Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: UAGOakHGnLW3l3y19wMik1zEn88sOFIpXfmtHvN3qGM=
Subject key identifier: 3D:43:3C:A5:73:02:4C:6E:51:69:A9:46:02:2E:71:3F:E6:50:17:C7
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 019CABA1E5E233DBFD8DF295694803B3DDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 0AFC
Signing time: Sun 01 Mar 2026 23:00:39 +0000
Manifest this update: Sun 01 Mar 2026 23:00:39 +0000
Manifest next update: Mon 02 Mar 2026 23:00:39 +0000
Files and hashes: 1: Fy0o8DcLjvyiXEkdH4nVpnIu0xk.roa (hash: X9h7PiPkXXLiZTwdUCr+/0DnytD+kDfLjARYK4Pdh9M=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: 4bibZ7yqrfgzey8R027ydmnc1C1opXbc78zIHmgtFlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e5:e2:33:db:fd:8d:f2:95:69:48:03:b3:dd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Mar 1 23:00:39 2026 GMT
Not After : Mar 2 23:00:39 2026 GMT
Subject: CN=3d433ca573024c6e5169a946022e713fe65017c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:f9:f0:4c:05:47:bc:dd:a6:0a:bc:a9:3e:
01:b9:7c:61:84:fc:fc:33:e1:ae:fa:2d:8d:26:b8:
64:ab:2f:c0:d2:72:7d:af:54:32:bb:37:f1:72:8a:
e8:8e:e2:b4:cc:39:9d:f8:1e:da:13:57:60:e2:05:
70:34:e1:22:3d:d0:06:a2:d7:f9:86:42:53:5c:e6:
f1:85:ff:f9:a3:bf:98:8d:4a:ff:95:81:86:4f:97:
05:ad:8d:df:bc:b1:2e:30:e8:fa:52:96:ad:61:42:
b3:1c:5c:b6:00:f8:9d:f7:df:c1:92:a0:c0:42:0c:
2f:7b:8e:c0:80:cb:2a:c4:8c:77:a1:21:c1:be:c0:
71:0d:71:30:7a:0a:7e:38:db:b8:46:cb:a2:14:fe:
e3:de:ad:7e:17:89:7b:4e:97:e1:34:41:9a:5e:46:
19:97:0f:15:80:d9:1b:9c:be:9b:32:7a:22:a1:94:
b4:33:2c:d2:4d:e3:78:b2:82:c2:7a:8d:e6:50:e3:
c4:fd:b2:cd:1c:2b:7c:d9:c3:84:8f:a3:58:3d:a7:
e3:f3:93:7f:ff:14:b9:d2:a5:9a:ae:18:8f:03:18:
9a:ab:8b:a5:0d:b7:1f:f3:70:85:c0:fa:8d:71:e4:
b5:28:28:3f:f5:5f:ff:16:c3:32:da:ca:5c:43:2b:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:3C:A5:73:02:4C:6E:51:69:A9:46:02:2E:71:3F:E6:50:17:C7
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4a:cb:41:91:85:6f:5a:3b:e2:01:db:b2:8b:a6:4d:58:4f:
df:b5:81:9f:37:e2:0f:be:30:3a:9e:6b:3e:b9:88:ae:31:27:
a8:88:8c:f2:af:94:25:e5:75:8b:a5:85:f5:08:54:bf:d3:6a:
7e:ff:b8:e6:7c:8c:8c:33:34:9d:f8:99:3c:eb:2a:59:77:58:
de:eb:8c:ec:44:b4:b1:b6:d8:4d:72:84:cc:5b:fc:98:4f:68:
27:66:e5:ba:e9:b6:f5:31:c9:9b:bc:00:48:ce:e1:92:89:49:
f5:5e:eb:e8:a6:66:17:bd:b7:0f:d3:98:49:2b:64:e3:70:35:
12:0e:63:8c:89:8a:c0:7c:7b:6b:57:bf:e0:c7:20:f3:cd:09:
34:d6:e1:2f:ed:5e:fa:bc:53:55:17:ab:cf:4e:0a:93:d4:e6:
b3:17:a7:a4:e2:b3:70:9d:87:18:6d:f1:5f:31:b7:a0:a7:b4:
28:0b:47:20:3d:7c:38:c5:1b:55:b3:0d:50:2e:76:44:e1:88:
5d:b0:6c:ed:b0:15:01:60:82:9d:5e:de:bd:e5:38:cb:70:da:
63:26:c2:0f:4c:6f:9f:86:38:05:34:ce:3e:38:fe:8c:6a:a0:
9d:32:51:66:e9:0b:b3:b3:d6:f6:c4:fc:d5:5b:be:61:83:d7:
48:4d:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:11 2026 by rpki-client