Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: mCfzdetB2E+7Cm6lFVx23h4zRsijTBGlPT7OM0QClKo=
Subject key identifier: 08:77:A0:1F:12:A4:0A:99:A5:BB:EA:84:77:7F:9A:C6:3B:39:22:B5
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 019D389C007DA0270CF781F247A7B8D1EA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: xuv9CvaHUKgvrgDBhVLjI68GyhjYlKlVbcaIwDoFv8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:00:7d:a0:27:0c:f7:81:f2:47:a7:b8:d1:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=0877a01f12a40a99a5bbea84777f9ac63b3922b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:42:7a:d6:af:b6:cc:89:99:3e:66:d8:50:
62:6a:d2:cf:5c:dd:16:d7:53:90:fd:44:7b:d3:91:
0e:65:eb:fa:7e:e0:4d:78:69:32:aa:77:02:f6:ab:
32:7d:e5:75:d3:87:2c:0a:87:04:b6:74:91:db:35:
9c:2c:2a:5b:af:53:7e:9e:7c:47:f0:84:af:fa:11:
60:b8:27:7f:79:1c:fd:08:61:f6:4f:b7:c6:3f:40:
43:3c:32:41:73:67:43:ea:a9:38:ef:c0:4a:d1:33:
92:8d:50:e5:a3:8a:03:d3:c6:5f:64:ef:bc:c8:7e:
1b:99:f9:09:a0:11:4a:c6:d1:82:86:ca:5a:19:fb:
66:d7:63:d7:36:97:18:e0:f2:a4:72:25:5a:ec:97:
ad:a9:c7:56:20:e0:92:6e:0c:b8:ea:73:49:bf:74:
27:a8:a5:03:0c:44:36:4a:4e:9d:da:3f:34:00:62:
56:4d:9e:84:f2:e4:ab:07:8d:97:a2:4e:5d:44:2b:
5f:ac:db:36:76:36:8b:73:8b:ba:6c:a3:c3:c6:44:
4c:7c:ad:16:2c:a1:f8:04:22:77:78:a2:01:53:bc:
6c:f4:83:e3:75:4d:95:12:b3:50:29:47:ae:8f:9d:
14:aa:00:58:f4:41:e6:3a:79:c3:ad:fe:6a:eb:f5:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:77:A0:1F:12:A4:0A:99:A5:BB:EA:84:77:7F:9A:C6:3B:39:22:B5
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:82:bc:d1:67:19:12:c2:c6:89:2c:2c:69:d7:b3:ea:29:47:
21:53:c4:c1:d7:9e:17:86:f9:56:9f:4b:49:7d:65:c4:c1:a2:
ed:5d:1e:0c:4d:73:7f:94:6c:76:97:24:c7:1f:39:27:d8:ce:
f1:7d:93:91:aa:22:c1:d2:8d:ca:96:78:48:5a:13:b5:fd:47:
68:b9:83:b2:c6:5c:41:4f:89:12:8d:56:89:1c:21:5f:8c:53:
3c:fc:da:48:d0:91:24:a8:0f:48:6f:92:4c:34:f9:10:72:18:
8c:5a:ed:52:af:ca:92:00:6e:c8:e3:ae:18:99:d1:1d:16:67:
4b:40:c1:17:6e:56:22:ae:0c:bc:b2:e8:65:ad:c6:ce:84:59:
79:4c:ec:95:e4:ae:6a:72:bf:c4:ef:c3:8a:5f:4f:16:b9:64:
fa:35:6d:a1:69:2d:69:6f:af:18:00:7e:41:2b:8a:7e:94:27:
fe:8e:5b:2c:cb:5d:76:f3:6f:77:02:f7:69:74:4c:76:10:54:
04:e6:00:27:26:a3:64:52:1f:91:fc:d0:80:0a:02:4a:f1:5b:
bc:70:4d:f3:19:a2:39:db:6a:df:f9:31:32:d1:6c:74:d3:6e:
c3:cd:2f:4f:b4:63:1f:3a:1a:4e:fb:e0:63:a0:27:a7:60:20:
1d:27:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:01 2026 by rpki-client