Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: 0FbqRkFyOFaP3nEq89ncprHAmhYIZxT6nWfx+p770Go=
Subject key identifier: D3:95:6F:AD:C9:23:4C:CF:C0:24:AA:B0:D3:D7:5D:4E:61:1F:73:2C
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 019D37C1212969EF72EF9AF29648E90379A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:36 +0000
Manifest this update: Sun 29 Mar 2026 04:01:36 +0000
Manifest next update: Mon 30 Mar 2026 04:01:36 +0000
Files and hashes: 1: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: FYY4YMG4eQfXnJ8eSZiHdKh6zRckELPTDyU79ZBtSQE=)
2: jj1QCdoz6DIRBrESW5B-wlAqOc8.roa (hash: ZaZ7JhsHU0NSgwU2H6qsoPOdqLQB7G06Y4u8Nuaw8mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:21:29:69:ef:72:ef:9a:f2:96:48:e9:03:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Mar 29 04:01:36 2026 GMT
Not After : Mar 30 04:01:36 2026 GMT
Subject: CN=d3956fadc9234ccfc024aab0d3d75d4e611f732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:79:33:f8:5a:a3:3a:71:b8:01:a8:60:8c:
4f:27:dd:ac:7b:9a:8b:15:21:0a:7f:77:b1:29:9b:
ec:04:53:61:6e:59:d4:71:7b:aa:ba:27:6a:dc:3c:
3d:18:e7:d2:4c:9b:68:b8:51:2d:01:30:fc:df:cf:
47:77:8b:b8:0a:5a:a7:a8:e8:49:f1:8e:4b:97:ee:
5d:6a:6c:d2:52:0b:94:80:87:dd:43:27:b3:56:ae:
50:65:4d:36:4d:d6:2d:d5:32:8b:fe:67:4b:7e:37:
0f:cd:b0:50:7c:8d:80:b6:75:21:15:46:00:4d:0e:
18:fb:58:8c:ea:97:46:64:d0:1d:9d:e6:bb:f1:53:
9e:89:98:aa:cb:4f:28:5b:51:6c:a4:c1:d7:92:a1:
7f:75:ad:9b:d4:bb:55:db:7b:ef:38:ad:66:04:78:
29:35:d9:b8:d6:97:12:fa:95:2a:11:a6:ed:4b:46:
fb:97:ae:c4:ae:63:82:00:5c:91:18:8a:8f:19:82:
69:83:dc:70:71:70:af:f3:e9:39:22:81:93:bd:e4:
3e:0e:50:aa:5f:06:c1:90:d4:b5:5b:17:0c:59:9d:
d2:06:63:17:b8:c0:57:a4:e0:0a:91:93:e2:bc:13:
01:e2:c9:98:36:90:b9:a6:f5:c6:51:4b:54:7c:a1:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:95:6F:AD:C9:23:4C:CF:C0:24:AA:B0:D3:D7:5D:4E:61:1F:73:2C
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:04:d6:31:0a:bf:c9:97:ca:2e:00:4d:f5:4d:bb:17:93:
1a:8d:c7:f9:c2:fb:80:0b:fe:67:4a:5b:ef:40:05:24:38:79:
29:16:6c:0c:f6:aa:78:c6:28:6b:51:da:6d:83:a3:f0:fa:21:
85:3f:8c:4e:e7:57:3a:3d:78:c8:0e:b9:4d:70:70:29:c3:42:
0a:e4:a2:d9:59:4d:60:65:2f:74:d9:ce:0d:26:e9:37:a3:a5:
a9:00:55:9b:a9:5b:24:c4:7c:60:c0:ae:0d:0e:a9:79:7f:bf:
84:31:1a:64:88:bd:ec:46:fa:8e:de:09:3f:03:61:57:34:b5:
23:c3:33:5d:e5:48:40:fc:45:a8:9a:cc:5a:8d:23:cd:df:39:
9b:6f:4a:fc:ad:4a:13:87:09:5b:f2:b1:de:e7:c7:81:5f:31:
71:44:05:55:49:f9:b9:29:44:a6:c9:0d:3f:da:5f:be:9f:b2:
bc:24:58:8d:6b:e9:6e:3d:c5:e2:7b:7f:fc:ee:66:0d:46:ec:
c9:35:c1:70:a2:18:29:70:84:89:c9:26:18:16:d6:00:27:3f:
96:6b:a3:61:f0:eb:8a:f6:3c:9d:84:f7:c8:48:86:4d:d6:a7:
a4:02:6f:ad:dd:f2:53:28:aa:78:3b:90:d7:34:9e:c3:d3:fb:
c6:82:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:27 2026 by rpki-client