Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: TfaUkUN6ZtSkM7gI3xzdUg1gz+A2wMEMTOQB7EF0QKY=
Subject key identifier: AB:67:76:CF:14:09:D6:A3:94:90:26:FA:8E:10:0E:4C:98:B6:EE:56
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 019CAEA34BB3F6D93AE893A2D710355E1B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 0F8F
Signing time: Mon 02 Mar 2026 13:01:03 +0000
Manifest this update: Mon 02 Mar 2026 13:01:03 +0000
Manifest next update: Tue 03 Mar 2026 13:01:03 +0000
Files and hashes: 1: 0sUgrxZJElJI75bHc4PMJv-m6Hg.roa (hash: 2W0uHz9I3ibHN2TiwFffgNpABHgMMaB3ZZQbo22uvH0=)
2: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: h1WdpReRUILpjW4BqtT0wS5SDOqNGlpk3E7jKO86PeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:4b:b3:f6:d9:3a:e8:93:a2:d7:10:35:5e:1b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Mar 2 13:01:03 2026 GMT
Not After : Mar 3 13:01:03 2026 GMT
Subject: CN=ab6776cf1409d6a3949026fa8e100e4c98b6ee56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:09:a0:a0:70:63:ae:44:a0:78:e4:80:ae:
b7:7f:99:f5:9e:d0:30:8c:ab:28:d8:dd:53:b6:cc:
0e:a7:96:e3:f2:15:82:cb:01:01:af:31:a2:ef:9c:
5f:4d:a0:17:92:d1:ed:43:3f:6f:ba:00:3d:ac:4f:
1f:02:1c:3f:88:04:83:9e:b4:78:9a:93:58:b0:4a:
3b:17:8c:2a:b9:33:5e:9b:aa:5c:c4:15:8a:29:3c:
f9:ab:13:c7:2e:80:17:32:19:6d:95:a0:ba:be:ac:
15:f3:0a:75:7e:76:37:8f:92:09:1e:36:50:ec:cd:
d1:54:e4:88:11:86:aa:90:b3:8e:4a:28:c8:27:2a:
b5:b4:d0:ee:a3:15:7d:fe:d6:f4:92:00:63:90:f0:
ed:9f:0f:79:e7:49:1d:8c:1c:f4:65:6e:71:78:34:
5f:39:47:7f:eb:e6:56:55:42:fc:7e:87:60:98:ec:
41:fd:2f:e1:a0:55:96:40:d1:21:da:20:65:15:9a:
d7:b9:be:a8:4e:a2:cb:37:b6:b0:9f:1d:24:ae:54:
7d:6d:1c:21:cc:08:27:3d:95:d4:5f:38:1c:06:22:
45:c2:68:f3:25:cf:18:66:3f:5d:4a:a8:26:fb:fd:
51:50:07:fe:b4:3a:a9:4b:1a:ca:84:cf:7a:aa:ab:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:67:76:CF:14:09:D6:A3:94:90:26:FA:8E:10:0E:4C:98:B6:EE:56
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4b:ac:37:84:10:e7:01:0a:ef:4d:ca:da:ef:bd:a9:45:05:
c3:89:95:03:53:10:36:16:a1:62:d7:dd:b5:3e:45:e1:4d:18:
87:d4:86:bd:f5:f2:64:73:cd:62:a5:f2:15:82:c1:92:f7:31:
91:97:de:ea:90:39:39:29:f9:4f:ae:2a:b5:52:4d:88:d4:17:
f9:4b:e2:69:5d:65:4f:22:56:40:91:55:a3:cc:7a:d2:51:79:
d6:20:b1:f8:11:db:1a:f7:89:83:75:4a:0f:0e:a2:2f:f3:3f:
91:86:aa:37:ff:82:1b:89:5a:52:bf:50:49:d8:f1:f7:7a:6c:
57:7c:98:1b:76:ed:d7:2c:23:16:6c:ff:4b:5f:63:2e:7a:11:
ec:30:48:ac:0a:da:51:ab:b5:c9:48:4e:32:ef:4f:96:b8:11:
78:90:ed:e1:03:55:71:2f:e6:f0:8b:d6:fc:19:f0:01:ee:a4:
28:dd:5c:c3:55:53:d8:3f:a0:9c:6f:e8:5a:c3:d2:70:30:2d:
25:a2:6b:41:32:dd:a7:a9:61:a3:2c:90:8e:7e:56:44:b5:7c:
75:4b:dd:71:67:c3:b8:5b:c3:72:2c:fc:5c:17:d9:83:69:15:
cf:6f:4b:b4:45:d6:b0:ed:3a:bd:b1:b0:52:fd:ab:3f:40:4b:
83:dd:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:57 2026 by rpki-client