Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: HNjZy5TuBDk7hz5rB1/s3N5wd663aVpPxSO7V0iSXO0=
Subject key identifier: DD:A0:07:65:B0:84:C1:8B:83:D9:4A:D9:F6:83:17:F9:B7:96:FA:B5
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 019CA94595B7D6B0A3B70F0D6294E94964F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 052E
Signing time: Sun 01 Mar 2026 12:00:35 +0000
Manifest this update: Sun 01 Mar 2026 12:00:35 +0000
Manifest next update: Mon 02 Mar 2026 12:00:35 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: B/ehqf0DSSJ2tGUEsn8F7CoDmrWSWfOaYDwwH7tOKpM=)
2: xXZoIesIsVLnbbFVS6uD0w1QOCY.roa (hash: pEd0VeAjn0hUjIU5aNRKB8vb7ZezOzTftnRZZoX4QL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:95:b7:d6:b0:a3:b7:0f:0d:62:94:e9:49:64:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Mar 1 12:00:35 2026 GMT
Not After : Mar 2 12:00:35 2026 GMT
Subject: CN=dda00765b084c18b83d94ad9f68317f9b796fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:7d:39:88:9e:a7:57:6b:6c:bf:21:11:5f:
29:18:53:cc:bf:27:be:07:ec:37:6e:5c:df:7b:34:
62:30:80:2a:1f:7a:8e:4d:8e:dd:1d:93:27:7b:fb:
be:72:ef:d7:0a:00:0a:cb:67:70:27:35:e2:f7:ef:
52:c2:fc:ca:b7:0c:dd:4a:61:13:32:72:94:79:b2:
d9:7a:6c:11:d5:f7:9f:52:ea:c9:42:44:dd:02:dc:
80:53:56:11:f9:cc:a5:e2:07:a0:59:eb:08:96:0b:
e6:3d:78:ed:2c:bb:be:4a:d4:17:a4:da:b3:d5:86:
a1:8a:ee:68:e3:1b:46:5e:f4:85:3b:77:df:8b:f5:
52:07:66:53:a1:54:a1:dd:1e:a0:b7:0f:e6:b7:79:
1b:c0:4a:52:57:cd:33:df:78:e8:85:8a:74:b1:e4:
e8:6d:f7:75:78:13:20:be:a7:6b:38:60:e9:c8:c7:
14:74:5a:d1:5a:24:73:00:90:ae:e1:0d:ac:81:4f:
80:82:06:30:15:45:2e:fc:91:3e:08:f3:6a:71:6e:
e7:d4:30:b3:e9:1f:05:15:69:de:22:ff:3c:cd:c3:
1d:db:ca:86:f8:88:59:b0:17:04:c2:15:59:2b:94:
ba:c3:7a:e3:52:e3:b6:8f:61:67:12:45:4f:dd:77:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:07:65:B0:84:C1:8B:83:D9:4A:D9:F6:83:17:F9:B7:96:FA:B5
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:25:c8:3b:7a:b7:d1:ee:7c:e3:68:b6:0d:fe:2d:24:71:
85:9d:83:71:0a:06:ef:7b:b2:2e:85:95:d3:e1:57:95:6d:cf:
f4:70:c5:48:4f:51:4b:4a:c2:bc:be:05:62:8d:b0:4e:33:56:
18:7b:9a:ab:40:64:65:d5:ad:36:4a:71:cf:86:d1:fb:50:22:
26:fd:52:6a:1e:db:9b:c4:85:09:73:7e:6a:0a:4f:35:e7:93:
f6:23:77:8a:98:83:51:e1:d9:4f:b5:24:b2:3e:83:ec:a6:6b:
3a:6e:1d:bd:d3:79:3b:50:4f:4b:ce:83:c9:f2:f2:aa:d3:aa:
e7:d1:87:29:ed:d8:7c:bc:7d:03:a9:17:d2:fa:1e:8f:4d:b3:
ff:ea:84:0d:7b:3c:cb:93:55:87:a6:64:d2:dc:6e:82:bd:60:
e7:7c:3f:bb:70:40:91:a1:1a:d2:6c:67:0c:39:d5:03:88:ef:
fe:84:e2:10:b8:a5:7c:5c:53:a8:8b:de:e2:22:b5:2f:55:8f:
2e:8b:6f:0b:ff:fd:15:d1:94:95:6f:9d:1e:f1:79:93:73:76:
39:0e:ac:24:f8:c5:a9:ed:f8:aa:88:9e:89:1c:38:fc:4b:41:
e0:50:bf:b0:8e:3b:1e:96:e9:64:63:a7:42:32:9c:e2:dc:c3:
9d:ce:51:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:54 2026 by rpki-client