Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: x/w2JtZ+tW2u8LhD3r13vGsT23tdCRXiNQOhqvGlldw=
Subject key identifier: 72:90:3F:E6:A0:EA:1A:0A:CA:1A:A0:5D:8F:01:5B:12:12:0D:CA:DB
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019D39E5B246BC6C02023BED00E6086685DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1791
Signing time: Sun 29 Mar 2026 14:00:47 +0000
Manifest this update: Sun 29 Mar 2026 14:00:47 +0000
Manifest next update: Mon 30 Mar 2026 14:00:47 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: 45lusuXpUnZ8OBXUDpO0NjvBE6/Dfsa+WgDjbeM9Krg=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b2:46:bc:6c:02:02:3b:ed:00:e6:08:66:85:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Mar 29 14:00:47 2026 GMT
Not After : Mar 30 14:00:47 2026 GMT
Subject: CN=72903fe6a0ea1a0aca1aa05d8f015b12120dcadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:ed:87:7f:b2:e5:69:03:e6:a6:e0:21:8c:
4d:c4:38:e3:0f:89:41:88:69:40:df:af:c1:5c:76:
39:f5:6e:6d:08:8a:70:6b:4d:b4:77:f5:62:cf:10:
48:a9:bc:c8:80:3a:4c:a7:91:6e:1b:80:29:cf:3a:
76:ad:84:bd:6f:8d:71:3f:43:bf:ea:33:7b:73:0a:
86:74:4c:d6:f5:82:6e:e7:b7:4b:8c:46:04:a7:1c:
20:9c:86:f1:19:42:e5:7b:ab:1a:92:ec:38:53:14:
12:49:a1:1e:2a:8b:cb:91:16:e3:82:d2:ad:d0:ef:
12:30:e6:ad:7e:f1:4c:0e:9d:55:8e:b4:dc:45:3d:
6c:8b:8d:1f:c2:cd:38:d4:a7:39:67:af:f1:6d:a9:
ba:37:87:26:49:76:b4:5d:64:f0:0a:5b:20:00:ce:
45:04:ce:ca:a2:5e:46:cd:65:1a:cb:be:06:60:5f:
b4:41:b2:31:0a:12:b0:84:1c:5c:47:96:a6:b6:da:
5b:22:99:dc:9b:3f:2b:b9:46:12:ff:a0:70:bd:70:
33:53:56:b4:6c:17:65:b6:34:94:2c:dd:c4:32:87:
b2:87:c9:0f:d2:d9:bf:22:d9:ff:04:e4:b3:f1:d0:
f3:a3:ab:08:4d:87:63:4b:70:5f:97:41:49:6f:3f:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:90:3F:E6:A0:EA:1A:0A:CA:1A:A0:5D:8F:01:5B:12:12:0D:CA:DB
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9f:f4:3e:95:41:67:04:de:d4:01:ef:f7:2c:fe:13:89:fd:
1a:72:02:92:cb:6f:ff:de:96:e8:e8:04:10:39:0c:78:63:6c:
b7:d9:2a:c6:04:70:36:e1:cc:6b:e7:5e:c7:3b:a5:5d:38:b8:
1b:5f:1c:9d:80:07:ad:c5:8c:d6:c8:39:24:50:9f:85:97:90:
28:c3:2e:c7:3e:3a:3e:8c:d0:d9:23:cb:25:f3:2c:5e:f2:f7:
c2:e5:58:5b:42:99:78:8f:61:f0:6c:a2:94:20:60:1a:a9:53:
d4:a3:92:a6:6b:78:48:b5:83:02:38:b0:be:e4:d9:b6:22:36:
44:7c:81:4a:d6:6c:28:3c:49:ef:07:bb:be:5d:65:93:36:e2:
e1:7f:4d:9d:80:ca:fe:ac:a5:b5:3d:d3:bd:36:1f:03:a3:94:
39:72:ca:84:0e:cd:88:78:72:b4:ae:32:fa:c0:71:5f:a7:01:
54:83:4c:1f:84:69:69:4f:f7:87:ad:14:55:14:d8:c7:92:b0:
b7:9d:35:5b:60:ea:c6:a6:3f:17:42:00:8f:58:67:02:95:83:
01:2f:ae:65:a0:59:6e:95:2e:33:35:c2:be:1f:91:a7:7a:8e:
45:e7:f3:a6:ee:91:d2:01:f7:91:a1:11:8a:fe:c7:2e:d7:81:
45:57:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:00 2026 by rpki-client