Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: Df2FXMypuNy9GHqbvff9A+etIDGO6SwzSj74T7bqPds=
Subject key identifier: A2:F5:F9:4E:46:84:2C:A4:39:D1:CE:A0:A7:8E:87:92:1F:8C:8E:3E
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 019CAAC6FCD6033936B5DCB221D36B10B66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 0B0F
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: q7PS8sl6WFPJHRvFeAO8qvbkXVksZxyl9MGAiZdlsI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fc:d6:03:39:36:b5:dc:b2:21:d3:6b:10:b6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=a2f5f94e46842ca439d1cea0a78e87921f8c8e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:e5:c0:84:3b:4d:49:8f:49:85:7c:0a:3d:
67:42:b2:e6:bc:94:53:eb:c2:f8:f7:20:93:0d:11:
8e:a5:31:39:c2:6a:f7:78:07:58:d4:0f:d1:9b:4b:
47:85:e4:c6:f6:4a:99:49:db:60:2f:4f:41:f5:cf:
e7:03:28:a0:02:7a:d3:82:8b:96:c3:2e:84:3c:da:
96:25:d6:a3:d6:99:38:6d:6f:6a:0a:85:e3:33:94:
f1:8a:52:21:b2:86:24:dc:8f:17:59:b8:e4:ac:87:
88:2e:a8:fe:bb:4d:11:3f:3a:df:87:66:54:c0:cf:
29:8b:89:3b:06:04:eb:b7:e5:6d:57:79:8b:71:16:
53:57:83:c9:2b:52:5a:39:74:02:8a:7a:f9:fd:c4:
b8:05:da:c8:fe:f6:95:b9:a8:0f:2f:02:08:3c:fc:
c4:56:17:d1:bb:89:a3:18:03:24:4d:77:2d:87:7f:
aa:19:f4:cb:b0:50:08:e8:19:c5:e1:a3:a6:e8:d0:
3c:99:43:b5:e5:04:dc:93:12:97:1f:99:50:74:b6:
bb:f6:b0:19:f4:b1:e3:69:49:97:76:c9:e2:68:02:
07:ca:44:f5:98:93:14:23:ca:8f:e9:c8:01:f2:c9:
89:e3:4d:3c:ed:da:b1:b1:08:17:b6:0e:03:36:74:
78:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F5:F9:4E:46:84:2C:A4:39:D1:CE:A0:A7:8E:87:92:1F:8C:8E:3E
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:80:53:d9:23:fa:ae:03:24:40:d5:73:21:ca:25:f6:be:c3:
83:63:08:2a:d6:60:e0:00:30:55:cc:b8:36:15:ba:5e:e7:db:
a2:4b:a8:0a:85:c1:91:b8:a2:4c:dd:f5:e0:83:06:0a:0f:15:
39:59:55:c1:26:42:8d:6c:83:4f:7d:50:d4:06:0b:02:a2:e2:
18:4a:02:4f:4f:0c:82:02:89:d4:fe:72:a3:89:ff:8d:4f:0d:
b4:a7:b4:69:00:47:24:4d:39:8c:28:7b:d0:d8:bd:07:c0:94:
02:03:16:87:04:49:6f:c9:ac:a2:4d:82:09:a3:7b:6c:a5:db:
e0:46:ce:ae:22:fb:83:c9:0c:04:3b:f0:37:84:58:ff:bf:30:
e0:36:29:40:7c:49:62:56:4e:a5:89:9b:b9:56:80:43:98:41:
c0:62:1b:ea:41:57:dc:97:3e:2c:da:f2:ea:6c:59:ee:2a:16:
64:46:ba:be:7d:0f:8a:fe:13:e1:2e:00:4c:a4:35:0d:c6:e3:
9f:26:46:0d:8c:af:fb:7e:f8:f0:c9:5f:a6:8c:65:5c:24:c8:
9f:7b:f7:4d:2f:52:c0:a8:39:8d:e8:dc:dc:78:59:5e:a6:59:
b5:81:6a:c4:c7:82:90:b2:b3:27:11:61:fe:1a:bb:b7:40:ec:
ba:72:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:34 2026 by rpki-client