Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier: d1Ql6OP/3qs86xMZZCX17WBMTWqjUceKV32Nj1pzS+4=
Subject key identifier: C8:EB:74:BF:2D:85:37:BB:54:1A:7F:5E:68:9C:37:B5:8B:89:BC:91
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial: 019CB023E61B90A0B705F0EF8B5962BC99CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number: 02C0
Signing time: Mon 02 Mar 2026 20:01:08 +0000
Manifest this update: Mon 02 Mar 2026 20:01:08 +0000
Manifest next update: Tue 03 Mar 2026 20:01:08 +0000
Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: 7onC4OuQ7wiEX1yNtckMf5m//4XJ91fpD9joiPqRtWQ=)
2: YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa (hash: H49ZMq3qndN5kJWaRAax7kiG0pAT3uE2jIvdrAJiUlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:e6:1b:90:a0:b7:05:f0:ef:8b:59:62:bc:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Validity
Not Before: Mar 2 20:01:08 2026 GMT
Not After : Mar 3 20:01:08 2026 GMT
Subject: CN=c8eb74bf2d8537bb541a7f5e689c37b58b89bc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:c9:08:8c:82:b2:2b:2e:1b:84:a6:03:85:
ed:b5:81:d5:4a:f6:b9:1e:30:30:99:8c:cf:17:d7:
9b:10:75:78:93:f7:5c:75:7a:7c:a8:c8:a5:52:40:
18:3f:6c:f0:ac:f4:6b:71:7c:4d:ec:d5:cf:48:85:
61:34:56:7f:ec:7e:73:ec:35:47:5f:29:07:b3:87:
24:c6:ae:c0:51:27:d1:99:13:98:6b:45:27:25:ac:
a5:54:a5:af:3b:78:04:85:6f:47:f7:43:83:7d:dd:
d9:80:34:7b:55:2c:70:1f:04:a2:fd:e7:d8:98:8c:
76:bf:9e:73:54:42:ae:ff:97:5c:08:88:58:96:24:
13:96:ac:82:8b:bc:f8:d0:b9:de:e6:99:92:77:e4:
97:a0:c8:82:2d:52:6a:fb:cd:3a:07:0b:48:97:10:
e1:4d:bc:ef:c5:87:95:b1:10:ca:41:c3:fc:37:22:
a4:46:e8:66:5d:23:68:4f:12:89:48:79:de:fd:57:
8d:50:3a:63:29:b6:16:bd:cd:83:59:e2:3b:fb:5d:
4c:50:61:32:1e:54:40:12:c7:4a:33:27:59:38:f8:
93:d5:ce:3a:89:a6:1a:59:f6:c6:ac:cf:e3:d1:3a:
62:20:74:c8:fd:6e:55:35:89:49:b5:f8:21:8b:23:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:74:BF:2D:85:37:BB:54:1A:7F:5E:68:9C:37:B5:8B:89:BC:91
X509v3 Authority Key Identifier:
keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:81:04:89:ad:53:d0:ef:fa:66:13:1d:a3:74:e3:05:82:
09:e8:66:53:9a:99:f9:84:88:41:ca:f1:d7:81:49:d6:8b:1b:
49:8a:eb:62:d1:c8:70:c6:ed:47:5b:9d:6f:85:98:ca:44:8b:
5f:e2:2e:cf:eb:dc:2a:fc:40:c1:47:26:df:e8:80:5b:c2:60:
74:56:95:95:68:95:02:0f:b4:78:1b:9b:a7:ec:28:b2:d8:fb:
38:c2:49:cc:13:82:5e:c1:4e:b6:b4:a8:28:76:0c:ea:dd:54:
eb:21:88:9c:d7:a5:11:e7:b1:c3:85:36:b1:60:b7:8d:ba:7a:
a9:b3:23:58:4b:36:af:5e:ec:a3:95:a8:1c:63:56:a8:53:46:
85:8d:93:82:d3:87:8a:b3:b5:86:16:7f:c7:27:c3:84:30:d3:
c4:89:cd:a2:40:4e:b0:5e:c9:e9:4e:37:ea:96:ef:6f:68:e1:
60:bd:2b:35:4e:a5:b3:37:a8:54:cf:e2:a4:10:fa:78:52:7e:
e2:38:ac:6b:03:fb:e2:52:57:32:ed:25:ba:a1:88:ad:43:cc:
ac:f4:fd:15:09:61:9e:4b:0c:71:e4:96:d2:a5:f1:61:a8:bf:
b5:d1:64:6c:f4:13:a6:db:4b:df:21:3a:38:6c:ca:fa:c4:fb:
95:4c:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:48:55 2026 by rpki-client