Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: xQD21rBLh8nliO6XBZnZAt9NdH2THd+OcS34fhGiQgc=
Subject key identifier: CB:20:FE:11:BD:CA:14:27:B8:BB:E2:DB:E2:0B:79:4E:7C:7D:60:11
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 019CAAFD9F88FFA2E96A2B66EDF28AB8D6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 07B9
Signing time: Sun 01 Mar 2026 20:01:14 +0000
Manifest this update: Sun 01 Mar 2026 20:01:14 +0000
Manifest next update: Mon 02 Mar 2026 20:01:14 +0000
Files and hashes: 1: ZdluKAeiGgNMdIKSFBpouvQoMFU.roa (hash: c9wab7GyUrk1eImAM4TBW2aXlrKgz7syJ0UrZ/J8cJ4=)
2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: VYa3gCG2EseysPf5f/bfHXH1NxRlmO0iVJqiHUSwPsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9f:88:ff:a2:e9:6a:2b:66:ed:f2:8a:b8:d6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: Mar 1 20:01:14 2026 GMT
Not After : Mar 2 20:01:14 2026 GMT
Subject: CN=cb20fe11bdca1427b8bbe2dbe20b794e7c7d6011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:89:a7:8d:9c:fa:37:a0:52:22:c5:3f:11:
33:d5:96:8b:71:8c:9e:a1:ea:63:74:02:0c:f9:9f:
5d:c2:d5:c9:8f:84:c4:7d:06:fa:38:c1:32:4f:ff:
7d:35:10:8c:37:c9:93:83:5e:17:19:12:a1:a5:e1:
cf:d1:4a:bf:b9:f8:f0:6d:c7:42:3f:2a:2a:c3:ad:
b0:43:68:1c:89:4e:94:e7:4a:dc:d1:9c:e5:b5:51:
f6:ce:4b:03:9c:cf:5b:bb:21:2a:cc:0c:11:eb:51:
9c:84:9a:e0:19:d3:76:79:da:06:d3:56:58:2e:f7:
84:8c:18:81:6c:30:b7:8a:40:07:14:03:be:f1:31:
07:96:48:c7:c9:ab:4f:54:b6:ba:f1:44:09:a0:fa:
ac:7d:99:ca:ea:c3:53:4f:71:bc:c7:70:39:76:e1:
cc:8f:7d:59:2d:c2:a5:20:12:61:b7:a4:d0:49:10:
09:02:4f:04:a0:31:2a:29:39:52:05:92:38:65:7d:
d5:4a:82:0d:35:9b:32:3d:eb:28:8b:a4:cd:49:ab:
26:25:d6:4b:3d:f4:36:97:94:92:24:59:1b:3e:d5:
48:23:4a:25:b6:d6:14:73:57:d5:62:8d:62:d0:c3:
a3:f4:90:be:f7:e5:30:1a:c8:6f:40:dd:c5:16:44:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:FE:11:BD:CA:14:27:B8:BB:E2:DB:E2:0B:79:4E:7C:7D:60:11
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:57:65:0f:94:14:84:3b:c6:dc:8f:71:22:17:e3:96:b7:b0:
93:5f:86:3f:87:dd:22:db:29:d0:66:30:fa:e6:26:2c:2a:c0:
42:ff:c4:1d:78:46:8d:83:10:03:d3:33:56:aa:d4:af:46:30:
20:ce:4e:56:df:8d:82:cb:5b:15:65:fd:ca:d1:a0:3e:6a:e4:
3f:26:b5:f9:3c:59:d9:56:97:e6:4f:54:8e:d4:98:ce:0a:69:
33:fd:46:89:bf:3c:53:66:ba:e4:f7:9a:ad:3c:d6:c0:0e:0d:
a5:9e:5a:1c:38:80:6c:8e:49:f9:41:09:67:bf:5f:42:50:fe:
b8:68:4e:4e:b0:28:1c:ae:fd:1e:cb:a5:b9:2d:dd:27:a8:ec:
e8:ea:96:00:13:5b:ae:ad:b6:fc:57:2a:25:81:e9:69:a7:92:
7d:3c:0a:99:71:23:cf:b4:1e:1d:1f:75:e2:c9:4d:4c:e9:d6:
a1:ac:52:8b:c4:a8:4e:42:4e:c2:11:ff:e1:11:50:af:f9:7f:
67:de:d5:23:56:c8:19:04:a8:de:cb:9b:24:92:78:a2:9a:4f:
16:22:74:fb:bc:ad:33:13:42:de:05:25:fa:2a:92:19:b8:d0:
0e:ff:e5:a9:6a:11:ff:f1:f8:e3:81:6d:93:bf:f7:3c:a0:5e:
d5:72:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:28 2026 by rpki-client