Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: of1HF0PsKfpfjts9Y6SFyLwZfiKWxC97Yex/7fag8XM=
Subject key identifier: E8:34:2A:A0:EC:0F:29:DD:2A:14:76:DE:D9:3D:05:6D:06:58:37:89
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 019CAA58727F4F42BB9EA4490D42F147FB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:00:49 +0000
Manifest this update: Sun 01 Mar 2026 17:00:49 +0000
Manifest next update: Mon 02 Mar 2026 17:00:49 +0000
Files and hashes: 1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: czS1ogn/5JFJRRrGM04TIDEez8QXwHVxI4Wu2JCi16g=)
2: jrzLdp-DroztQ5yesperw0S2sxI.roa (hash: fM5zeQtq1zhKIrIjHXbNjUQhcEhAHLAsHH7/oZggY6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:72:7f:4f:42:bb:9e:a4:49:0d:42:f1:47:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Mar 1 17:00:49 2026 GMT
Not After : Mar 2 17:00:49 2026 GMT
Subject: CN=e8342aa0ec0f29dd2a1476ded93d056d06583789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:84:b5:c7:45:5b:d8:58:89:a2:3c:18:d1:
54:9c:62:6f:2c:84:7c:93:82:c8:65:33:1d:f7:ec:
d2:09:6f:94:2e:f5:dd:8a:f7:d8:4a:35:9b:64:f5:
64:78:e9:6b:39:83:23:60:b6:3d:6f:b4:2d:06:39:
1f:8e:90:d8:e2:63:83:82:dd:ac:dc:e1:bc:3e:27:
87:c0:00:3c:38:fa:68:04:49:f4:0f:c4:12:4e:37:
06:f0:f5:4a:24:12:32:fb:0f:72:31:5e:88:68:e0:
47:72:10:13:b7:ea:cd:69:0c:72:ea:73:69:ee:d0:
14:da:69:07:25:76:91:a9:28:44:b2:6e:4b:0f:81:
91:d5:03:a1:ff:f6:97:f2:d2:8a:c1:2c:ac:a6:91:
79:14:8e:a9:5f:05:3f:cc:a3:79:1f:1f:db:cc:74:
ff:94:88:d6:7b:69:b2:c6:2a:8a:41:4f:b6:86:8a:
27:17:5a:32:c1:72:62:a1:cb:e7:03:79:a1:96:c4:
3a:f9:9a:a3:e2:c0:48:d8:11:45:6c:86:0b:eb:fb:
b1:f2:8e:b4:b7:af:63:2e:d1:27:b3:04:d9:fc:bd:
89:b9:fe:9b:f2:67:ab:8c:71:f6:9a:3d:df:e2:5f:
15:21:b2:f3:41:ec:90:53:da:8c:50:2a:fc:85:fa:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:34:2A:A0:EC:0F:29:DD:2A:14:76:DE:D9:3D:05:6D:06:58:37:89
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:40:6b:ef:d9:6a:a4:83:6f:a7:58:13:e2:d8:85:a0:22:59:
52:24:f4:04:fd:42:c7:16:4e:ec:b5:1d:45:5e:f7:6e:40:bb:
5d:90:48:9f:d9:72:8f:64:c5:bf:34:d8:0b:62:71:14:a4:aa:
b6:b7:b8:2e:2f:f2:e8:95:77:0c:49:38:40:4b:75:9c:ea:78:
68:db:82:76:28:1e:21:47:7d:2a:90:2d:d4:ee:9b:cb:71:26:
ea:cc:59:9a:52:5d:0e:11:92:c8:83:0a:e1:93:1b:88:14:79:
07:57:5a:f0:e5:43:19:0b:69:2b:34:19:fc:d2:0e:39:9f:5d:
d0:a6:e1:3f:ae:84:7f:52:6d:31:69:2a:c7:0e:dd:2f:97:f7:
f5:21:d6:a5:7e:dd:6c:db:d4:01:39:6d:d7:78:e8:84:01:59:
db:13:7f:e6:89:90:02:8d:33:8e:c5:d9:70:69:40:7a:a2:23:
99:9d:95:44:19:93:31:96:3a:bf:ce:7e:d5:94:fe:03:1f:cf:
f5:1c:f5:95:6c:47:c1:49:c3:cf:29:11:16:1e:5c:23:12:c9:
f6:01:7b:9c:f4:40:59:9a:f0:59:eb:9d:25:3a:17:00:73:1c:
72:bb:67:dd:32:7a:74:0d:c9:5f:7d:aa:92:6e:93:f0:2c:19:
b3:28:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:53 2026 by rpki-client