Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: TAf7gUlsPtjoiLYm51enfozpkun6komgM9XRWvIaXak=
Subject key identifier: 57:BB:E0:5E:07:F5:E3:EF:30:12:FF:52:B5:52:E4:1E:0F:80:C5:0F
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019D3941C073596AB65F8FFCF75F1F480DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0DC0
Signing time: Sun 29 Mar 2026 11:01:43 +0000
Manifest this update: Sun 29 Mar 2026 11:01:43 +0000
Manifest next update: Mon 30 Mar 2026 11:01:43 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: Ijk0LA4/fhF/SWPQAaRbBYS0VQwjj4ogLqWpiyBcF2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:c0:73:59:6a:b6:5f:8f:fc:f7:5f:1f:48:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Mar 29 11:01:43 2026 GMT
Not After : Mar 30 11:01:43 2026 GMT
Subject: CN=57bbe05e07f5e3ef3012ff52b552e41e0f80c50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:01:43:77:50:3f:a9:53:af:83:34:7d:99:
ea:c4:17:bc:44:74:f4:82:05:00:c4:34:d2:e2:e2:
c1:49:4e:74:a9:7e:2f:ad:02:d3:a5:10:bd:c8:df:
c7:13:6c:bf:81:07:2b:9b:f1:66:0d:1d:12:00:eb:
74:b8:f3:d8:fc:79:ca:bf:82:88:5e:a7:bb:ef:7f:
a2:94:17:78:8f:34:cf:60:25:b3:55:8a:fe:b1:56:
75:0b:52:46:d7:2e:47:9b:5d:08:47:9a:c4:dd:86:
46:7f:4f:bc:59:42:1b:52:43:65:8d:79:4a:32:0f:
eb:d4:16:df:e4:ce:c8:d0:a9:38:8c:78:4e:cd:c8:
b1:17:2d:d6:9e:f5:ea:e3:02:25:40:27:c8:28:cd:
4c:08:e4:42:9e:82:3f:da:7c:df:d8:8a:a7:b2:d7:
91:aa:cc:64:f0:1e:f6:8d:c6:dc:31:a2:c7:e6:0a:
3d:cd:54:d1:96:bb:a2:79:63:51:7e:5a:2a:73:80:
18:2a:70:ab:65:41:66:69:58:e8:65:a2:e3:47:76:
2b:39:c3:00:df:85:ee:73:61:10:4d:55:60:02:ad:
bf:32:76:7d:2c:37:cf:a6:43:cb:90:02:24:6b:56:
ac:29:fa:d7:f3:58:31:3d:f1:35:66:b1:7f:73:f6:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:E0:5E:07:F5:E3:EF:30:12:FF:52:B5:52:E4:1E:0F:80:C5:0F
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6e:9a:25:6b:60:f2:55:84:fd:53:25:81:b6:a9:ad:73:05:
4c:e4:6b:2a:fe:ee:fc:1f:8a:3a:e1:27:49:ee:e5:95:f5:54:
00:a9:ee:2c:ee:7b:10:44:04:6b:37:c3:76:8c:c1:78:4e:d5:
8f:76:d0:33:1c:01:da:31:2b:73:bc:ca:4b:45:9d:5a:cb:2b:
d8:d7:26:8e:ef:01:b4:f9:70:e5:75:e8:21:61:e3:48:a2:7d:
00:7c:e0:fa:99:40:58:7c:2a:44:06:76:cc:6c:97:25:35:e5:
5a:b1:36:f5:9b:72:f1:cb:5b:cc:c9:ee:36:fa:f3:4e:ec:e6:
7c:71:01:26:c3:a3:9a:74:69:b5:2e:3c:d5:5f:a0:08:b6:46:
96:a2:a9:ef:6d:e6:02:14:f3:90:0f:66:4c:ec:62:37:20:d5:
6f:a2:f7:69:f4:26:6e:81:75:6d:13:0a:9a:80:a5:80:ea:5e:
61:4b:8d:63:90:45:57:51:74:5f:95:48:55:eb:56:11:98:f9:
5e:6f:39:67:c4:b3:c1:23:55:0c:f4:95:40:30:0b:64:b6:de:
98:f7:f7:e4:69:40:d3:eb:eb:a7:19:5c:bf:78:c4:3a:7f:67:
af:3a:a6:d5:b5:bb:c1:f2:00:8a:29:92:04:56:00:af:ac:8d:
65:cf:f0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:33 2026 by rpki-client