Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json)
Hash identifier: P1P5+bSXLOFdtBsb4B0khiyuGZq2U6sj9JGxh1DwUPQ=
Subject key identifier: D1:5B:AF:04:2F:4E:2D:10:22:89:A2:00:31:52:E9:CB:7F:33:68:1F
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial: 019D389BB6125AC7694DBFAB18FB2A378388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: M1Lf11eksEvqz34PbHYO7Z4jXHI.roa (hash: 1wwr1qMj1Er+C+R6P5FqGwBBlZMubvTHn7IuCGLNv1Q=)
2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: Q7q5GPddeS9JOOAlyhR7YG0ug9ashzp1wpDGGBEFLPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b6:12:5a:c7:69:4d:bf:ab:18:fb:2a:37:83:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=d15baf042f4e2d102289a2003152e9cb7f33681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:93:1f:53:a1:66:f9:d2:24:cf:d2:f3:bf:
06:53:26:a7:67:52:71:a9:7a:b6:6b:b7:a7:4c:bd:
66:59:5e:19:ca:f1:f0:87:56:00:e2:68:42:38:9e:
d4:b2:5b:b1:0f:16:ae:82:b1:0b:68:5f:6b:6c:bc:
e9:36:70:aa:7f:77:e1:88:5b:db:a3:c5:d2:5e:16:
af:54:db:cb:40:e1:ba:03:97:b5:9f:d8:fc:2f:8c:
bb:40:94:89:5c:fe:d8:71:c4:69:aa:a4:70:c3:ba:
19:06:61:b7:f2:e3:3a:1f:6d:e0:df:cf:b6:df:89:
15:0e:2f:cf:bc:25:28:cb:6d:6b:97:06:c9:a4:84:
84:30:25:60:2a:88:a9:14:d5:10:44:e4:a0:50:34:
1b:79:1a:cb:8b:13:73:e0:d8:e5:34:7f:73:cf:ec:
29:12:d0:d6:59:a6:e0:86:ec:b7:12:51:29:47:23:
e0:e6:b4:e9:60:a9:68:9a:a1:ec:7d:79:bf:34:d6:
fd:a3:d6:02:d0:33:59:59:b9:ba:94:c5:c9:2e:c2:
79:48:dd:f0:58:50:3c:57:2b:71:a5:45:8e:e7:bc:
5e:97:38:db:50:66:3d:fa:52:f7:9d:ff:fb:25:de:
c5:84:f2:b8:1b:ea:1d:12:92:9a:bf:16:fc:f9:a3:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:AF:04:2F:4E:2D:10:22:89:A2:00:31:52:E9:CB:7F:33:68:1F
X509v3 Authority Key Identifier:
keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:24:01:3a:6f:b6:4f:35:0b:fa:8e:91:9f:a4:83:4a:bc:
d2:2c:b9:1b:94:87:9e:1a:ad:75:75:d3:48:a6:13:e7:6c:47:
fd:d6:fd:de:4f:8a:d1:2b:83:8c:ed:ec:1c:ae:b4:c6:87:a2:
d6:2b:5a:28:c2:e2:48:a0:88:e2:3f:1b:4e:96:25:23:df:38:
6a:60:7c:4d:d4:99:1e:48:99:36:49:f4:dc:ce:3c:84:6d:9f:
bd:92:94:a4:39:03:4a:cf:d2:ec:bd:16:3b:80:9b:81:0d:c3:
db:f7:57:fc:88:b9:46:79:05:d8:94:4a:c8:ac:fb:b9:5e:dd:
64:49:5d:ad:f6:41:1d:b2:71:08:8a:c0:fe:16:c1:55:c4:b5:
88:78:11:4a:c6:38:15:8c:a7:fd:90:e4:72:8b:83:aa:ab:69:
b0:90:eb:27:80:f3:95:47:2a:d6:b3:27:e3:07:29:4b:d3:64:
db:34:c4:5d:31:25:a8:7a:78:aa:6a:88:90:44:5b:c5:a6:03:
4f:0b:87:27:6c:15:b9:cc:9d:b6:97:42:88:3e:d3:6b:f9:80:
08:7e:e7:ef:fc:23:93:e9:15:4e:a2:7e:ac:17:11:9b:d8:b3:
17:0d:8e:d0:12:aa:96:08:04:48:21:df:a8:68:21:c9:f6:48:
45:48:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:36 2026 by rpki-client