Not After : Mar 15 16:00:50 2026 GMT
Subject: CN=7e0cd9c48618a2a366f6c55fa99edd45ee240f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:b7:40:02:46:ee:9c:21:f7:31:d9:be:40:
ee:8c:f2:13:79:40:80:22:b7:64:86:b9:56:99:50:
20:c7:19:5c:c7:85:bf:cc:43:55:17:9d:c8:f5:6f:
34:43:96:6b:d7:85:33:2d:e8:e2:b1:ec:6b:d3:eb:
ef:67:fb:a0:ed:07:17:1d:5d:5b:c5:aa:18:c5:b9:
85:d9:b4:5c:c6:ff:88:cf:e5:98:46:98:11:b1:88:
2c:5e:f7:2a:48:66:b1:af:18:e9:0f:75:7a:61:5c:
7f:14:96:53:bd:65:3d:5b:c6:45:6c:f4:8c:0f:52:
a2:d5:29:11:fc:7d:59:0a:91:7a:df:68:64:d9:7c:
22:6a:45:e0:2e:d2:74:90:e3:88:2c:f9:35:d9:19:
29:80:00:f6:1b:4b:70:3d:98:1a:f1:98:3c:a6:6b:
ac:fe:98:d5:69:d8:68:e0:c7:0a:a3:0b:88:c4:15:
5d:c8:29:f7:95:e6:07:25:62:ef:f1:6b:8a:a9:f4:
f0:74:ec:e4:d0:3c:2f:9d:c2:d8:1b:7a:43:de:b7:
07:8f:27:47:4c:84:fe:10:53:12:87:4a:49:a5:87:
a3:2e:06:50:c3:fb:3e:33:01:ce:e4:fa:68:79:75:
6c:ea:bf:0d:dc:87:41:a9:b7:40:01:56:36:9c:3c:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0C:D9:C4:86:18:A2:A3:66:F6:C5:5F:A9:9E:DD:45:EE:24:0F:90
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5f:4a:f6:10:d6:8b:62:52:b9:44:a7:af:02:4e:95:13:9f:
be:e8:fc:c2:15:d6:05:07:0e:8b:cc:3c:2c:8d:a4:79:e0:0f:
f3:25:ab:38:4f:58:9c:72:41:b2:59:1a:3e:30:6d:4a:26:cb:
84:de:9d:54:53:bb:a7:8a:10:91:a8:c6:dc:6d:29:18:a0:fe:
db:5c:87:77:2a:75:5c:87:78:20:22:d9:57:0c:40:9b:1a:5a:
3d:79:ac:7b:15:bf:7c:df:28:51:ab:df:29:29:12:17:f1:f1:
dc:61:1d:22:ef:84:8b:86:3d:4f:75:12:a5:f7:8f:c5:0b:6a:
b8:e2:d5:93:3b:24:b4:b4:b4:c4:9c:5a:c8:e1:f3:14:9b:7d:
1c:9b:10:fb:f2:a5:c9:f1:0f:d9:d3:11:f4:03:41:3f:88:74:
ef:89:b9:a9:af:01:78:bb:83:ae:35:37:ff:76:9c:9d:cc:07:
16:f4:55:f8:b2:bf:23:64:78:c7:31:c5:80:b0:cd:a9:31:1f:
67:f1:c1:9b:85:a3:c3:78:65:8f:68:79:4d:86:b9:5d:97:dd:
83:eb:4b:1a:a5:32:a1:32:a4:c8:d9:9a:ee:61:b4:5f:56:61:
84:c2:75:0f:3a:86:73:c5:b2:9c:9d:0d:91:41:67:a1:17:33:
44:ac:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 02:53:23 2026 by rpki-client