Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File: j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier: /FuajMa8nLrqKnyp15/zVEn4HySumHbpU+uCAlE1IWo=
Subject key identifier: 7B:0D:A7:32:EB:25:30:7D:DD:6C:32:2A:AD:4E:38:A4:D9:16:F3:28
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial: 019D389C2BF53904DC005AA24ACA8097D87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number: 16A7
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: LQlTFpdDcZcla07mIRRJrFGaP1c.roa (hash: sT/VihqangGQBYKbzBN6tq9t4QWOtBBUVZJiEDdhqx0=)
2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: QYCEE+atH99hcuQSoBGguLrSiiBQkYuPwQL6FPuLj8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2b:f5:39:04:dc:00:5a:a2:4a:ca:80:97:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=7b0da732eb25307ddd6c322aad4e38a4d916f328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:c7:c5:50:1c:ec:ea:c5:ee:0b:b6:58:45:
58:33:2c:8e:f4:34:72:4f:37:35:82:6e:5d:19:5f:
72:db:48:d4:7d:7c:76:2a:66:67:87:4b:17:43:d1:
ee:9e:9a:84:fa:bb:c5:02:07:16:6b:87:fa:58:6a:
5d:14:38:77:d1:c2:37:37:98:16:c8:49:30:1b:8d:
bb:dd:da:0e:b5:07:fa:6d:73:a3:15:b5:2f:a7:61:
7f:6e:8a:89:76:a4:38:81:6c:bd:b5:64:4b:0b:2b:
cd:7c:0b:b1:d9:19:9a:15:2a:08:2a:c8:10:2f:4b:
34:8d:bd:be:78:ba:85:ca:bf:15:16:32:79:78:c7:
cb:26:72:68:a4:1f:66:1a:cb:fd:c2:30:e2:7f:9b:
20:55:10:4d:c7:c8:5a:85:c6:63:fe:35:f0:e6:d2:
2b:f1:89:90:89:23:4d:0d:e5:ff:b0:42:a0:f9:32:
67:8e:17:96:30:8f:4b:c6:20:b6:73:85:31:8a:61:
1e:2f:9f:97:79:e2:57:f8:57:de:f3:ac:2c:bf:99:
6f:70:15:0b:85:9d:aa:d2:aa:d8:72:8a:2f:00:cb:
f0:e0:79:e0:d4:80:00:99:70:2f:d1:1f:16:0f:1b:
b7:0b:ca:40:4f:50:5c:e1:51:b7:d6:d3:6c:b5:c6:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:A7:32:EB:25:30:7D:DD:6C:32:2A:AD:4E:38:A4:D9:16:F3:28
X509v3 Authority Key Identifier:
keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0f:37:bd:1e:09:6c:b7:6c:a0:78:9e:d8:4a:22:71:0f:5d:
fc:ef:80:e3:91:b9:6f:03:1a:20:fa:13:f2:ed:90:1c:34:d9:
47:11:30:19:46:d7:09:7e:af:7b:6e:56:44:d5:f7:fa:4a:25:
9b:c7:3a:fe:3c:e5:56:1f:34:55:85:25:67:f3:0d:a3:0c:b4:
bd:04:c1:4a:fe:19:4b:e0:60:1c:93:1a:0b:20:b8:ce:f4:9c:
6b:20:60:fa:55:02:3a:28:a3:cb:e7:1b:50:3b:93:dc:7b:69:
a9:c2:9d:b8:eb:ff:4c:34:8c:28:ce:ab:16:b1:07:a5:c6:88:
d3:39:cd:ca:90:45:6e:60:d9:97:b8:3b:a6:1a:33:62:e2:fe:
21:18:7e:8c:e4:66:6f:e0:64:21:66:53:cc:2b:57:e9:43:2b:
b6:38:23:9d:95:04:06:1f:72:5c:8c:51:f8:2a:94:82:93:78:
1b:c7:48:a9:da:52:4e:11:20:24:69:ef:2e:be:81:d7:ad:16:
51:74:c1:4a:78:51:25:2a:07:3d:e7:9b:c3:7c:17:74:37:78:
cb:af:9a:fe:73:b6:9c:72:10:c9:0a:b9:60:e0:bc:2d:52:fd:
9f:22:57:43:64:1b:91:ee:34:ab:c6:5f:69:62:af:e0:d4:b3:
1a:8a:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:52 2026 by rpki-client