Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: n4UfM9XZy5k87rL39RNG2kzrXnx6yOjvoyv5ctSyH0o=
Subject key identifier: CE:BF:A9:C3:1E:F7:EC:57:34:15:53:21:E2:DD:A1:1B:90:AE:1F:22
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019CAC46852829603FFA02A157447BD67C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0BB4
Signing time: Mon 02 Mar 2026 02:00:28 +0000
Manifest this update: Mon 02 Mar 2026 02:00:28 +0000
Manifest next update: Tue 03 Mar 2026 02:00:28 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: 1KLgwU1SDipnrqJhp7idjr8z0AGjpj93lSi625QkVqg=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:85:28:29:60:3f:fa:02:a1:57:44:7b:d6:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Mar 2 02:00:28 2026 GMT
Not After : Mar 3 02:00:28 2026 GMT
Subject: CN=cebfa9c31ef7ec5734155321e2dda11b90ae1f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:d5:f5:30:1c:9d:53:8a:22:03:7b:79:7e:
a4:ad:36:40:26:46:9a:a6:14:60:f9:18:7b:4b:36:
08:07:d0:c6:31:72:e9:29:50:ee:b3:96:7d:29:13:
4c:96:ce:ee:e7:74:7e:5d:4c:a3:1b:d1:8a:bc:00:
f3:84:c1:0c:d8:9f:c8:40:ff:ec:68:64:86:43:e4:
6b:5b:78:e3:58:02:fe:ea:76:b7:7e:b1:31:65:68:
e8:64:47:83:0b:bd:c2:4f:6c:74:1c:be:79:2b:27:
31:74:a7:5b:93:03:f7:fb:49:d1:a8:9e:fc:e3:a6:
da:b5:c6:24:5b:b6:49:87:48:7e:81:1b:89:c5:95:
dc:af:03:09:d9:83:e7:e3:fa:25:dc:a9:a7:e9:ca:
27:9e:fb:a2:bc:a0:d5:b5:d6:13:30:3f:1f:11:68:
9a:6c:c2:c8:df:0c:dc:7a:a5:76:99:cf:44:f2:bd:
f9:58:53:0a:fa:20:d0:a7:27:06:d2:fd:cf:d9:a7:
46:74:09:72:7d:36:4a:cd:70:86:ea:3b:c5:0e:b8:
4a:a2:6b:89:21:5b:9c:fd:35:f4:6d:a1:32:2c:d8:
6d:ea:e8:69:bb:52:25:d3:98:41:8f:1a:89:b3:fc:
cb:1d:64:94:2f:5f:80:04:9f:1c:3e:59:d7:9c:ec:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BF:A9:C3:1E:F7:EC:57:34:15:53:21:E2:DD:A1:1B:90:AE:1F:22
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f5:04:f6:e8:a4:9c:0d:0d:92:17:41:e6:6a:e8:f6:1d:c8:
f9:e2:ec:6f:ac:a9:9c:38:b3:2c:23:ce:b1:80:0c:2f:2d:c0:
27:a5:9e:44:5e:a4:a9:3d:01:b6:02:07:18:8a:b8:5d:3f:02:
2c:e0:a7:6f:cd:f0:58:a6:2a:a7:b4:93:35:a0:31:24:73:5c:
7f:cd:a7:87:05:91:6a:44:c2:7e:70:e6:8c:3d:83:45:d5:0d:
83:09:a2:03:79:5c:5f:6e:da:fb:0e:a9:be:78:cb:56:1e:56:
56:da:4b:7e:47:d9:b1:52:7f:da:86:fa:41:89:f2:99:01:4b:
a6:7e:c2:34:4c:fa:83:4a:9b:e2:f1:8b:a8:78:3b:b7:66:ac:
64:42:d9:25:73:f8:34:6c:71:b8:76:87:c7:37:89:2d:c8:a0:
b3:97:23:e6:38:ac:9e:79:a2:9d:24:02:d0:34:63:28:22:a5:
ae:d3:f0:2b:b5:f6:cb:6c:4d:d0:27:cc:06:cb:8c:93:b4:fc:
70:ed:aa:11:12:93:29:fd:b3:9e:66:1a:bc:65:e2:d8:98:97:
5a:19:25:89:cf:75:bf:89:98:45:44:cd:92:90:3c:31:89:ff:
ca:42:79:68:34:01:17:cc:4a:1e:f1:e7:0f:f6:44:57:a8:58:
83:49:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:22 2026 by rpki-client