Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: vVmoWXJzGSYthno/arxDMwnfvQclRhRoMr7zyD2ZhTI=
Subject key identifier: 7F:B6:4C:BF:16:80:13:8C:EC:10:09:77:D3:75:E1:6D:66:AF:BE:D9
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019D34883E82F5F17FFDBACDB7C64840C153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 04E7
Signing time: Sat 28 Mar 2026 13:00:37 +0000
Manifest this update: Sat 28 Mar 2026 13:00:37 +0000
Manifest next update: Sun 29 Mar 2026 13:00:37 +0000
Files and hashes: 1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
2: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: 7QkufCvomZtI38lpGoQnRkYSTcc9Kk8obMl1uLcdA6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:3e:82:f5:f1:7f:fd:ba:cd:b7:c6:48:40:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Mar 28 13:00:37 2026 GMT
Not After : Mar 29 13:00:37 2026 GMT
Subject: CN=7fb64cbf1680138cec100977d375e16d66afbed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:36:b6:11:c7:6d:23:6e:12:0a:61:9e:fc:78:
ec:be:8c:f0:6e:e4:8a:c4:7a:92:41:b3:48:2d:39:
3f:8c:da:4a:77:bd:46:9f:a0:a0:f0:b1:54:f4:1a:
88:41:ba:c9:df:1a:56:0a:95:d2:84:87:9a:d4:db:
0e:d0:69:9e:03:ae:97:58:1b:1c:45:a2:86:de:7e:
df:77:4d:34:66:54:e8:33:84:63:58:d9:fa:f2:78:
c8:1c:86:6b:da:63:73:e9:b8:e8:ef:ca:22:ac:4d:
f7:a6:c5:7a:0a:2d:41:b2:64:c4:f3:90:65:55:1c:
1e:a8:32:f6:50:e7:35:d0:d0:4c:09:45:90:cc:4d:
c9:a8:b2:0b:e1:1f:b8:70:60:92:d1:35:f9:9c:f1:
74:31:b0:64:06:ce:e4:e0:5a:e3:f5:e1:e7:53:4e:
2b:fe:bb:b2:81:db:b5:f9:20:20:54:be:f3:84:e7:
84:04:2b:69:29:7f:06:f0:29:d0:2b:b4:cb:b8:b1:
b7:97:c3:d4:66:51:bb:20:18:19:47:85:76:4e:94:
95:c0:57:66:85:07:f2:80:d3:9d:44:4f:0e:b2:5d:
3d:f7:d2:ef:63:38:df:96:48:17:38:56:53:05:25:
c6:ec:6e:10:38:f7:d0:62:15:b9:b7:d3:ee:1e:9d:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:4C:BF:16:80:13:8C:EC:10:09:77:D3:75:E1:6D:66:AF:BE:D9
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:84:13:16:84:da:43:ff:68:74:b6:4c:36:bd:7e:0a:69:98:
9e:90:dd:11:90:c3:2d:06:06:36:df:1b:90:d8:fb:05:33:ea:
37:e9:49:43:7c:3f:6e:2d:a6:20:b4:78:be:bd:16:e0:3d:1d:
6c:c4:15:fd:f7:7a:56:05:f0:db:06:a6:f3:9a:60:85:e8:fd:
a8:59:55:f1:e2:3f:53:ea:a3:ce:7a:12:cb:93:66:86:ee:21:
64:90:59:c9:4a:13:db:0a:f6:61:40:83:49:9b:97:1d:91:2c:
47:8c:4f:9f:52:69:0b:e7:1b:1d:e1:da:a1:c1:66:ef:ba:ca:
f0:8b:7e:20:77:0e:d4:21:ea:e3:32:f5:b8:d0:36:2b:23:6b:
42:03:55:2c:b3:d1:22:10:ea:e7:f9:ae:73:c6:68:15:3d:53:
bb:44:83:94:33:e3:0a:bb:78:66:0d:6f:51:30:f8:6d:a4:2e:
be:26:40:a2:e7:c1:3b:6f:a7:67:fb:91:b9:be:04:27:50:28:
33:75:93:4b:93:cd:d3:26:6e:10:e2:96:a5:b7:1b:45:6a:50:
99:a6:63:cb:bc:26:14:3b:13:a5:82:5d:89:f1:23:d8:76:a7:
9e:45:80:34:92:f4:14:d7:1c:78:89:3b:3d:38:91:e7:b2:d4:
13:5d:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:24:03 2026 by rpki-client