Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: It+1EKQTc9oPY+CGKe7ENqGTTf5KlfkMsTy3LFtsfxI=
Subject key identifier: FC:91:B7:FF:BD:51:63:3C:AD:3B:FD:87:9F:B3:46:31:FD:A8:7E:AB
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 019CAE35BF13F7AD42320320A886D28CB6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 0B04
Signing time: Mon 02 Mar 2026 11:01:23 +0000
Manifest this update: Mon 02 Mar 2026 11:01:23 +0000
Manifest next update: Tue 03 Mar 2026 11:01:23 +0000
Files and hashes: 1: LYaFYMEtcoFiGgzC4zUuCixHz-c.roa (hash: AtKbSMq1WsG+Z5PcGQrZUh5zBo6rNO+8G8e4EJ3y1yw=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: YboNq+Loxh9g0PvAQMHMoxd2ZMd5XCulQRl7aSg3RAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:bf:13:f7:ad:42:32:03:20:a8:86:d2:8c:b6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Mar 2 11:01:23 2026 GMT
Not After : Mar 3 11:01:23 2026 GMT
Subject: CN=fc91b7ffbd51633cad3bfd879fb34631fda87eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:dd:a1:61:20:d1:94:22:2b:28:39:c6:7f:
b3:e1:b8:d7:a6:c0:ef:df:eb:18:c2:0f:22:00:6e:
59:a3:30:08:fd:a5:e5:df:72:45:f0:7d:cb:75:c6:
88:2a:66:2e:c4:be:8c:5b:3c:1c:67:87:fe:08:12:
d6:c7:20:f0:39:35:35:03:76:a5:b5:39:f6:25:d6:
97:f1:69:a4:01:93:e8:ac:50:d5:ef:48:c1:24:53:
15:cd:9d:18:a1:00:1a:e3:2b:19:7c:9a:c3:3a:8a:
1e:b9:66:f3:1d:23:0a:91:45:ca:50:69:02:5f:b7:
9d:3f:50:bc:65:1e:36:2f:89:0e:5a:ca:0a:ee:62:
23:47:ea:a3:c9:f0:ed:75:32:08:fb:26:67:04:13:
08:14:49:e3:c9:97:4c:24:5b:da:fe:78:c7:37:1d:
db:9b:a4:1b:58:63:45:c5:bf:e4:eb:12:d1:40:73:
56:80:e0:1e:f3:2f:2c:ec:f0:25:05:f9:4e:b3:ad:
a4:17:9f:5f:f3:96:f4:fb:59:7f:c6:a7:31:20:c6:
02:6e:1b:bd:a7:ca:a8:aa:f9:e2:91:c4:7f:0f:2a:
a2:45:e4:3b:2b:04:d2:88:67:9a:ea:2e:05:43:e4:
0c:6a:56:97:a5:c9:b1:8c:5c:2c:83:a7:e3:02:72:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:B7:FF:BD:51:63:3C:AD:3B:FD:87:9F:B3:46:31:FD:A8:7E:AB
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:85:d2:83:dd:5c:57:f2:1c:f6:e8:66:e8:93:96:f7:06:61:
ce:c8:1b:49:0c:c0:13:80:91:3a:89:7b:8e:94:5b:7b:de:de:
e2:86:6e:35:ef:ee:da:2c:5e:67:46:80:6a:b7:6c:e1:27:60:
10:15:3a:01:6b:6e:75:6a:f1:07:71:32:01:25:1c:ae:b9:40:
70:69:37:81:0b:5b:23:46:7e:75:5d:73:31:13:24:cc:07:e6:
bb:e1:a7:64:16:db:2e:1b:12:8e:88:32:54:df:bb:b0:e4:98:
68:fc:9d:b0:8f:50:2b:c3:b8:07:6c:ca:5f:d9:19:aa:b6:c2:
93:8b:ae:a8:55:1f:45:2f:5f:a0:da:3b:be:63:bd:3e:c3:e0:
52:07:19:5a:f0:56:88:05:a3:5c:18:d8:24:35:5d:74:c7:e6:
3e:08:16:40:93:19:1b:39:7f:78:9c:55:81:7b:94:9d:c9:cf:
2c:e6:ce:c9:99:b5:97:ec:d7:49:f4:8f:cd:3e:f1:56:ca:d6:
18:ec:1a:0a:d3:be:6c:3c:d7:5a:92:03:9d:a3:2e:f9:27:2b:
94:b8:9c:b5:09:a5:5f:73:02:b3:16:46:b7:76:9b:f1:99:19:
20:fa:7a:f5:22:b2:3f:be:89:e9:17:cd:e8:74:16:a4:6b:bf:
51:83:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:20 2026 by rpki-client