Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: QR4UzksqbWJpqIckWWV+Tp1RAse0O+uTcl8QDmn3tOI=
Subject key identifier: 93:0C:C0:3E:41:7F:E8:34:F3:4D:C2:32:18:FA:BA:FA:9D:7C:16:8E
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 019D382E23D310B0CBE696AEA40352C0B469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 0522
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: OsM4U5tOofAigdCTuruhlEjs2Uhv+iALHJPxRo3kjzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:23:d3:10:b0:cb:e6:96:ae:a4:03:52:c0:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=930cc03e417fe834f34dc23218fabafa9d7c168e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:84:c7:7f:ab:29:d2:62:28:1b:1b:f7:5b:
14:e2:de:8f:ff:c2:9b:91:f3:eb:c1:3f:82:31:af:
d7:ca:52:46:a1:13:5f:d1:1c:51:94:e2:6d:d0:7e:
57:4b:5b:5d:13:10:51:7e:b0:5e:fc:5d:6a:bc:76:
1f:52:3c:cc:b7:cf:09:83:e8:7f:0b:0b:13:72:92:
52:24:6d:af:5c:80:96:18:6e:ac:72:da:2c:5a:2b:
3c:3a:f6:d7:71:04:98:78:e9:7c:0a:a3:ef:6d:e2:
a5:32:f3:b0:ba:03:5b:56:f0:03:de:60:a0:d6:9c:
eb:40:c4:af:80:4a:11:bb:31:2e:17:24:9a:4e:db:
80:4f:6a:12:21:aa:54:31:88:c3:fa:7a:1e:59:3e:
e2:58:f2:44:e4:f9:ba:20:ed:c7:4b:7c:f3:a6:d7:
6e:0a:90:49:37:20:41:19:2c:18:a5:38:3a:3b:b8:
d0:29:de:27:90:5a:47:6b:02:c0:c2:73:3b:07:cd:
25:e3:ad:dd:94:84:b3:e2:a2:b9:11:81:a5:d4:36:
4c:10:b8:74:0d:03:ea:72:65:2c:f3:ba:a0:66:a2:
ca:2f:e0:81:b9:9b:d1:72:68:c7:ce:60:75:b8:d9:
43:e5:33:71:db:5a:3b:9b:20:6d:c0:cb:0b:bc:b1:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0C:C0:3E:41:7F:E8:34:F3:4D:C2:32:18:FA:BA:FA:9D:7C:16:8E
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f8:30:bd:a5:50:f6:a9:4f:0d:36:1d:37:64:7d:7c:f5:4f:
3f:5f:1e:ac:a1:06:b5:a3:1b:32:13:76:88:4e:df:e4:91:08:
1b:8d:38:b6:b9:d3:02:01:da:e4:0f:04:ee:62:80:cb:fb:a4:
2d:55:67:dc:b8:86:d4:33:1c:9e:93:92:68:27:1d:1d:b1:4e:
7e:67:5f:74:3d:bb:64:3b:9a:68:68:8a:01:8f:b0:70:1c:21:
6e:4c:06:97:8c:f2:92:c3:f9:2a:47:b6:18:e0:6d:ea:86:4c:
0d:45:ad:12:27:73:40:3a:6c:c5:a2:e3:77:24:07:24:06:29:
a4:79:04:34:99:f0:e2:d9:2d:9e:23:d9:7f:29:3b:0d:e6:51:
4e:b1:60:05:54:ef:60:60:51:e9:d6:da:ae:11:ed:78:8c:7a:
59:3a:d0:44:b8:d9:74:64:70:3b:9a:d2:d8:e6:aa:39:9f:2e:
d8:fc:fb:c2:6f:07:2e:18:0b:b8:09:72:b6:4c:95:ef:67:f3:
f1:f0:da:2e:2b:eb:59:4f:e1:7e:ce:02:2d:75:3b:0e:45:19:
2b:34:75:5b:e1:91:60:9e:a5:a1:20:2b:c4:d8:8f:b9:c7:47:
8d:3b:c0:a5:3a:b0:32:fa:a8:64:84:d9:7f:40:11:b4:f6:33:
75:d0:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:53 2026 by rpki-client