Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
File: _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json)
Hash identifier: LEg3w47uDnguWo3ZySa4Bn5ZjSQZ/3N0WIkSvt44cHU=
Subject key identifier: 23:FA:5D:6A:7B:BF:A8:39:F7:EA:DC:C7:01:1F:C7:51:20:EB:D5:44
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Certificate issuer: /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial: 019D38D3CB942FD8DE95634B4F29A0DFA349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
Manifest number: 09A9
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: 8POUdXxydU2NWgTjMAS46lsReJU.roa (hash: NHxwG6zBnwiJw78rQkaCy5d/Y3YySuB1Lrikl1PrCTw=)
2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: D/WkId2hkCU4HmtNEIY1oyVLTxke8obWRZ0RMC2kiYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cb:94:2f:d8:de:95:63:4b:4f:29:a0:df:a3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=23fa5d6a7bbfa839f7eadcc7011fc75120ebd544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:15:3c:8b:9c:e0:9b:e6:34:fc:64:dd:c7:
96:ad:f3:ca:11:50:65:6d:91:d5:96:4c:8e:c4:b9:
92:6a:58:77:1e:03:9c:a9:ca:1c:b3:1e:08:50:52:
bb:88:b5:f3:a8:48:bd:cb:f7:ae:11:4a:d7:ea:2d:
78:6d:92:9e:b5:f6:d3:65:70:1e:ad:26:bd:90:29:
3b:9a:c6:6e:85:3b:d1:b6:21:23:7c:59:10:70:10:
de:38:33:e3:f9:c7:94:56:4b:0f:45:79:9a:74:60:
11:8e:1c:70:9a:4b:65:73:3e:0c:35:18:5c:4c:0d:
de:99:97:fb:2b:54:5b:9a:5e:cc:46:da:d4:f6:29:
1b:30:ff:7b:3a:cd:31:50:a0:db:92:dc:ab:3b:89:
29:b2:63:b5:bb:11:17:97:31:37:6e:25:84:b7:6d:
e8:21:d5:f7:fe:2f:12:ae:b5:de:06:69:0b:1e:e9:
48:03:ca:5b:47:4c:10:b1:06:9b:f4:43:1e:ba:a4:
45:40:ef:78:e2:62:b7:9d:6e:d2:16:aa:82:30:bc:
89:41:24:8e:80:02:5f:1c:ca:a2:4c:bb:b0:51:7f:
5e:5a:94:99:44:c0:04:43:64:e2:9f:89:cc:b9:88:
bd:60:6c:69:09:b4:9d:60:17:66:ca:d2:f8:b1:4f:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:5D:6A:7B:BF:A8:39:F7:EA:DC:C7:01:1F:C7:51:20:EB:D5:44
X509v3 Authority Key Identifier:
keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:79:66:20:92:f7:8e:a6:84:a3:97:4b:2c:81:98:6a:54:56:
1f:bd:0c:94:db:77:b2:56:6f:6e:93:99:46:6f:cc:51:bc:d8:
64:96:db:2e:ea:e8:94:95:f8:bd:a5:62:8e:55:68:3f:f8:c2:
17:e4:dd:b0:7e:07:a1:b5:55:b2:99:b4:ad:a0:80:fa:8b:31:
94:a5:3a:46:33:7f:d7:a2:c9:32:74:7e:18:33:d1:80:0b:e9:
b4:4c:ec:92:0d:10:04:8b:ad:13:1f:55:c5:c3:ca:da:47:ce:
21:6d:fd:65:c7:81:2e:9a:73:6a:2d:d6:34:5a:33:27:b2:c1:
7a:ca:44:cb:4f:a5:f9:fb:23:3a:09:f7:19:7a:cb:f0:31:fd:
0a:1d:fd:45:59:09:96:47:fd:bc:14:a9:00:33:84:c0:fa:50:
bb:99:ad:8b:ef:35:ab:02:16:69:9e:70:a6:5c:cd:b3:f6:4e:
38:e6:d2:9b:03:ca:ea:74:54:db:ac:1b:b7:bd:d7:71:4d:57:
1e:41:9d:d2:81:7e:7e:cc:ee:6b:c6:f6:9f:9d:0f:bf:47:22:
e1:f6:28:fa:b2:5b:16:fd:61:dd:c3:a5:6b:94:5a:f8:a7:31:
e3:95:1a:eb:b5:b2:8a:1f:62:d2:cb:d4:94:f1:00:68:93:7a:
2a:a0:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:54 2026 by rpki-client