Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier: mowQA60aUn2+9zkZ3lxnXbD4UGz6/KIInEab9v95W7g=
Subject key identifier: B7:1E:8C:AF:F3:1B:0E:D5:A0:0D:FE:02:56:3A:AD:54:0C:89:89:0C
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial: 019CAAFD69CB5D55D01038DF63DADC055F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number: 066C
Signing time: Sun 01 Mar 2026 20:01:00 +0000
Manifest this update: Sun 01 Mar 2026 20:01:00 +0000
Manifest next update: Mon 02 Mar 2026 20:01:00 +0000
Files and hashes: 1: hEPLWwWf7jJuBwfcBot8uZscUzg.roa (hash: MqR78deoycBbmzcw7LAPrygstqswKZFRL7vJYn9//Dk=)
2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: nY2pk57PD2y4ijNo0UB1L11M58gB7GiWPhiyNV4X2Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:69:cb:5d:55:d0:10:38:df:63:da:dc:05:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Validity
Not Before: Mar 1 20:01:00 2026 GMT
Not After : Mar 2 20:01:00 2026 GMT
Subject: CN=b71e8caff31b0ed5a00dfe02563aad540c89890c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:3f:1f:e9:63:ac:1a:c5:72:14:d8:01:2e:
0b:cc:a2:2a:6f:8c:5f:ad:41:11:ef:46:cb:57:54:
75:59:59:f2:ce:c1:e7:5d:9f:ee:e9:32:92:55:64:
5c:59:62:0b:ed:d7:d7:a2:6a:f1:28:9b:4f:2f:1e:
0c:aa:1e:35:da:a6:c8:1d:c5:bf:87:fc:84:da:b8:
bd:f4:e5:03:77:f6:bc:c2:a6:2e:4c:7a:ee:fc:ec:
07:8b:3a:fa:65:02:11:d0:d8:62:b2:64:50:da:e7:
0b:9b:49:9f:d9:f5:ef:ea:24:3a:c4:42:37:e4:3a:
80:d4:d3:39:bd:0e:d1:66:af:00:aa:c7:e1:d1:2d:
9f:68:27:bf:76:d7:80:a9:85:04:38:d4:37:19:97:
58:09:c5:63:09:93:2f:7b:45:8c:df:50:d5:a8:11:
36:b7:e2:95:9f:54:46:bd:41:d5:49:4b:5b:33:cb:
b4:4f:21:30:bb:a4:0c:4e:5e:af:0b:29:07:6d:c3:
a7:8f:f7:c3:7a:61:61:d3:17:64:23:9f:da:d7:3d:
b2:03:36:24:ee:45:78:fe:7c:03:d6:da:d5:be:3b:
9b:37:f6:8b:44:87:c3:ba:65:66:25:d6:c9:61:47:
4e:ae:4e:b2:ed:25:f9:39:0b:bc:48:30:bb:29:b8:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:8C:AF:F3:1B:0E:D5:A0:0D:FE:02:56:3A:AD:54:0C:89:89:0C
X509v3 Authority Key Identifier:
keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2d:52:62:b3:84:1f:39:c4:c0:1d:ff:3c:1c:7b:48:9b:6e:
05:0e:08:d2:61:14:dc:f0:06:2b:b3:1b:70:9f:71:5f:5f:56:
8e:f7:ec:06:1f:fc:ea:6a:0c:7d:83:df:c4:c3:45:70:53:5b:
bf:22:de:cb:1c:db:b2:0e:63:76:21:4e:21:e8:9e:c3:f8:1f:
be:5c:80:5f:12:6d:c4:c9:aa:20:7e:65:89:6d:f8:d4:10:7e:
e9:19:93:33:68:ac:f0:df:5e:dc:61:08:1a:12:aa:40:f0:7a:
94:e0:1e:02:59:61:9c:eb:c9:bb:d1:cd:56:d9:dc:dc:36:a6:
83:7c:f5:20:9b:2b:c3:b4:79:7f:94:a6:d5:b4:89:51:e5:84:
11:65:7e:1e:09:8e:43:6a:3c:31:6a:ba:ed:8e:18:ea:77:64:
56:32:ba:64:5c:71:37:a0:79:aa:18:41:ba:cd:e8:1b:12:79:
2c:c5:f1:6d:c3:5f:f7:e9:61:be:35:de:a5:98:1a:1d:d6:60:
7d:e7:72:b4:db:25:dc:36:af:1a:8b:a9:64:21:c7:d9:15:33:
5d:79:1d:db:1b:22:ea:0b:e4:9e:11:a4:84:56:eb:54:ad:a6:
96:2e:98:07:aa:b8:43:c1:f2:7f:7a:0f:cc:10:c9:a0:24:d0:
76:17:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:17 2026 by rpki-client