Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: wO7+kwyxYtuGYO6wlaSiETbFX/oDTsWCRk6TZJ05qw8=
Subject key identifier: 1D:AD:D3:A6:D6:9A:5B:22:13:3D:37:4E:BF:8A:C2:10:9F:3A:9F:4E
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 019CA97D82C40B9F8F6BC81F7149A7BBAAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 1819
Signing time: Sun 01 Mar 2026 13:01:40 +0000
Manifest this update: Sun 01 Mar 2026 13:01:40 +0000
Manifest next update: Mon 02 Mar 2026 13:01:40 +0000
Files and hashes: 1: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (hash: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: t5l2tgFxizF2LRV3uCbJ7Ss5Fiz6PYmjzcHIvcIiIVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:82:c4:0b:9f:8f:6b:c8:1f:71:49:a7:bb:aa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Mar 1 13:01:40 2026 GMT
Not After : Mar 2 13:01:40 2026 GMT
Subject: CN=1dadd3a6d69a5b22133d374ebf8ac2109f3a9f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:46:e7:53:68:b0:4b:45:a1:5b:33:57:c7:
43:ae:a2:c4:85:9b:b8:d8:f6:48:99:96:65:fc:db:
6a:e1:12:3e:4e:a4:81:6c:50:ad:ee:b3:8b:79:3f:
e4:9c:1d:8b:fd:06:e5:a8:ee:09:ba:5f:90:02:90:
fd:9f:58:05:bb:de:a8:29:e1:cc:f0:37:3a:42:3d:
76:ac:58:d1:6e:f1:1c:8e:87:d3:5d:47:e6:17:58:
df:88:95:20:16:6c:d2:58:2a:e7:c6:45:98:ab:3a:
2b:ec:d5:5f:87:c3:d6:65:84:0d:1d:5f:c6:30:b8:
1b:26:00:1d:f3:91:4e:f3:f9:82:de:d6:a1:46:82:
2b:97:97:7b:07:1d:58:aa:94:d3:94:67:79:2e:c9:
da:83:bb:78:36:c0:fb:fe:2a:c7:33:44:1e:02:7f:
d4:0e:56:d4:24:ba:e0:16:f3:4f:0f:92:7b:b4:90:
5c:c3:7f:cd:ad:07:31:bb:2f:32:dd:30:6d:79:1f:
78:26:ea:a8:45:38:ca:a6:63:e9:47:94:57:9b:fc:
60:d2:fb:08:6f:29:f8:93:a5:d7:1e:46:b0:90:57:
ac:7c:ed:4d:2b:29:b1:ab:bf:11:f9:fb:02:4f:06:
3e:67:06:84:9d:0d:6f:51:8a:0b:23:32:6a:a0:f4:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AD:D3:A6:D6:9A:5B:22:13:3D:37:4E:BF:8A:C2:10:9F:3A:9F:4E
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:87:64:c3:0f:04:70:7b:ce:ba:47:13:6b:76:f6:56:a1:d2:
00:0d:9c:df:02:93:77:23:96:80:a4:a5:1a:69:cc:be:b8:dd:
78:b0:a4:58:fa:80:02:e3:fa:c1:e7:19:6b:ef:90:0f:77:89:
30:61:ae:73:9c:3c:22:a5:a9:0f:03:35:c6:cc:62:c7:29:df:
e3:f3:89:d3:a4:cd:89:db:f5:d0:b2:1b:5a:8e:4d:68:4b:5f:
8b:61:8b:c0:01:fc:55:15:92:9f:05:61:fe:e7:2c:23:01:43:
9f:76:ee:de:a7:0a:0c:83:df:92:22:bb:b0:73:4e:c8:d2:1f:
9d:d4:1a:f4:06:92:2e:18:f2:59:26:b4:a1:03:48:d3:62:6e:
6e:74:33:47:ce:3a:18:23:c6:34:07:a1:64:e4:cd:6c:a3:98:
19:a5:14:98:ea:9f:07:c5:ea:43:93:24:45:da:dc:a3:76:31:
ac:90:09:40:e1:b6:cf:f5:cd:c5:9a:81:12:9a:f5:3d:5e:60:
2a:b7:2d:b3:8f:60:92:ec:cd:b2:b9:b3:4f:df:48:40:05:ce:
00:6a:e5:4c:a1:50:25:6c:7b:b9:8f:12:a5:29:11:5c:76:da:
34:45:6f:34:db:40:9b:a4:88:52:b3:1d:23:4c:50:1b:14:69:
d9:60:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:28 2026 by rpki-client