Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: 7oRRokpbv9LryO2tzkrX5Mjh+NgB1XsbMK7CJJD8Qr4=
Subject key identifier: 29:D6:38:60:84:AF:66:0B:A1:18:2D:C7:48:25:E5:07:22:05:21:4F
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 019CA90ED9ABEEE7AD137B2978AB66FBDF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 05CC
Signing time: Sun 01 Mar 2026 11:00:48 +0000
Manifest this update: Sun 01 Mar 2026 11:00:48 +0000
Manifest next update: Mon 02 Mar 2026 11:00:48 +0000
Files and hashes: 1: Ev84dzr99BkEprLlsKv-9iCyhPY.asa (hash: A4Hylllyzq6B6OAjJOwRb/t7tAR+6RCdPmT8bW5GCjg=)
2: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: DeQzdpc/0Mcvz5Vhtm372Zt+leiuseaq7cGsLEuHa1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:d9:ab:ee:e7:ad:13:7b:29:78:ab:66:fb:df:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Mar 1 11:00:48 2026 GMT
Not After : Mar 2 11:00:48 2026 GMT
Subject: CN=29d6386084af660ba1182dc74825e5072205214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:50:ad:6d:c2:1a:bc:61:1b:23:a0:b0:2d:
2f:78:5e:25:b1:d4:8e:cf:78:16:13:77:fc:dc:f3:
19:a7:5e:36:1a:b8:0b:52:76:e2:ed:10:e1:85:1c:
ba:e9:d7:6c:90:7c:88:d6:7f:38:8a:6e:53:6a:87:
96:0e:bf:02:1c:99:7c:80:6b:74:02:26:0b:de:3d:
c6:f1:5a:73:35:cd:64:83:9f:16:d1:61:22:c7:83:
f0:ff:44:eb:98:03:3b:98:e7:b9:b1:91:09:e2:d8:
e5:9f:5b:bc:9a:b5:b3:72:ba:74:34:e7:c2:c2:35:
67:53:31:9a:ee:ad:63:da:c0:13:10:8d:89:df:99:
6c:17:71:64:5c:c5:e5:f5:32:12:84:fd:68:ef:30:
d8:45:03:f4:dd:f8:7e:a2:62:5b:86:6d:34:d6:2e:
3b:ab:3e:ca:ef:d3:5f:16:47:88:de:14:a9:7e:fc:
74:40:75:8d:5c:7f:8f:1d:84:33:f0:aa:0d:8e:85:
02:cd:72:ee:dc:03:9e:a8:31:fa:ae:58:e1:53:88:
a8:71:c1:43:d6:f4:dc:22:60:c6:30:da:07:48:40:
25:c3:30:f1:fe:9e:7f:2e:fe:6c:14:f4:33:dd:d0:
18:15:e0:4a:18:a6:c1:89:f7:f8:c3:70:62:bd:29:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:38:60:84:AF:66:0B:A1:18:2D:C7:48:25:E5:07:22:05:21:4F
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:59:c3:90:8b:e1:54:d5:6d:02:a3:ba:e9:0a:35:a4:76:
60:e5:b9:8c:25:39:3a:37:69:f7:cf:aa:b0:6c:02:b6:d6:f4:
46:d8:4c:80:65:2d:4d:c1:56:02:6f:b9:31:09:4b:e3:7d:e9:
4a:23:5a:17:16:be:77:8b:2e:62:7a:bd:38:7a:47:bc:cd:ae:
ae:fe:42:a1:a7:d5:e2:72:8e:31:f5:4d:94:27:7b:33:7e:2e:
39:a8:14:59:76:d2:3e:b3:fb:c5:44:80:32:b2:44:77:93:45:
ac:03:ca:d6:82:4f:e8:04:2a:d7:31:74:10:b4:0c:ab:b1:4c:
a6:f6:bf:84:d6:b5:a1:ad:e0:56:ee:09:8b:87:ef:28:60:47:
88:35:fa:e3:c4:51:85:db:f3:86:13:94:59:29:84:80:f7:a9:
b9:76:37:19:a6:74:be:d8:5e:57:5c:ed:9e:44:cb:57:00:7a:
49:d8:fb:91:d6:bc:d2:28:ac:8f:44:d1:31:df:5c:0a:df:b3:
cb:d9:ac:cc:a3:fc:c5:04:6f:6f:b3:f4:32:78:8a:f2:78:7e:
f3:ad:6d:c8:18:3f:1f:2e:87:bb:2c:0b:78:4f:ad:08:bf:e0:
b2:29:57:a5:d4:74:19:f5:4b:ce:16:87:4a:b8:03:ee:ad:75:
7c:9b:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:40 2026 by rpki-client