Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: 0Dfj1veUbHqpl8n4P88+wW29gD503hEx5SOGUXwnRmY=
Subject key identifier: 3E:CD:1E:EF:A6:4F:60:EB:7D:7F:17:07:3C:EA:BA:B0:8A:CE:1D:85
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 019D3A1CC1E86B6FE5F9C183D94F035D7D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 1851
Signing time: Sun 29 Mar 2026 15:00:56 +0000
Manifest this update: Sun 29 Mar 2026 15:00:56 +0000
Manifest next update: Mon 30 Mar 2026 15:00:56 +0000
Files and hashes: 1: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (hash: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: CHnmH8Ibg9sOGOLC+/oXXWAojXbl550pTIC7jiekyAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c1:e8:6b:6f:e5:f9:c1:83:d9:4f:03:5d:7d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Mar 29 15:00:56 2026 GMT
Not After : Mar 30 15:00:56 2026 GMT
Subject: CN=3ecd1eefa64f60eb7d7f17073ceabab08ace1d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:b2:7f:3b:bd:0a:69:14:8d:a1:a1:cd:15:
c2:de:cc:7e:4e:48:a3:46:e1:a2:3a:6f:65:53:a0:
f1:46:d0:73:82:49:fb:9f:d7:89:4e:b3:36:fa:73:
06:a5:01:03:0e:10:5a:d4:a6:1e:f8:7b:94:d4:c6:
95:e2:1f:b4:10:33:52:f9:b0:28:07:be:2d:e7:28:
dd:1a:da:45:43:d2:4c:23:c4:97:24:d6:61:a5:9f:
20:94:f4:7b:e2:19:1a:4a:24:e5:e8:aa:17:f0:08:
d7:96:2c:ad:c6:e1:23:90:91:dd:34:d6:ac:b5:e6:
93:b2:86:5b:66:83:9a:ad:b6:46:79:3b:ff:fc:53:
81:44:81:25:ad:77:6d:82:1a:ec:89:42:f4:c6:0e:
2c:a9:a8:ff:81:d9:38:48:6b:d6:5f:3b:d2:0a:53:
cb:b1:fb:ff:31:ad:e6:db:71:04:4e:81:74:c8:36:
b9:e2:0d:94:9c:05:e3:40:9d:07:92:9e:24:3b:84:
d7:7e:8d:cb:e8:9f:b4:21:39:f4:f1:0a:74:dc:26:
c8:7a:c8:1a:b0:35:93:4f:54:a8:20:69:a6:7a:19:
e8:5f:65:e7:01:02:1e:02:7f:91:8c:37:84:d3:4c:
59:17:6f:4f:48:ca:8a:9f:0b:f6:27:af:68:9c:46:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:1E:EF:A6:4F:60:EB:7D:7F:17:07:3C:EA:BA:B0:8A:CE:1D:85
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:6c:75:88:4a:2f:08:ad:c7:20:3d:a1:cd:37:d7:d8:7e:
9a:19:58:b7:ca:67:0c:7e:e5:c2:55:f7:fc:9d:dc:a6:22:5e:
48:13:5c:11:02:c9:e9:8b:e4:d9:1b:71:96:cc:4e:9a:16:f9:
53:8c:ee:ee:0d:20:c8:fd:6d:da:fa:5f:11:2e:7a:40:47:6d:
73:99:49:18:45:b6:48:1e:72:fd:e9:c6:40:5d:13:4f:b9:a3:
13:51:13:9e:7d:59:ef:ca:4c:9b:92:20:e0:dd:f7:be:fd:63:
3a:df:25:d1:15:2a:8b:d2:27:0f:88:d0:3d:43:59:4a:02:ba:
09:08:68:b6:0a:92:e0:1e:b4:3a:37:b9:16:73:a1:30:95:8a:
a4:eb:ea:07:22:db:33:73:76:5d:05:7d:b8:72:67:e7:95:72:
4e:43:6f:97:ce:bf:27:5b:82:dc:a6:c0:25:fd:8d:d8:b4:91:
e6:90:c6:d8:81:0a:86:15:d1:8f:0f:ec:13:39:66:ca:0e:00:
25:f6:54:2a:fb:13:24:72:af:e5:3a:9a:c5:b6:b2:e7:07:d5:
94:34:e4:58:85:a8:ac:66:a8:10:ae:d4:70:9e:28:2d:49:e4:
15:c4:be:70:21:8e:0b:7a:93:9e:9f:2b:7b:68:03:e9:82:97:
99:3b:09:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:28 2026 by rpki-client