Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: 7I0xboNv6cyslz1BkXPMaXUJvmO7wPcKLs/0+RrIsaA=
Subject key identifier: 7E:4C:70:B1:29:5C:CD:E4:7A:E4:45:B9:B8:5F:F3:C4:2B:B4:16:97
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 019CAAFD931A4EE6243F343922696F67AD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 09F7
Signing time: Sun 01 Mar 2026 20:01:10 +0000
Manifest this update: Sun 01 Mar 2026 20:01:10 +0000
Manifest next update: Mon 02 Mar 2026 20:01:10 +0000
Files and hashes: 1: aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa (hash: 5JOSX/QZCccK/gUOeYHPT0U61k8N4LEoiccIN7jDjPo=)
2: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: rxOuhBdh3wlIrmJtyWein0+tcx3W0bWKDQeLh7c5zf8=)
3: nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa (hash: SjtdaWQXMJk13J5xCejsgWLSIcSxD709iSf13daT5JQ=)
4: yd8JpikDeAGL1RyToXLtaBhLXs0.roa (hash: WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:93:1a:4e:e6:24:3f:34:39:22:69:6f:67:ad:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Mar 1 20:01:10 2026 GMT
Not After : Mar 2 20:01:10 2026 GMT
Subject: CN=7e4c70b1295ccde47ae445b9b85ff3c42bb41697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:31:82:57:5d:a1:a7:cc:96:bb:e6:e2:b9:
c0:43:ac:60:51:4b:1f:49:44:94:a1:92:30:27:73:
ed:ac:29:5d:55:a3:80:0b:9f:a6:68:65:87:f8:f7:
3f:c7:f8:88:79:43:96:d9:ca:2c:15:b5:20:3a:1d:
1b:b2:ff:57:2b:3e:84:b9:b2:96:15:d6:eb:0e:3c:
ef:93:6f:1b:7e:ef:4d:cb:a9:25:b5:ec:1f:32:a8:
e5:c1:02:80:04:4d:b4:2b:04:f3:39:1d:7b:6e:58:
6d:f2:25:3c:3a:f3:ae:d0:31:92:7a:ee:64:05:9e:
f0:af:b4:44:52:93:e2:0b:7a:2c:88:75:0f:f0:3e:
3c:93:a5:30:9e:c3:a0:81:05:77:a6:4a:98:ec:0b:
45:57:9e:70:a1:b5:0e:79:0e:67:76:f4:e9:e8:49:
4b:79:51:8d:b7:b4:80:5c:ce:d4:c4:f3:93:16:e2:
7e:0f:25:89:38:f7:80:3f:1f:36:e2:62:dc:9f:df:
4f:3e:85:57:a6:25:3f:1e:de:70:8a:82:ef:95:d6:
b8:26:c0:b3:e6:ab:d9:fb:18:6d:0a:04:16:b9:1f:
b4:3a:37:7b:17:75:60:21:1e:ff:23:ab:ea:ad:c6:
43:68:ca:e5:6e:63:69:41:ce:cb:14:76:10:1b:f0:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:70:B1:29:5C:CD:E4:7A:E4:45:B9:B8:5F:F3:C4:2B:B4:16:97
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7e:15:f4:18:9e:ed:c0:c1:bf:31:82:ba:73:7c:0e:bb:80:
07:50:1d:96:f1:31:9e:a3:45:1d:e1:71:bd:9c:6c:b0:54:d8:
60:42:01:72:95:22:53:21:ea:b7:26:83:52:13:fe:61:7e:3e:
a1:21:3c:ab:41:66:0b:f2:f8:c3:df:05:5c:43:5e:c2:4a:1d:
e9:15:01:39:a7:98:78:b5:e1:8d:2f:5e:94:34:ec:7d:42:70:
8d:d8:59:7b:d4:1b:d0:a6:a4:60:dd:ca:9a:f4:4a:68:2d:4b:
e0:4a:a5:66:1e:6e:84:ad:f4:0a:5a:6a:98:29:c6:07:4e:f0:
bd:e3:1c:66:e8:ff:3e:ed:c8:03:c1:e4:43:59:3f:82:10:9a:
8a:cf:6d:e6:99:2a:18:87:fa:c3:a6:1e:97:b7:e4:4d:1d:99:
07:74:02:a4:6b:6e:51:1f:34:95:65:25:70:09:a2:35:c7:2b:
50:3e:65:bc:cd:a3:8f:f8:6c:7f:0b:0d:1d:f3:ed:e6:fa:e8:
94:08:94:93:2b:33:25:b5:ea:ce:9c:3a:c7:49:38:38:0e:31:
22:46:4b:c5:71:c4:23:80:6e:dc:70:a7:d0:e1:eb:1a:1d:4b:
d8:a0:86:f4:66:c6:fd:fd:b9:79:98:80:cc:ee:b8:c5:25:6a:
3e:e8:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:18 2026 by rpki-client