Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier: 6U+MqW/y2oivhpuQSqCVbxTxFMAOWpePiXmBd/yzi7g=
Subject key identifier: AD:20:00:22:34:F9:1A:CD:06:8F:01:62:64:FC:C1:74:AA:92:4A:F4
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 019D394134DB99EF9538C47B3C5AFF81E69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: RbsL-xX9pnl_GJm6Gej-Q9zwFsY.roa (hash: HJuDMuVxi+H4ewMQ1fnqz3XBNzngnt1KBgq67N7yx5o=)
2: f4AJyUE3SrgBCWutynP65IhFU9k.roa (hash: /2RLVJGgq3wwGfIcCzG7ueYxdZA4XusvqTsPUnJXmbc=)
3: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: VJi47ttXtDGIv7+wCo55kEeApldlc6096kNU81fkzgA=)
4: zIYwuiuPmXeYqbFS9sD_rJHrTkk.roa (hash: t6ZPIONZvfwNb5c7MxCgF8BbJhuy71Cr69Wqi2Mmcqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:34:db:99:ef:95:38:c4:7b:3c:5a:ff:81:e6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=ad20002234f91acd068f016264fcc174aa924af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:48:41:a9:4f:3c:3d:56:88:ad:ef:ea:ef:
e4:ce:6e:c9:71:38:4a:f5:0a:1d:ad:bc:84:a8:ef:
1d:ff:31:5e:0f:d2:70:f1:63:8e:e5:4d:63:4d:4a:
c1:ce:59:68:ac:d0:96:70:10:0d:14:71:3a:b6:8f:
37:e3:cd:74:50:ee:4b:48:92:e9:d8:09:10:df:91:
82:77:02:8f:c4:bb:95:9f:34:79:ef:a4:b5:51:5b:
29:70:5d:d2:c8:24:16:27:d0:19:ba:26:14:ce:1b:
86:91:59:49:3a:c9:08:b1:8b:90:82:f2:fb:00:51:
51:94:6f:af:40:35:ad:48:a9:ba:25:c2:ef:e5:eb:
0b:c4:03:40:ac:29:75:df:8e:11:09:23:64:6c:e0:
93:f3:2b:f3:dd:44:35:3f:84:4f:97:1f:da:f3:8f:
bc:4e:c5:9d:cf:b6:25:b3:0b:4f:e5:89:86:ee:de:
e9:18:ba:73:63:0e:f1:38:db:8b:e3:a7:ec:23:da:
50:f6:49:c5:5c:51:c2:9c:8a:61:e3:42:a7:ff:40:
ad:81:20:3c:d4:02:2d:71:51:66:eb:f8:71:b5:9d:
7f:2c:d6:d3:f8:a6:65:4f:c9:a4:62:7a:73:cb:64:
95:05:58:4d:1a:30:89:a3:51:a8:4b:15:3a:96:c4:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:00:22:34:F9:1A:CD:06:8F:01:62:64:FC:C1:74:AA:92:4A:F4
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cd:5e:61:ff:e7:e5:be:8e:44:04:d4:50:a6:95:ee:e4:5c:
4a:2f:40:77:ee:97:85:ef:d7:ae:36:3b:0f:92:e8:50:bd:db:
6f:ac:b9:a9:ba:e2:fc:f1:1e:c2:46:a1:8a:b1:32:8b:66:fd:
bc:39:c0:8e:13:cd:0c:b7:55:17:2c:f8:bf:28:02:7f:29:7b:
96:74:11:b9:b2:27:2f:74:6b:5e:79:f9:44:27:59:b6:01:42:
bb:3b:fb:0f:e1:cc:3c:34:63:7e:96:ba:a7:19:18:f5:aa:32:
eb:5c:9d:fc:3e:81:be:f9:69:75:58:20:bf:ad:48:0a:67:6a:
58:41:6e:11:3e:1f:53:61:81:95:32:cb:ac:34:ca:01:98:ec:
f7:92:4e:6f:d7:75:36:3d:76:5a:98:fd:61:b7:37:96:e3:0c:
99:9a:fd:63:9d:31:ea:60:a5:13:e0:13:db:db:06:24:7d:9b:
1b:95:1b:36:59:dd:de:f1:40:ed:16:76:d3:52:80:35:aa:c8:
8a:c3:12:74:71:e3:9c:b2:82:8d:48:1e:4e:98:6e:94:d7:f4:
b6:f6:e2:20:75:6c:7e:7d:2b:aa:84:6a:5e:a4:f2:a4:29:a2:
90:ef:57:e5:29:db:4c:1a:d4:99:e6:b8:70:c3:c0:20:d5:9b:
a1:bd:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:09 2026 by rpki-client