Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: THX7pM8Ws3um6F3Z6mA9SNk3uZA2EdIDwwbesF2oYmU=
Subject key identifier: 84:B7:7F:86:0B:2C:FE:C7:E2:4B:D1:8F:42:E7:8F:87:23:0C:DC:9D
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019CACEBCB8CA27F4A95F07DA96726067C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 05:00:59 +0000
Manifest this update: Mon 02 Mar 2026 05:00:59 +0000
Manifest next update: Tue 03 Mar 2026 05:00:59 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: VvcMrLBudWe+AwRUX6uHc+e4xm+hQ86l8/1EE4orDYg=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:cb:8c:a2:7f:4a:95:f0:7d:a9:67:26:06:7c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Mar 2 05:00:59 2026 GMT
Not After : Mar 3 05:00:59 2026 GMT
Subject: CN=84b77f860b2cfec7e24bd18f42e78f87230cdc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:00:35:77:4e:d2:be:e5:75:bc:7f:5f:56:
92:80:73:78:f8:73:12:5c:f6:77:60:60:6e:c5:96:
aa:72:69:19:a5:68:86:9a:0a:a5:3c:b1:ba:c2:11:
e3:91:f6:67:10:9e:0c:14:dd:04:d5:f3:9f:45:d6:
bb:0b:1b:72:be:4e:07:d1:57:16:fa:3a:99:aa:a9:
27:40:37:32:dc:95:5b:b2:d5:d4:51:a0:61:9a:f5:
be:92:25:91:e1:e0:22:75:8c:fc:ef:95:02:f0:b4:
3c:d7:d2:b3:1e:9d:0c:4d:f1:5b:85:98:31:6d:9f:
ac:54:3f:a5:37:5d:83:47:28:4d:3f:3d:48:da:7c:
37:fe:fe:bb:bd:ac:ba:69:e0:a1:68:9a:05:d9:a2:
61:ec:a1:b8:1e:23:34:bb:c1:83:a5:e4:e3:e4:31:
1a:cd:75:d5:66:ca:14:ad:3f:25:5a:0f:0d:5b:08:
8f:25:e6:ff:69:90:da:05:fd:c1:62:f4:dc:58:16:
c4:81:56:fd:17:79:e1:5a:bc:9c:f4:2c:da:b6:77:
cf:32:f2:3d:fe:64:cb:17:5f:78:26:aa:d5:06:a0:
1c:26:64:b5:67:04:c7:7b:c4:c9:cf:85:90:90:5d:
4d:1a:30:e3:f7:de:e7:bd:fa:30:c4:6a:fd:26:ee:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:7F:86:0B:2C:FE:C7:E2:4B:D1:8F:42:E7:8F:87:23:0C:DC:9D
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:74:36:ac:9b:0c:a8:f3:4d:ef:39:06:01:24:c6:0f:17:bd:
35:d8:bc:51:d2:3e:77:16:08:c8:7d:83:19:8e:3b:14:ec:29:
8c:d3:9f:4f:75:d6:59:66:68:f7:32:8d:e0:23:87:0c:66:90:
1d:ca:a0:26:fa:9d:36:5e:6d:a8:64:8b:6f:f2:bb:2b:96:e9:
4f:5e:d6:d0:dc:40:b0:00:f6:24:7d:de:73:b1:80:ca:1c:1f:
45:8a:31:4d:b7:04:18:0e:a1:39:a9:e9:1c:40:f0:37:92:8c:
00:d8:d3:d8:87:15:18:6f:57:56:b3:75:5c:9f:a4:13:ee:de:
10:96:2b:c6:2f:d7:75:02:ee:b9:02:8e:cc:e9:83:17:47:a4:
97:5d:84:5b:0b:e7:11:23:51:03:37:61:e3:fe:10:37:aa:dc:
69:b8:17:6f:e1:32:c1:48:1c:e6:17:85:08:29:8a:83:29:fd:
3e:7d:0d:3d:06:c9:b7:81:2f:fa:63:42:65:53:e5:bc:df:90:
cc:fb:6c:24:c3:4a:3a:0e:2b:9b:c2:46:6d:92:9a:be:b4:38:
4d:81:1a:92:ee:ea:90:7a:fb:ec:44:85:f4:41:51:c3:bf:61:
a1:54:b0:95:c7:62:a6:1c:eb:20:0d:3d:47:6f:8b:e4:ca:fd:
91:60:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:09 2026 by rpki-client