Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: x6k0U7Lf2Y0xpJ95zwaCRxnzWhdi7CHa0qcoyWViUr4=
Subject key identifier: FF:27:DA:99:DA:17:28:29:DF:44:59:4C:FC:0C:98:16:DD:CD:54:23
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019D382E2C012845A47987644027743E3778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: f0WP565smg+uS2OEUJdRyb3d4OU+fGoYHes1DDVzobM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2c:01:28:45:a4:79:87:64:40:27:74:3e:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=ff27da99da172829df44594cfc0c9816ddcd5423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:99:3e:08:f0:6c:80:00:94:09:1a:95:36:
2a:2f:11:b8:01:bf:d1:58:39:e2:a2:6b:02:d0:62:
71:5a:fb:7a:b4:8a:cb:3d:7d:df:70:de:3f:eb:87:
d7:b8:30:76:a6:00:10:a7:bf:dd:1d:c2:0d:b0:46:
ae:ba:15:e3:42:b3:d7:a0:89:7a:f3:68:fd:b6:71:
aa:bd:ea:7e:3e:37:3c:6f:bd:aa:a5:e4:d0:5a:0f:
fa:22:a4:12:3d:e2:14:56:20:05:6f:59:50:ec:d0:
7b:53:b3:e6:51:98:a4:a4:19:96:2f:3a:87:ca:bf:
7c:7e:ca:ae:0c:df:df:d3:04:32:a5:71:e9:e3:ac:
35:9e:42:04:62:a3:fd:cf:9a:d8:15:18:88:38:1b:
3e:47:aa:3b:da:fd:f9:b4:da:42:9a:93:ba:77:7e:
fb:ff:1a:eb:1b:b0:ac:00:e0:1c:ff:87:8c:3f:19:
eb:ed:0c:9e:c8:87:6d:17:25:5d:79:74:7b:f3:78:
7b:ff:14:7d:e5:a7:0d:31:52:af:b5:31:16:32:18:
73:dc:e4:dd:7e:f6:87:6e:ad:12:d4:9f:84:f4:f6:
0e:d2:6b:1d:da:9f:d8:4d:de:18:ed:a0:07:2a:cb:
13:cd:d2:fe:f5:0b:d6:0d:02:52:6b:4f:16:31:e6:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:27:DA:99:DA:17:28:29:DF:44:59:4C:FC:0C:98:16:DD:CD:54:23
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:10:4c:7c:a3:05:b7:88:40:87:fa:86:13:27:0f:ea:e2:47:
87:bc:c3:d7:19:d5:90:32:d8:51:b0:9f:ef:49:6f:a6:35:e3:
4a:ce:56:d8:2a:78:26:33:46:da:e4:6a:62:a5:75:9e:77:d7:
d6:c2:49:33:b9:14:ef:2a:6b:46:4b:0d:6a:a4:5e:c8:f4:08:
09:22:4f:d4:bc:d9:25:89:8d:ee:d0:fb:de:60:07:cc:82:9f:
8d:0e:86:dd:9c:ed:a9:bd:9a:76:60:b7:fc:f7:a8:69:ca:3f:
be:6e:47:03:d0:34:64:af:c8:b1:c5:79:a4:10:65:b7:a3:40:
73:df:b0:66:45:c4:0e:e6:47:46:0a:84:38:7d:ee:47:59:38:
f5:3e:ce:20:f1:64:23:48:e0:bd:e6:26:0d:2d:ab:93:c1:49:
04:85:6c:30:92:e0:e2:dc:4f:cc:ad:87:68:a5:91:99:4f:39:
fe:9d:3b:9c:33:c7:b0:70:3d:52:49:9f:f4:71:3e:2d:73:14:
f1:cd:18:98:c1:23:f0:54:6d:50:39:c4:53:0b:5b:9f:b8:68:
e8:22:fb:8d:8d:ad:0d:ec:14:16:f8:0d:47:31:fb:ec:fb:d1:
6d:55:b0:c1:f8:d1:0e:a6:f0:73:de:b8:d0:b3:e7:0b:da:f8:
e5:4a:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:10 2026 by rpki-client