Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: 3kIvcwq9mUM5yixROJzFOJhuoQV0NcxMfPhcHWhR50A=
Subject key identifier: 8A:34:76:0D:F7:81:C7:B3:CA:85:80:3D:DC:30:BE:4D:22:2E:EF:30
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 019D9A3EE4844CC8BEF1FF0EF49FA4E017B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: D0
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: yy924Pqln0K7fR6jnzBZyKuWvI/y5l6CZ4YRK0uC/QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e4:84:4c:c8:be:f1:ff:0e:f4:9f:a4:e0:17:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=8a34760df781c7b3ca85803ddc30be4d222eef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:fa:10:fa:4c:b5:ac:b2:e9:ac:d1:df:ce:
f9:ae:f3:22:ec:85:18:10:d4:35:36:8e:2f:16:41:
f4:72:71:df:43:77:69:62:f5:06:09:88:cd:ae:0f:
d9:68:1d:3d:0d:ad:2d:de:99:80:ab:c0:19:a3:19:
36:f0:67:08:a7:d3:45:74:48:fb:6a:10:d5:08:81:
46:7b:15:ce:c6:92:39:3c:bd:27:0d:36:38:6a:68:
ce:12:5a:7e:e8:44:46:cc:4a:43:9b:6a:f3:67:2c:
47:8a:04:1d:7e:f0:53:f8:44:48:7f:48:06:b6:10:
4d:26:e1:dc:49:43:09:76:ae:6b:87:e7:8e:5c:a2:
51:f5:b7:0c:1c:7b:7a:72:94:ed:87:18:5b:a2:0e:
6e:56:72:39:77:68:5b:b2:e3:ee:12:45:4c:9a:8f:
11:ce:f6:af:2b:7a:2d:d1:a3:b3:68:f6:f2:01:06:
53:f8:fd:00:d3:76:06:e5:52:06:2f:21:80:ac:c6:
fa:c0:18:06:27:e0:ba:b2:c3:da:be:7f:e5:d5:bc:
f4:22:f3:14:5a:cf:36:cb:9c:95:39:5c:79:23:7f:
c9:c9:e3:51:10:70:1b:26:89:48:15:a8:20:d2:74:
d3:dc:59:c6:f3:32:04:b0:7d:eb:75:da:14:c5:c4:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:34:76:0D:F7:81:C7:B3:CA:85:80:3D:DC:30:BE:4D:22:2E:EF:30
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:72:4e:3b:ca:c7:53:d8:6f:ad:b1:53:98:d3:ef:47:bf:bc:
63:ef:60:42:8b:b8:c3:19:28:b6:13:62:e0:cf:d2:44:72:e8:
44:b9:5b:3d:fe:8f:0b:97:a7:ba:c4:40:46:47:43:fa:9b:fe:
04:78:cf:a3:db:2c:e0:ca:d9:da:b4:0c:4f:45:23:00:9a:39:
da:95:0b:5e:da:70:24:f4:0b:77:93:b3:ed:4b:7d:1d:f0:e8:
4c:79:ee:c9:c7:59:df:47:7e:f4:be:0f:71:a9:7f:a6:61:ed:
6d:5c:9a:08:2a:83:e8:f1:03:16:30:54:30:06:92:28:e1:8e:
32:de:a2:3d:da:38:8e:d0:9f:ce:d2:be:4f:5a:21:3a:3b:eb:
c0:fa:18:42:54:ed:fc:fd:ed:3b:df:13:86:a1:6d:ea:0e:d8:
40:f6:f1:82:14:06:93:c3:35:49:c0:80:d1:4c:53:0c:b6:44:
fb:c3:fa:f5:93:d1:de:6e:de:fe:c4:4b:b0:5b:07:69:9a:8d:
05:0c:05:e3:0e:fc:27:37:b4:75:a8:6c:20:44:28:2a:66:a3:
4b:b3:85:d4:57:7b:c3:00:dc:35:fc:1a:eb:bb:3d:4c:93:65:
19:8f:b8:0a:3d:5b:17:93:59:93:16:7b:55:38:7d:68:ff:47:
39:74:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:26 2026 by rpki-client