
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: 2DAUEQoAzXftgoWVhMc33Mshvp4jUZKDEAhHnwvCDyY=
Subject key identifier: 88:75:BE:E9:9A:60:54:09:5F:A6:4B:9C:6F:69:75:73:B9:6F:77:52
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 019DA2D365E3137103368BC022859DEE4F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 0B7C
Signing time: Sat 18 Apr 2026 23:00:56 +0000
Manifest this update: Sat 18 Apr 2026 23:00:56 +0000
Manifest next update: Sun 19 Apr 2026 23:00:56 +0000
Files and hashes: 1: Fy0o8DcLjvyiXEkdH4nVpnIu0xk.roa (hash: X9h7PiPkXXLiZTwdUCr+/0DnytD+kDfLjARYK4Pdh9M=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: oqWRfbVdt6pHW8osOg6+T0rdwHew4omHQz69SnCMQes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:65:e3:13:71:03:36:8b:c0:22:85:9d:ee:4f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Apr 18 23:00:56 2026 GMT
Not After : Apr 19 23:00:56 2026 GMT
Subject: CN=8875bee99a6054095fa64b9c6f697573b96f7752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:33:ca:66:8b:fe:79:dd:ae:00:39:99:28:
bd:86:0d:33:6b:33:e8:12:9b:e3:6c:df:ed:e6:55:
af:e7:13:33:43:22:26:91:84:a5:89:8a:0a:db:4f:
bb:58:ff:b4:44:4a:e9:0a:33:4c:d5:54:87:3f:80:
0f:53:1f:57:b3:64:c6:78:4f:a6:c6:83:0c:28:4f:
cb:1a:39:c6:79:05:5a:81:d0:2e:ce:7b:e7:ae:a2:
05:b7:db:1f:7b:1a:e5:f4:9e:cd:b4:ac:0a:a8:12:
2a:ab:3c:be:38:d0:62:b0:4a:48:a4:79:4d:2c:6f:
41:c5:99:7f:ab:c3:a2:c0:dd:5d:64:0e:40:e1:39:
e5:77:aa:b0:1b:52:7e:fe:09:93:42:1f:96:df:e5:
40:c9:e4:33:e9:b4:e1:69:05:61:e1:3b:40:20:85:
8d:f7:74:1a:a5:55:2e:d1:85:04:83:fc:6f:d6:fc:
a3:8f:93:0a:b4:dd:9d:b1:67:cc:3c:66:95:54:14:
8f:21:6e:1c:34:31:98:bd:2a:4a:ea:5e:a2:46:d9:
47:69:c5:38:9b:d8:70:90:db:65:3d:3e:05:c4:a1:
46:9b:5a:bb:e7:eb:b9:42:df:bb:bf:cc:60:b1:e2:
d0:c6:98:59:20:c8:80:4f:d9:e9:f3:4e:9c:e0:54:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:75:BE:E9:9A:60:54:09:5F:A6:4B:9C:6F:69:75:73:B9:6F:77:52
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f1:4a:bb:c6:4f:df:fc:a6:9b:b0:46:86:84:3f:d2:d2:ac:
5c:d3:6d:f9:43:6a:b8:c0:b5:b3:9a:12:0a:85:db:c7:b6:e4:
c4:ab:4d:78:19:9e:7b:14:f3:5c:a0:f1:70:89:ae:53:3c:95:
2e:23:07:9a:92:d8:ae:a4:53:63:1b:c2:51:a5:9d:f1:73:23:
a3:7f:24:b3:1b:dc:82:77:0b:45:86:db:14:e4:ff:4e:80:4d:
9c:30:14:af:8c:2c:f8:c4:82:9b:fe:0e:c0:c0:d9:da:6b:92:
00:46:ad:2a:26:45:35:82:16:01:92:3e:61:50:57:f0:84:ce:
2c:25:96:c3:0a:15:be:b6:7f:54:86:4d:73:25:6d:40:14:70:
d1:83:79:f7:49:c1:19:29:03:7a:05:c5:c0:fe:29:27:0f:6a:
dc:75:96:92:5f:e1:e0:3d:89:b5:bb:c4:55:b0:43:5d:25:9d:
8e:e7:cc:de:3f:1b:f5:25:48:e1:ba:8e:15:2b:92:ac:5a:f0:
7a:a6:94:41:60:e5:49:23:3a:fe:ff:81:ba:b5:07:c4:b3:1b:
c2:00:74:e5:fb:0e:40:83:19:31:19:ac:ad:94:e9:53:ad:08:
48:60:70:97:fc:e9:bf:12:de:ca:15:78:90:ad:3f:30:63:86:
92:21:62:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:45 2026 by rpki-client