Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: sIKtGM5B0YLCdIGj48KebSTimXUj4+5iVGalTBo5i6I=
Subject key identifier: 1F:7F:2D:1B:5A:1A:34:00:C4:EF:8A:8D:7D:8B:40:88:8F:31:34:70
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019CAAFD9CDF3E236BD7BA6A953580C5CC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:01:13 +0000
Manifest this update: Sun 01 Mar 2026 20:01:13 +0000
Manifest next update: Mon 02 Mar 2026 20:01:13 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: fx4QJVD4+gbzwYbKbuuM0poaw6lpNpfRDwkb+HpVwjE=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9c:df:3e:23:6b:d7:ba:6a:95:35:80:c5:cc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Mar 1 20:01:13 2026 GMT
Not After : Mar 2 20:01:13 2026 GMT
Subject: CN=1f7f2d1b5a1a3400c4ef8a8d7d8b40888f313470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:05:52:95:53:79:d2:27:f0:38:ec:e3:1e:
ef:0a:35:12:19:1c:4e:40:f0:5a:ad:ad:8d:18:e9:
58:96:76:9b:50:b6:51:e2:af:c0:37:ef:d1:71:25:
c0:11:3a:53:a5:82:aa:d3:ed:91:d0:f2:a0:3c:69:
75:68:82:81:75:c1:f8:10:cf:da:4d:3d:c4:bf:69:
34:56:bd:4e:f7:63:3d:47:39:04:2d:a2:2b:a3:dd:
84:36:f9:f0:a5:c3:04:52:a6:29:2f:1e:13:a3:04:
0d:25:70:32:f3:40:48:bd:bc:f1:56:9e:50:a1:98:
5e:bf:a7:a4:0e:9e:da:82:f0:12:b6:c4:c7:bc:25:
1d:60:d2:f2:c8:61:98:fc:be:3c:8e:a7:83:27:a1:
8d:74:bc:6d:ed:a9:a7:a8:57:ae:82:eb:73:ac:ed:
13:e9:42:8e:5a:60:b5:ef:02:a0:95:33:7c:c2:0c:
bb:2e:37:12:92:cf:33:dd:49:7c:16:af:f9:1e:b9:
6c:b2:ce:8f:e1:6b:1c:0e:03:c4:95:c6:a8:f3:4e:
4e:bf:7e:e4:6b:8e:4b:64:dc:d5:64:08:f3:c7:fa:
2d:ea:3c:6c:f2:18:78:03:00:b9:02:cc:e9:bd:0c:
25:58:85:81:38:77:9b:fe:14:41:4d:97:d4:43:a0:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:2D:1B:5A:1A:34:00:C4:EF:8A:8D:7D:8B:40:88:8F:31:34:70
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d3:f7:d4:7c:58:8e:f3:af:26:fa:3e:77:34:ee:15:1f:f0:
95:fc:81:a2:be:c9:a0:c4:a6:c7:8b:63:49:37:20:8c:76:d5:
1a:c3:aa:c6:8c:51:c0:68:dd:f8:78:bd:e8:e2:75:01:e6:b7:
c6:7f:b8:26:6e:13:0f:ac:d5:e2:33:ce:05:7e:53:74:11:d6:
87:e5:e9:70:ae:6c:92:22:94:5b:74:2b:b4:6a:fc:ed:dd:a9:
09:8a:82:89:c1:ab:f1:3d:94:32:a1:05:5c:35:fd:e9:01:6f:
48:9a:0b:c5:dd:42:79:52:a1:6c:e3:a4:75:18:5f:3e:33:ba:
80:a0:10:f6:d0:7a:4d:86:de:1c:40:36:97:f5:31:fa:ac:98:
d4:ad:4f:48:73:22:16:77:c8:74:06:d7:59:26:77:db:b7:70:
82:7e:5c:aa:3a:a7:3f:41:6c:3e:bf:18:e1:81:ed:bc:20:30:
80:36:34:af:65:87:bb:c6:d8:44:46:b4:8e:8d:fd:df:ac:6e:
fd:ae:e5:1d:c5:59:43:8f:1a:c6:5f:16:e3:35:43:ef:4f:7c:
0b:d2:22:b4:47:6a:82:55:84:5f:73:01:ce:83:5a:e7:51:cf:
06:96:6b:0e:7f:e0:19:53:9c:f1:31:2e:06:cd:ea:99:6f:40:
ea:86:60:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:33 2026 by rpki-client