Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json)
Hash identifier: jl1u6EvzCrst+cp5CkG4p1gDUZ8KWZerNeFYkbEE6eQ=
Subject key identifier: 18:47:A3:CF:4A:B6:50:BB:15:2D:AE:27:47:FC:0E:0C:7A:BC:04:59
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial: 019D37F6E2614E4AA64CC344AAE88332D968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
Manifest number: 0FEE
Signing time: Sun 29 Mar 2026 05:00:19 +0000
Manifest this update: Sun 29 Mar 2026 05:00:19 +0000
Manifest next update: Mon 30 Mar 2026 05:00:19 +0000
Files and hashes: 1: Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa (hash: gLzddFQSRg/+84Z04UYrdta+47qpL6E3gmNgoeRKLvI=)
2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: mcEnQJLiCKmBcv6a4XLUtayAGxtN2E2b+ap3HSEcKps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e2:61:4e:4a:a6:4c:c3:44:aa:e8:83:32:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Validity
Not Before: Mar 29 05:00:19 2026 GMT
Not After : Mar 30 05:00:19 2026 GMT
Subject: CN=1847a3cf4ab650bb152dae2747fc0e0c7abc0459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:86:0d:c5:92:c0:5e:5e:5d:b6:4d:61:c0:
5c:28:1f:bc:94:f5:39:08:2e:98:33:e1:7f:28:68:
85:8a:8b:17:54:9f:77:75:06:55:1b:6a:de:7c:ef:
7b:1e:e6:a9:55:a6:72:44:49:62:49:30:ff:b2:a0:
b3:89:64:bc:c9:9c:a6:68:c1:f5:ad:e0:91:c9:5f:
85:72:11:7f:1f:ce:6b:a7:ec:a0:13:f8:ec:e9:aa:
14:9d:c7:90:9d:14:40:1e:67:4b:ca:fa:df:a7:6a:
71:36:b4:39:dc:0f:31:6c:37:d6:9a:24:e7:22:6d:
b9:f2:16:62:7b:98:01:fb:85:8e:57:f0:da:7c:7a:
38:19:87:87:d3:f6:bd:19:ca:e9:77:cd:3b:05:d0:
f3:a0:aa:63:ed:27:40:10:c7:0a:18:04:fd:47:ad:
83:84:2a:07:14:82:08:43:0b:5f:36:fe:72:ba:b9:
7e:a1:b1:e0:3e:38:e4:22:d0:be:bb:5a:2c:d7:d3:
0c:ca:aa:ac:6a:ae:e4:70:ce:ce:8b:75:58:c5:fa:
95:65:14:31:f8:ba:20:b2:93:b2:6b:a4:45:3d:1a:
10:9b:40:9c:66:e5:b5:83:c1:14:e3:50:d5:73:e8:
2e:bb:5b:35:7f:d8:5a:1d:c5:05:2f:15:3c:af:ec:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:A3:CF:4A:B6:50:BB:15:2D:AE:27:47:FC:0E:0C:7A:BC:04:59
X509v3 Authority Key Identifier:
keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:74:38:3b:a3:88:15:d9:fc:7e:82:ab:ed:2e:20:d8:cd:ed:
8b:4d:cf:43:78:2d:f2:5e:14:96:bc:79:f3:08:d8:d2:a9:5b:
cb:02:87:07:3c:c9:19:1c:3b:58:83:74:5c:85:d9:c2:55:5e:
28:fd:d3:3f:1e:51:06:50:0a:75:f7:62:67:23:01:f7:9a:74:
66:6f:30:80:b0:5d:54:53:7c:f4:c0:2d:60:60:25:80:0a:43:
8e:3a:6f:d3:48:02:ef:fa:ac:af:c0:73:d5:70:3e:a5:d4:d9:
59:bd:9b:be:a5:7c:3e:2f:88:1c:fc:b8:4b:cf:84:6d:7f:8a:
e2:8b:fb:69:bc:f3:c2:60:50:5c:34:5d:84:1e:04:0d:6c:7b:
39:07:c9:cb:4c:15:d4:e3:ef:a9:9d:7c:38:f6:6c:01:4a:e4:
40:1e:47:4f:db:1d:33:53:e2:21:06:31:49:c8:53:e9:c7:a4:
c1:95:97:47:dc:29:a5:18:1b:a4:bf:67:f2:8a:e3:bb:06:e0:
d1:c8:1f:47:a8:c0:98:80:d1:56:9a:90:5d:51:e8:9b:d0:21:
73:2d:7f:6b:0b:93:7f:c2:ed:9f:fd:43:9d:81:20:db:28:ff:
99:08:1c:05:a7:2f:4a:37:e5:42:bf:42:b8:4f:49:6c:e4:28:
3b:75:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:42 2026 by rpki-client