Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: U4BbFV+ByUmaYy5WsGjZWFpXBrflcXr5grx6XABpae8=
Subject key identifier: E9:F9:AB:D2:01:6E:CD:C0:B2:C2:C8:34:05:D1:45:04:14:98:2E:7C
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019CA97D4F7BC865C4F862BAADCE42219848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 1315
Signing time: Sun 01 Mar 2026 13:01:27 +0000
Manifest this update: Sun 01 Mar 2026 13:01:27 +0000
Manifest next update: Mon 02 Mar 2026 13:01:27 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: tPJIX0PIyd84jcXCeAOSnWYy6BPrwWTj1qLPqv2QP+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:4f:7b:c8:65:c4:f8:62:ba:ad:ce:42:21:98:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Mar 1 13:01:27 2026 GMT
Not After : Mar 2 13:01:27 2026 GMT
Subject: CN=e9f9abd2016ecdc0b2c2c83405d1450414982e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:e4:c1:b5:94:02:74:c3:13:a4:b3:d3:af:
7c:e0:1b:27:3f:4a:14:0d:c1:1b:c9:97:9b:ce:15:
e8:2f:e4:ca:b2:e1:91:9c:98:08:a4:f4:31:24:53:
79:59:6f:f8:fd:65:25:d0:99:a5:ae:7e:33:88:16:
e4:53:85:7c:77:7d:47:9b:e1:8c:0a:41:d3:25:47:
1b:f6:57:f8:dd:ca:a8:b0:b9:32:a3:46:6c:18:34:
86:a5:a7:8e:98:e3:51:c4:7d:25:23:57:81:34:50:
02:f1:e3:f9:bf:e4:cf:69:2c:6d:a9:e2:7d:ec:61:
76:a2:e1:4e:1b:00:c2:b4:82:a2:82:72:f1:39:fc:
5f:d4:a3:50:4e:97:af:e1:89:be:93:25:39:cd:62:
5d:82:f7:b5:b8:57:cf:53:b3:34:cf:93:c8:d3:86:
f8:29:c3:97:2f:20:05:92:7f:fe:36:a2:70:b2:76:
8e:5d:5d:14:c2:ad:f0:57:e5:ac:9b:14:e0:62:a9:
00:4b:e5:3b:db:a7:b1:df:9e:c1:dd:f7:e8:61:47:
34:ed:a8:55:35:de:dd:da:c9:75:55:37:a7:f6:33:
a9:25:f5:a4:5b:1e:da:83:d4:cc:c9:a3:60:cc:23:
dd:c0:48:9e:b1:4b:65:1b:7b:a1:1b:ae:9b:14:1c:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:AB:D2:01:6E:CD:C0:B2:C2:C8:34:05:D1:45:04:14:98:2E:7C
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8c:45:ad:fc:da:f4:59:8d:cb:ec:74:42:ed:22:30:df:86:
27:9b:f9:60:2b:e7:02:bd:28:76:2f:b6:a4:e9:86:12:9b:05:
e6:5e:87:18:ab:c1:ea:ed:5c:5a:0d:0c:f5:46:ed:94:34:fe:
ef:aa:8c:17:f6:54:0e:61:c0:88:c7:8b:e0:4e:ee:53:aa:8e:
24:66:f8:77:7d:79:5a:79:16:d0:1d:d8:7a:2e:c9:45:c5:17:
bc:c7:a6:cd:72:1e:d1:2e:4f:8e:e8:b9:ee:ba:98:62:b7:a2:
65:c4:79:63:9c:79:9e:7e:7a:46:66:c8:b6:29:10:61:e1:a6:
11:4f:2d:a3:c9:a9:db:d7:35:b1:63:f0:ed:b3:ac:29:7e:f6:
c3:bd:e0:16:e7:7f:93:97:3b:14:ee:73:ea:9a:0e:cc:2b:41:
de:59:e1:ae:0d:c6:ad:94:f2:f8:bc:79:61:42:9b:dc:a9:3b:
7d:34:1f:ad:96:ef:3b:fa:2f:9a:db:a7:d8:58:68:20:57:10:
5b:64:40:44:44:d4:22:51:83:43:21:34:f8:91:6a:25:c9:d1:
b7:9f:55:4b:da:e7:b9:2d:72:4b:81:93:d3:c8:00:b5:45:25:
cf:90:dd:80:a7:67:f2:05:c1:77:e2:54:80:37:11:28:62:aa:
06:08:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:49 2026 by rpki-client