Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: TyhGxeIi0qgfDtNUMlvMq9va6QyrqOm5OmseqLbfEXg=
Subject key identifier: 1F:CC:15:7E:E3:7A:98:BE:9D:CF:B5:CD:C9:D7:7E:E1:9F:A1:9B:F8
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 019D130FF2ECB20F10CFC94F26C1C7FCA4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 03D4
Signing time: Sun 22 Mar 2026 01:01:45 +0000
Manifest this update: Sun 22 Mar 2026 01:01:45 +0000
Manifest next update: Mon 23 Mar 2026 01:01:45 +0000
Files and hashes: 1: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: Pnzs10KaBrZWmN3H7m/2q+fMr+r10xvpCbq67ue/uDY=)
2: ljWbO3xgpVVnVuPfMgl7G3F39B8.roa (hash: Bdl5BL0jpRyEhLx4reL1/D3qaLttRyXVouVa2c42GeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:0f:f2:ec:b2:0f:10:cf:c9:4f:26:c1:c7:fc:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Mar 22 01:01:45 2026 GMT
Not After : Mar 23 01:01:45 2026 GMT
Subject: CN=1fcc157ee37a98be9dcfb5cdc9d77ee19fa19bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:d8:e7:74:50:32:34:40:f9:f7:5a:8e:5a:
bc:2e:0f:29:76:93:ce:12:9c:94:f9:f7:51:2d:49:
b9:ad:3c:57:7c:a8:49:c7:c7:b6:fc:4a:e5:be:6f:
a3:9b:db:23:c7:0f:95:92:c9:54:23:47:bb:f8:cf:
a9:94:99:0e:51:38:49:6d:fd:49:76:cd:aa:f9:2c:
03:03:64:74:76:89:1b:1b:a6:c3:82:e7:51:17:4a:
e9:47:e7:b1:51:8f:74:c3:3e:95:46:98:5a:a8:03:
c7:cd:21:11:a5:0c:39:ff:81:17:d8:60:26:90:29:
b8:34:5d:18:e5:0b:a1:8a:0e:1b:ff:e1:e3:8a:45:
32:67:72:96:13:1b:83:cd:02:96:03:eb:d6:57:90:
e2:5c:76:22:a8:28:6b:60:ed:98:5e:ee:ff:c8:dd:
c4:e9:23:aa:57:ee:08:63:ea:a4:df:d9:81:93:d9:
d3:7d:56:19:62:c6:52:12:90:58:8c:0f:3e:eb:8b:
3a:26:86:6e:bc:1a:5d:3c:5c:4f:7a:aa:25:ec:5b:
72:8b:bd:87:be:b6:bf:17:63:11:b6:0f:11:72:c6:
9d:07:1b:64:6c:20:e2:3c:0d:e4:e4:60:ff:9e:86:
1d:10:e1:32:d6:e5:76:7f:50:51:bf:7a:75:8f:1f:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:15:7E:E3:7A:98:BE:9D:CF:B5:CD:C9:D7:7E:E1:9F:A1:9B:F8
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:ac:dd:bf:03:a3:b2:75:78:b3:a5:8c:68:6d:3c:7c:4c:87:
e7:de:21:da:6c:9d:36:56:a1:d5:81:95:11:32:a8:33:af:ec:
23:d7:25:d9:af:94:36:ad:9d:05:db:b5:f7:5b:45:7e:b7:03:
ae:f1:bb:39:6a:3f:84:6f:d3:4e:e7:44:73:c2:db:49:fe:85:
a0:84:13:ef:ec:21:77:9d:b8:c9:e7:f7:ed:0f:35:76:49:4e:
00:72:6a:37:7d:6a:6b:2c:cd:ac:7a:a8:49:42:87:95:6e:c1:
19:56:a8:5f:bd:e3:5e:b0:dc:ac:51:bb:f6:d7:99:93:e6:1d:
5d:03:e1:2c:be:f3:de:19:19:cc:e5:32:f8:72:72:b0:a7:68:
a4:5b:5d:d9:80:90:a4:5f:4f:e9:34:cf:3c:09:47:23:12:d3:
d7:b3:20:16:a9:43:3c:02:09:9c:b0:33:bd:df:c7:c2:93:9a:
78:7f:29:57:c4:f4:ca:af:26:70:ec:87:80:b1:c9:da:9c:dc:
c3:96:b8:7c:5f:52:19:ff:01:b3:15:87:28:44:32:56:44:60:
21:4c:f9:d8:be:1b:b4:7c:5d:df:e9:34:b1:c0:2b:b5:87:35:
4b:e7:81:65:46:63:44:7e:c1:da:2c:8a:3f:02:29:7d:80:53:
45:e4:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:35:35 2026 by rpki-client