Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: obJkpVEsU0vXMqgMpXhIL00uf/ftaRyAzP7Ye+P8+4k=
Subject key identifier: 2F:A9:26:7C:3B:CD:E0:A0:7B:01:30:87:20:C7:18:5F:A9:9A:1D:D7
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 019CAAC71D823DF0E3758127BD200BACFC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 13E9
Signing time: Sun 01 Mar 2026 19:01:41 +0000
Manifest this update: Sun 01 Mar 2026 19:01:41 +0000
Manifest next update: Mon 02 Mar 2026 19:01:41 +0000
Files and hashes: 1: IbKyp9_Uukax1Q8ZI-K3vY0ooZQ.roa (hash: gTefC/kLKJlQRjCqhwo1qEZQvhe2YWlgNO1XB76+Uz8=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: QKDDpP05JUdOii1CqZeI07iLppbpuSGYTh2oTI//4Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1d:82:3d:f0:e3:75:81:27:bd:20:0b:ac:fc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Mar 1 19:01:41 2026 GMT
Not After : Mar 2 19:01:41 2026 GMT
Subject: CN=2fa9267c3bcde0a07b01308720c7185fa99a1dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:7f:24:6f:8f:08:37:d2:33:36:79:29:f7:
66:43:fa:fc:5e:36:4a:18:f7:41:37:46:67:13:cf:
03:7c:5e:27:7a:5b:fe:f3:81:a8:cd:bf:54:95:9e:
f7:87:24:92:56:79:05:84:62:b8:ac:e3:6b:b6:ff:
8e:11:02:d0:2e:3a:32:3d:9d:e8:b0:4d:91:66:37:
54:4e:e5:05:1a:be:d0:06:52:3b:6f:e3:25:8d:41:
c8:14:8a:a0:c1:6f:52:3e:55:a7:f3:ac:28:3d:ee:
76:82:c4:ee:09:96:ff:ff:a0:45:98:62:57:b9:ed:
e0:51:02:d3:b7:1f:f8:2c:39:4d:d0:ca:15:62:73:
60:f3:35:da:09:3a:37:7b:3e:c1:51:0a:af:76:b1:
b5:fd:92:f9:ea:05:74:77:19:a0:ec:a5:2c:6c:ab:
fc:00:c4:40:c1:d5:d6:7c:26:ad:e6:d0:75:fc:43:
07:6c:c9:3d:fd:c9:a8:c7:b9:4c:0b:69:10:cf:01:
87:f1:a2:b7:fe:21:d3:0e:0c:4f:69:e7:40:c4:cc:
e1:f6:4f:72:aa:94:38:b2:63:c0:64:5c:6c:48:e2:
34:fd:4a:46:b8:a8:50:f9:74:49:ce:a1:9a:f6:56:
d3:05:c0:4a:07:d6:50:16:0f:a7:19:88:c9:ec:31:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:26:7C:3B:CD:E0:A0:7B:01:30:87:20:C7:18:5F:A9:9A:1D:D7
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:27:5b:78:6e:75:f3:0a:b8:54:2a:00:95:40:a7:24:f3:e7:
16:31:ba:4a:8b:c3:f7:bf:07:b9:87:0a:32:b2:c8:95:5b:51:
f8:cb:0c:cf:11:5b:67:06:d0:3c:d0:05:ab:df:0a:15:53:5f:
17:a8:de:f2:99:d8:40:69:0e:b8:5e:a6:0d:3a:cd:8f:c9:24:
6a:9c:b7:64:88:e7:5d:a3:2b:25:b2:d2:49:26:5b:55:36:02:
24:1c:e4:af:b8:e2:e8:37:0e:41:76:be:85:7a:f7:d1:cf:ab:
59:2d:86:9e:08:17:bf:81:05:a9:6c:ae:1e:df:a1:e1:65:30:
d9:fe:73:30:a6:3e:fe:e7:ed:40:51:35:e0:a9:d0:c3:f5:02:
ec:90:31:7b:5d:3d:40:5f:0e:2b:d9:66:bb:54:6b:7e:d5:de:
e0:6a:3b:e6:ad:88:7a:36:54:ea:57:93:dd:68:3e:42:c6:8d:
df:a4:2d:e5:3a:31:49:4d:43:cc:c5:eb:71:35:54:89:14:ff:
8e:a1:45:7a:39:b7:00:bb:ae:79:29:0a:76:bb:52:14:af:dd:
b6:05:75:f7:e3:de:c5:07:f4:c3:78:eb:58:f6:45:e2:77:9e:
34:4a:de:1a:b3:42:a3:8f:25:3d:ba:74:d1:ca:5e:84:25:46:
6e:b7:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:49 2026 by rpki-client