Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: LqOK7CJACOIZACAHMyus0g025IG4wfIxC3scPabEyEA=
Subject key identifier: AD:4F:10:E8:79:28:84:85:45:AB:0B:CC:76:91:B9:62:1F:6E:51:43
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 019CAAFCFD9B8D45FD254CD1BC0870719A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: 39DTcMNKiRnZZh7clR3-Xg7LiNc.roa (hash: BV0YNi+He+COF6H5HCrpqupHZg4YCTyzm94qIT5wJPI=)
2: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: mAtd+o2RzNO8OXE9Xgn3U8OcV71q6OkgJ3WeOUx+D3E=)
3: ylHeIsFZMO0gbIKdKEHYveA-bkE.roa (hash: Q+/UUAinchPplGksAEDnZd30sKpg597qJT9SsZ+CONo=)
4: z_rlOiqBiGOKeFdRy89ys_JwXcM.roa (hash: RhetRJ3Zo1CzCaRPPa5jm5tpT048C/tX6ZCch0Ia1N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fd:9b:8d:45:fd:25:4c:d1:bc:08:70:71:9a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=ad4f10e87928848545ab0bcc7691b9621f6e5143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:07:30:c5:98:16:3a:e3:75:56:d3:85:d2:
fe:6f:cb:02:bb:48:df:ad:77:63:ab:4e:d4:86:f0:
da:d7:db:f3:58:da:b4:21:c8:18:8a:e0:d5:3a:df:
d0:99:7a:e1:24:4d:ef:28:92:9f:f7:7b:df:9d:e4:
ba:49:d0:39:52:14:a3:dd:0b:09:d8:be:8e:52:d3:
ab:6f:db:72:f0:fd:0a:b7:63:18:7a:02:03:75:1c:
d1:be:5c:a3:e7:ad:36:ab:27:51:34:d1:af:36:4c:
0a:d8:4e:38:f3:a7:9f:92:04:73:36:e8:b8:31:6e:
e2:cd:11:1e:d9:21:72:2a:99:90:50:08:c8:10:0d:
50:7f:27:ba:d9:84:b5:09:11:c4:eb:03:69:ed:14:
db:91:4b:b0:e2:49:60:cb:e4:07:e1:fa:30:32:23:
02:48:d2:2d:76:74:b0:14:d6:df:5e:ea:5f:10:28:
a1:82:96:74:90:de:83:fd:7d:af:70:6f:cb:64:23:
4c:6a:b6:a4:a9:96:0f:fa:54:3e:e1:32:ae:98:7d:
1c:df:24:b0:54:8f:8e:eb:a4:c8:25:89:14:f7:e2:
80:53:89:0e:41:37:f9:d8:34:d2:27:e4:01:5d:35:
b1:74:42:5d:13:fe:c2:42:b4:97:a8:5c:aa:08:01:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:10:E8:79:28:84:85:45:AB:0B:CC:76:91:B9:62:1F:6E:51:43
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:45:99:21:f9:c9:6a:85:74:51:64:48:92:bf:ff:84:36:aa:
3c:20:52:07:36:89:2f:00:17:56:51:3b:e4:57:da:c4:3a:ba:
99:7c:08:b7:56:51:37:3d:d3:98:d3:b1:47:6e:5c:ab:6f:17:
53:f5:cc:84:63:84:d9:86:b5:01:11:80:f0:3a:ee:2e:93:51:
96:de:9c:fd:55:47:2c:81:18:ef:f5:8a:fc:23:e9:4b:0a:c7:
73:93:34:14:3d:5d:fa:7a:9e:a5:c6:5e:ad:9e:88:9d:cb:4a:
a9:c0:77:6a:46:79:52:fd:63:b4:c4:90:2b:bb:6e:0b:92:a8:
39:29:50:9c:4c:b5:73:80:b7:2e:8d:ff:2e:6d:d2:14:92:72:
4e:ac:dc:53:30:ba:fe:fc:6a:5b:3d:b7:c4:05:b4:70:6e:4f:
55:58:d1:2d:97:d6:40:fe:6f:2f:8f:42:e9:5f:40:c3:e7:c4:
8d:06:c1:f4:c5:81:49:24:a2:71:b8:80:c7:5c:b4:94:3a:75:
a5:06:0c:56:7e:79:15:1b:a3:3f:7a:e1:aa:09:a9:7e:cf:0a:
80:d3:c2:b0:b3:7d:cb:fc:0e:16:fc:25:93:c0:dc:b6:4a:55:
d3:32:03:49:0a:60:c1:3e:f5:6c:ca:e5:2d:50:d3:d5:8e:dd:
ea:c8:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:45 2026 by rpki-client