Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
File: jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json)
Hash identifier: hk0r/IZP1UUCZXPHs6TaJ2YB8htWvirDoRfZ6jpwjZY=
Subject key identifier: 89:84:78:E9:7F:FD:37:5F:42:CE:5B:0C:C3:FB:55:35:1A:0F:3A:29
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial: 019CAA8FE7EDE0AA05755DB9A69DA30B11C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
Manifest number: 14FC
Signing time: Sun 01 Mar 2026 18:01:23 +0000
Manifest this update: Sun 01 Mar 2026 18:01:23 +0000
Manifest next update: Mon 02 Mar 2026 18:01:23 +0000
Files and hashes: 1: fzpf91ZVxSyjkpJthW1ioGWIhp4.roa (hash: ryNazaSm80nyBlQG4XkXpwOiUN2WFZ22ImBpcGYlMTQ=)
2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: kIfRzKkzggFVl7Rt7jwQ8ZqBBjtUTAMxnjkb0V/zU5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e7:ed:e0:aa:05:75:5d:b9:a6:9d:a3:0b:11:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Validity
Not Before: Mar 1 18:01:23 2026 GMT
Not After : Mar 2 18:01:23 2026 GMT
Subject: CN=898478e97ffd375f42ce5b0cc3fb55351a0f3a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:bb:00:b9:6f:66:2e:6d:17:55:77:fb:1a:
30:ed:5e:91:03:1b:7d:35:e6:08:5e:a3:3a:43:b7:
cf:42:fd:2b:56:d8:4a:77:77:5c:75:91:60:76:1c:
ff:a7:dc:52:73:b1:30:ba:bf:09:35:ab:1c:3b:0c:
04:c2:14:50:c7:d0:57:5d:a5:05:2e:68:24:45:20:
bc:75:63:9c:3b:f4:3c:a3:4b:af:f4:5d:4f:9e:b8:
ed:9b:bf:39:49:8b:65:26:1b:90:b5:05:68:59:c5:
20:60:99:58:b1:ce:90:c3:c9:35:df:ab:e5:36:90:
6c:0d:14:21:29:99:23:bf:3d:f2:77:9d:5d:91:80:
61:e2:70:22:4b:2e:45:60:a2:06:b8:c7:f6:42:f5:
dd:83:6d:55:da:f4:54:59:bc:2a:fb:f1:74:a5:5c:
55:64:84:dd:54:0c:02:99:f9:af:b7:4e:91:02:8a:
ff:d5:fd:f3:ab:9a:dc:aa:5e:88:5c:3b:22:1b:33:
b3:fa:a9:cb:50:44:8f:73:ca:73:e3:19:d6:b2:db:
cd:76:77:3d:54:97:25:05:ad:ca:0f:19:43:b1:6f:
7c:c5:a4:24:27:90:87:49:34:29:43:a5:d6:ac:99:
86:f8:6a:40:68:20:3f:94:a7:05:76:97:9c:5f:f4:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:78:E9:7F:FD:37:5F:42:CE:5B:0C:C3:FB:55:35:1A:0F:3A:29
X509v3 Authority Key Identifier:
keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:da:2d:34:76:22:90:f5:55:be:0c:d7:16:12:de:3a:29:b5:
bf:7f:c6:38:30:1f:56:18:38:80:f3:0b:a9:3e:62:2a:96:f5:
cb:28:4b:28:cc:4e:74:22:91:e6:f4:15:2b:15:11:0e:30:a9:
e2:2a:50:cf:b3:a7:21:85:74:18:24:07:d0:c3:87:87:4a:fa:
2e:37:7c:63:0d:de:b0:e5:02:43:c9:22:c0:af:85:b9:74:db:
05:13:ee:9a:b0:34:72:90:b6:e6:52:4d:47:54:05:d7:c3:f9:
ca:5a:c6:2a:58:2d:1a:da:77:05:21:a2:b4:2b:99:9e:65:5f:
24:e8:0a:4d:83:f0:fc:9a:5d:33:cf:9c:9f:d4:98:15:84:97:
d5:1d:0a:1d:75:31:6f:96:36:fe:53:19:35:4e:ce:2e:d1:38:
63:c0:66:7a:cb:5b:5f:fd:5e:75:3d:e4:27:ce:58:2e:0b:e5:
52:da:0b:ab:76:88:7a:06:54:7f:72:cc:40:a4:5f:e5:95:20:
bc:78:db:59:d4:00:11:2b:76:78:4d:f8:91:82:78:0d:c0:5f:
5f:9a:d7:8f:c2:1a:26:4e:db:10:58:2f:65:09:7d:3e:cb:3d:
bc:3d:31:60:99:c1:ac:b3:cc:e0:6b:25:ce:07:bc:6b:09:50:
bb:ca:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:16 2026 by rpki-client