Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: gNM0N9G5WZzXK6WtBCdCizCrfY1Z0B76ZYA1DFQ+Qdg=
Subject key identifier: FA:B0:87:8A:AE:D6:7A:E5:9F:CD:60:46:D5:3D:A0:A3:81:77:F4:94
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 019CAA8F99757908D9DF53E3652E695220D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 0BC9
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: e29x5KQ9lUTXsNTy9Js9YJvWUiY.roa (hash: CkkrAFaQANiawRM+t6VTBnKH0rFPseRbQYjCYVGniKU=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: wWUK+Ef47PPS6hM/NM4sW/yn1zY6vVo6NopcgsBkG2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:99:75:79:08:d9:df:53:e3:65:2e:69:52:20:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=fab0878aaed67ae59fcd6046d53da0a38177f494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:08:10:88:0e:57:53:c7:28:22:5e:87:c1:
3c:dd:72:4a:81:61:6f:8a:55:c8:e2:ae:f4:2c:16:
36:50:c3:f8:62:88:74:bd:dd:5d:45:6a:db:8b:5a:
fd:4f:51:22:62:a7:fc:db:ba:c5:1f:42:65:23:97:
aa:df:23:87:b8:4d:6e:59:87:e2:74:7b:1e:5a:ea:
e7:08:44:88:73:9f:66:ba:b7:c9:4e:e9:34:1d:28:
8e:20:21:6d:a2:64:0b:31:6d:e1:ae:b2:1d:c1:75:
4f:d3:e8:3a:83:ab:17:b8:82:b9:e6:e5:52:61:0d:
e3:8d:53:b9:5c:ff:5d:08:0c:31:9d:f6:76:96:73:
88:82:26:8a:cf:0c:e9:6a:e6:71:3f:84:0c:c0:96:
30:44:a3:c6:43:27:dc:dd:79:c0:fb:ee:2e:bb:71:
91:bf:13:38:83:16:3d:07:be:31:80:95:91:75:30:
56:6f:25:a4:2d:39:d3:fa:d9:61:27:1b:07:51:68:
c6:7d:74:8e:0b:55:fb:dc:9d:ee:ba:18:a8:c7:76:
01:95:f6:11:10:25:85:9d:de:07:fc:28:aa:b0:d8:
33:ca:11:22:fd:60:f1:60:06:22:50:63:0b:ed:5f:
73:76:66:4f:c4:d0:dc:42:d2:e2:5d:57:47:6a:09:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:87:8A:AE:D6:7A:E5:9F:CD:60:46:D5:3D:A0:A3:81:77:F4:94
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8a:97:2d:e1:51:99:bd:c0:a0:90:bf:a4:68:a7:ee:e1:a0:
7f:e2:a9:3b:61:09:76:83:61:37:56:30:11:0a:78:9b:ff:9f:
29:13:c9:c0:81:2d:df:09:d5:f4:b2:d5:ff:5f:2d:85:4c:59:
73:0f:97:3e:b6:8a:c5:d9:28:ad:33:3b:5e:f1:e7:13:9a:bf:
3b:0a:fe:5f:fc:47:4e:e8:aa:b9:fd:fa:f6:b2:6b:0a:f8:03:
83:24:3a:89:2f:99:2b:cd:b5:4a:10:36:cc:aa:de:f0:3d:04:
40:6c:a9:a6:44:33:c5:74:f9:3e:66:ad:0b:5c:1d:49:ed:56:
8d:ab:32:b1:ed:8a:7e:3c:68:dd:cd:38:74:49:d7:35:45:18:
28:67:ab:e8:36:e0:8b:30:7f:ec:5f:f9:d9:84:cc:5f:c7:a4:
35:31:e5:08:3a:9f:89:9e:ea:ac:19:8b:71:5f:86:91:6c:a1:
6d:24:d0:16:1f:01:ae:85:14:d8:81:bf:a3:82:7c:1a:a0:a3:
cf:9a:10:d4:61:14:5a:ce:83:ca:20:62:48:d0:8b:56:08:b1:
6f:5c:a8:c9:08:5a:6d:8a:0a:dd:1a:4f:6c:5a:51:9a:0c:53:
d1:4f:72:65:82:b0:fc:10:b2:be:da:09:93:41:5a:96:55:84:
71:15:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:15 2026 by rpki-client