Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: cUT5oIE9myFxwu++hv4fhCsI/9fIjlWStulZStoTwFA=
Subject key identifier: F2:8E:D5:E8:7E:1B:7F:1F:9B:BF:59:13:88:26:26:2C:0C:C3:FD:00
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 019CAF48AA1EDF8BA00C01EF8C12A6DA1345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 1747
Signing time: Mon 02 Mar 2026 16:01:40 +0000
Manifest this update: Mon 02 Mar 2026 16:01:40 +0000
Manifest next update: Tue 03 Mar 2026 16:01:40 +0000
Files and hashes: 1: JbQak1AHMgi1qfOaMonuPRObwoY.roa (hash: Juh7X9uOOXLlYXsFrZb1hTO8VS9wOnWEcXeGaWt5Akw=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: hELdB/X2MsKriRwjis4QtWXPfxU3OM/58134Xm+/BNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:aa:1e:df:8b:a0:0c:01:ef:8c:12:a6:da:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Mar 2 16:01:40 2026 GMT
Not After : Mar 3 16:01:40 2026 GMT
Subject: CN=f28ed5e87e1b7f1f9bbf59138826262c0cc3fd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:a7:17:b5:9b:43:97:ad:2f:be:dc:d6:2d:
24:96:c9:fb:4c:a8:b2:9f:ea:34:6c:96:cc:3c:df:
95:11:09:5a:02:f0:e2:6f:93:ec:ea:22:de:1d:62:
01:4c:32:cf:65:30:69:e0:34:7c:82:80:48:6f:5f:
61:cb:4d:86:5c:1c:fa:21:37:37:0e:0c:7e:b3:7b:
fb:61:d3:52:79:78:9b:ad:da:1d:b8:42:d1:6e:bd:
d6:4e:3e:e5:16:d6:b5:aa:d5:1b:9e:cc:74:3c:24:
03:e9:2d:ab:81:28:d8:52:cb:32:98:77:ee:a2:eb:
71:ac:fc:93:68:5e:62:ee:4a:81:74:fe:b5:ed:33:
d9:88:68:4a:12:39:03:c5:21:4c:44:c4:a8:17:82:
fa:47:09:f4:1d:c4:e6:1f:b8:1e:2d:f5:01:06:ae:
98:b8:85:17:b4:cf:6b:82:68:56:4c:d4:81:fd:8f:
1b:9f:4c:73:eb:bf:3f:87:34:20:11:66:b1:4e:70:
9e:68:e7:18:37:70:db:51:8a:b2:10:be:84:d9:4e:
a9:76:75:55:86:3c:13:ec:3f:9d:84:09:0f:9d:8d:
4b:3a:9b:ef:3c:d8:9c:d0:8b:c2:5a:93:37:46:90:
cf:d1:bd:dc:0c:2a:c0:bb:ff:73:fa:12:a3:c8:67:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:D5:E8:7E:1B:7F:1F:9B:BF:59:13:88:26:26:2C:0C:C3:FD:00
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:34:a7:b3:05:45:fe:85:17:3a:db:de:2a:8a:f0:a6:62:
2d:36:ee:3c:4b:90:a2:69:a1:47:54:0a:1c:f5:79:a1:f0:66:
17:b7:5b:7a:85:91:18:81:55:2b:f1:29:26:27:8d:e6:f9:4e:
28:b1:ad:a3:bb:a0:de:57:c4:4c:ed:be:4c:c4:9a:ea:e5:49:
99:b4:c9:77:7e:b2:0a:ec:19:e3:54:b7:30:f1:8c:5e:6b:2f:
25:90:a6:a7:0b:12:32:49:58:34:a8:08:9d:1e:3b:f2:3d:f0:
58:61:a8:92:c4:a8:66:9b:c3:4b:aa:9d:51:56:24:c4:5c:ba:
8d:ea:42:d6:98:be:ec:07:cb:6a:39:bf:00:67:25:20:89:49:
20:22:46:54:a8:6b:e4:da:65:1a:dc:27:bc:9b:81:24:23:bf:
32:e7:85:1b:5b:b6:67:63:cc:e9:d5:fc:84:e9:3a:84:5d:a5:
26:34:86:6d:07:08:44:71:00:f0:22:77:ea:25:1f:c7:3a:c7:
66:91:43:8a:d8:5c:b7:37:9d:ef:38:56:80:b7:ff:3b:ee:fe:
28:7f:00:6c:1c:b8:94:92:4c:25:a8:b5:5e:3e:ca:12:7b:a7:
5d:94:fe:c8:95:e6:9b:51:b1:72:9d:c8:f5:00:ab:aa:4f:0d:
74:9a:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:04 2026 by rpki-client