Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: OJqUI0yHaWb1MrU7benbirsMR/Dfp+h6e6Rsu5xqc7Q=
Subject key identifier: A1:4B:E9:17:D7:69:68:C1:1A:26:3C:7D:B3:35:66:9B:28:B6:20:25
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 019D3909DF74E7EBF6D247D37CBF2E9961E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa (hash: 16yeZ21Za1Z/lNRNjThEGWHSFlEFLlT8Kt56uKRyMVA=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: QSP8srs0xUQ9uhWnJAFeN4x70VC4z0yVvZYH2subVN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:df:74:e7:eb:f6:d2:47:d3:7c:bf:2e:99:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=a14be917d76968c11a263c7db335669b28b62025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:c9:51:37:85:5b:ce:b3:e6:94:05:68:1c:
6b:15:20:2a:b2:62:b8:78:6d:af:2e:6c:70:45:e5:
c0:37:b1:90:2d:f0:f7:63:62:8d:56:7d:3c:ea:80:
b8:4e:c0:79:90:7e:23:f6:b0:87:1d:cd:60:89:0f:
e4:a6:d0:2b:ef:67:99:4c:df:59:b4:87:9b:d8:23:
2d:2a:59:d2:25:02:ca:51:69:8f:f1:98:e0:d6:32:
bb:b9:10:23:af:72:d1:b2:73:b6:12:a8:aa:2a:73:
54:e1:ad:2f:f7:d9:f4:a3:c6:49:09:55:87:37:b9:
d1:3a:06:71:d4:24:98:1b:72:a6:87:63:fe:0d:45:
8d:b3:19:28:f1:03:21:c8:7e:7e:a8:34:13:a0:ed:
3a:f4:ac:c4:cc:ff:99:39:7f:23:07:8d:a7:35:68:
38:1e:bd:bb:f2:00:7d:73:18:11:0c:a0:d4:4d:6d:
67:09:7e:01:0b:b8:4c:05:6e:23:02:ef:56:6f:dc:
52:e4:ee:e1:90:9a:f9:03:74:4c:5b:eb:7a:32:8d:
46:01:6f:93:47:cb:32:57:53:8b:1c:24:1a:8c:71:
89:4c:64:7f:38:9e:69:4a:3e:f0:72:36:e2:42:8c:
ab:f7:54:33:4b:f2:ba:e1:9a:3f:90:6c:21:17:c3:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4B:E9:17:D7:69:68:C1:1A:26:3C:7D:B3:35:66:9B:28:B6:20:25
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b5:fd:cf:b9:d0:50:96:ec:a1:ab:25:7f:cb:e8:cc:b1:24:
81:39:db:e2:c0:54:a7:52:8b:39:24:84:bb:65:93:41:d1:e2:
e7:49:4e:b8:84:9c:3a:da:4f:a1:34:34:75:a4:ef:30:78:4a:
20:18:6d:f6:62:0c:ca:86:c1:9a:fa:e0:8d:67:5d:5f:6d:9d:
20:a9:a3:9e:2e:04:97:fb:52:7f:69:3f:8e:4f:a7:1a:ce:b6:
a8:37:ba:34:5f:64:41:60:b1:51:b2:dd:4c:cb:14:4d:35:26:
7f:95:94:e1:df:f5:e9:d8:5b:f5:d3:38:82:ed:84:42:81:1a:
8a:7a:0a:ee:d2:54:82:00:23:1d:c8:ec:ca:18:b6:5d:b9:0b:
60:df:45:f0:01:71:d0:6d:d0:de:69:23:07:69:3f:97:50:18:
a0:16:4d:fa:16:16:40:8c:f8:89:f9:f1:35:94:50:ad:81:3a:
df:17:6a:58:62:51:13:74:49:32:f6:21:e3:d5:01:80:2c:bf:
7e:09:bb:80:6f:be:e3:15:dd:81:d7:98:4a:ce:18:99:6b:3f:
f4:49:af:92:ac:c9:f8:55:0f:28:75:14:9e:b7:4e:6d:f8:47:
f9:fd:b0:16:f2:97:0a:23:28:9f:c7:47:e0:94:c7:c1:5f:bf:
9f:d2:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:24 2026 by rpki-client