Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: 1+ffjtyxNEVL1ovbjpfdAi6ISsdKglIfSgDVZoLQIns=
Subject key identifier: 29:78:3C:F7:3A:CD:D8:BF:49:7A:7F:9E:30:E3:81:07:A0:8F:64:FE
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 019CACB48D8303A4164F492A05B3D9457778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: 55
Signing time: Mon 02 Mar 2026 04:00:39 +0000
Manifest this update: Mon 02 Mar 2026 04:00:39 +0000
Manifest next update: Tue 03 Mar 2026 04:00:39 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: YZ/l/Kn/2zE/q+WOt+C+BulPNTYHHfh4nARMrOzgOWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:8d:83:03:a4:16:4f:49:2a:05:b3:d9:45:77:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Mar 2 04:00:39 2026 GMT
Not After : Mar 3 04:00:39 2026 GMT
Subject: CN=29783cf73acdd8bf497a7f9e30e38107a08f64fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9e:ca:a6:bf:65:98:d0:87:11:89:53:7f:d5:
89:91:9e:4f:05:84:12:63:6b:dc:dc:01:09:0e:79:
24:e2:f0:9f:f2:62:67:fc:82:56:cd:c8:9a:f4:d2:
2a:b5:33:8c:32:93:f4:73:83:4c:2a:4c:64:21:e8:
00:ae:15:7a:ae:77:5f:33:7d:10:82:90:23:cd:02:
1e:31:af:7d:0b:fa:48:dd:f0:1c:12:36:11:fc:ad:
49:dc:8e:c2:92:f8:74:25:2c:6a:56:42:aa:1d:43:
1e:55:3f:32:d1:78:26:09:36:e1:bd:a0:b9:7d:d4:
bb:13:c5:ad:9e:66:05:36:b0:fd:ee:2f:c3:4a:6e:
88:07:eb:be:73:8a:7d:b5:93:c0:6a:23:cb:91:d5:
8f:00:58:15:14:b6:c3:24:f3:9a:58:86:99:fd:64:
25:d1:5a:f6:f1:57:56:94:07:54:16:53:dc:d9:d0:
c8:a9:cf:8e:49:f4:b5:89:d8:10:1f:39:11:12:e1:
94:0b:4c:d8:c1:98:d0:82:c2:b5:6c:6e:47:8a:da:
b0:e2:51:54:f7:ff:69:02:e5:4b:1e:63:50:b9:67:
9c:84:dd:20:42:39:bb:cb:54:44:3d:3b:86:e5:17:
a7:b9:8c:ac:cc:cc:4a:02:cb:69:05:09:44:51:85:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:3C:F7:3A:CD:D8:BF:49:7A:7F:9E:30:E3:81:07:A0:8F:64:FE
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0a:11:d4:f1:32:d6:67:e4:fb:a7:50:01:93:07:da:d0:19:
9d:c4:23:96:a1:bb:a0:f0:02:c3:c0:c5:23:a1:99:dd:75:17:
df:43:21:cb:a4:8c:0f:e2:ae:65:f3:a2:99:7c:ad:85:20:11:
99:5b:fb:f1:66:f8:c5:f0:9e:8c:39:6c:75:48:fe:ce:6d:43:
fd:f9:ad:c0:b6:90:0d:80:05:7c:d2:0f:97:ce:f5:37:de:c5:
ea:bf:4b:ef:cc:60:7d:30:20:66:e6:69:74:48:d3:b1:4a:c9:
30:09:ba:06:51:fe:33:67:47:b1:6c:15:82:57:ca:f8:d9:e4:
b7:ea:d2:cd:85:fb:e7:4d:5f:1d:f8:38:89:d3:0c:3e:bd:47:
7c:99:66:6d:eb:4b:e8:fa:0d:1b:f0:68:53:22:9b:37:4c:81:
f5:56:ac:82:f6:3f:54:7e:77:4f:f9:85:8f:5a:92:f8:81:3c:
c9:fa:17:57:a9:fd:70:c1:b4:fd:ae:ea:b8:cb:e4:ed:1e:7e:
7a:97:05:87:fa:b9:d6:8f:32:c5:6e:54:af:6e:e3:4f:c9:b5:
dd:40:ef:20:97:0e:b1:a8:dd:f4:28:e7:45:e9:98:8e:7e:da:
4b:cd:18:b2:98:3a:e1:e3:92:c2:6d:9e:29:3e:78:88:eb:a4:
b6:94:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:37 2026 by rpki-client