Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: 9iNC68c4mFsDk4GasFKeqL2g2nEJNsQbq4WNwMXotNc=
Subject key identifier: BA:E0:D6:3B:4C:0B:82:A4:81:9B:6C:AC:67:4F:99:2A:29:8E:FA:9E
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 019CAE6C1BCAB5D7EF2342EE552D6EA2ADA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 14DB
Signing time: Mon 02 Mar 2026 12:00:46 +0000
Manifest this update: Mon 02 Mar 2026 12:00:46 +0000
Manifest next update: Tue 03 Mar 2026 12:00:46 +0000
Files and hashes: 1: W5uRfZYMXNW2milH0L5Q1SQBK_Y.roa (hash: twzlUdXhM38SqnTujzlhunBgW581D9DNlyRL1ec0bWg=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: W09BozgFQT6nNz7ZJtA0v1gPPcgW4I+NAaZurG9qqwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:1b:ca:b5:d7:ef:23:42:ee:55:2d:6e:a2:ad:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Mar 2 12:00:46 2026 GMT
Not After : Mar 3 12:00:46 2026 GMT
Subject: CN=bae0d63b4c0b82a4819b6cac674f992a298efa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:82:1b:99:25:2e:ea:f3:fb:a5:12:0f:b1:
dd:30:1d:4d:5f:08:64:c3:27:39:c0:6e:67:b3:38:
69:68:cc:e3:13:25:30:5d:ed:9e:8f:3e:93:11:b0:
6c:70:eb:da:de:41:37:2f:7d:b7:ff:df:9b:cc:bc:
de:6a:f1:15:b7:db:7a:b9:68:eb:b0:49:32:0d:3e:
48:56:3b:0a:20:7e:59:a4:4f:06:95:ad:d0:13:e3:
a7:63:38:01:f5:1e:8e:9e:ca:ef:2f:b2:d3:2c:32:
fa:fc:88:42:4c:96:e5:f1:a0:c2:15:62:d2:4a:4f:
35:56:46:bd:c8:b2:25:7f:c4:43:5a:70:2d:1e:6f:
b9:9b:a2:94:79:92:da:b9:03:a0:00:2b:69:50:58:
ec:48:eb:4b:94:9b:bc:41:e1:33:d6:5c:c4:61:0f:
90:88:cc:71:59:64:0b:40:51:1d:e6:b0:0d:a2:70:
2d:22:1a:51:a2:a6:ea:ab:2d:81:57:5e:19:3d:78:
b3:cb:32:a9:7a:ab:60:b0:44:04:69:8f:5b:c6:6e:
e4:08:43:76:d4:ce:a6:0d:14:a7:92:c7:8e:f9:42:
1d:02:5c:98:09:0b:43:1b:6d:89:59:8e:3a:3f:ff:
b8:1e:71:12:d9:a7:6f:22:60:bd:b6:74:bd:50:d6:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:D6:3B:4C:0B:82:A4:81:9B:6C:AC:67:4F:99:2A:29:8E:FA:9E
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:28:45:c4:18:35:44:3d:52:d6:cc:50:13:36:8a:fd:f7:e1:
96:5d:54:28:45:aa:0e:22:66:f3:78:7a:4b:09:14:ab:2c:e6:
ac:41:50:be:41:c9:34:19:5e:b2:e9:2d:4e:a4:22:80:a2:87:
fa:fe:f1:50:93:b1:1c:4f:7a:24:37:e7:6f:9e:4f:e6:bc:69:
3c:62:43:9a:fe:95:ec:95:97:ff:ff:a2:78:43:ba:6d:2a:25:
2c:29:6c:df:cc:dd:48:41:cb:e8:4a:84:36:15:8f:cf:de:e2:
08:29:bf:c7:28:e2:be:48:ee:4a:a9:f6:f4:3a:22:b1:9d:aa:
8d:3e:1a:aa:13:77:52:16:16:cb:5b:a9:65:e6:84:b8:14:ca:
25:05:e6:3a:50:03:cd:18:79:c5:64:e4:7d:d2:73:c2:21:54:
32:b4:9b:fd:25:ae:a2:34:b7:f1:9d:94:6a:07:f9:1f:44:5d:
84:45:78:5f:3a:48:95:89:ea:01:fb:ba:cf:0a:07:d0:05:23:
c9:17:b6:3e:ec:00:e0:6c:68:7b:5c:e2:17:43:31:31:bc:bc:
7d:46:04:bc:9b:7c:51:fc:7e:aa:13:f3:63:e0:ea:36:eb:7b:
c6:6f:ff:63:d8:60:8a:5c:fb:5b:3c:1e:ea:a4:6a:26:ee:d9:
82:78:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:12 2026 by rpki-client