Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: QvFgG8w6z1u1Zgu9RG6hlP85w+2r18VVcgGySlSUrkg=
Subject key identifier: 08:8C:AF:54:E6:D4:EF:F8:45:EB:00:36:99:E5:68:22:E0:9B:F2:C0
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 019CACB5595323C8FBD021C368A2C1235034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 09B3
Signing time: Mon 02 Mar 2026 04:01:31 +0000
Manifest this update: Mon 02 Mar 2026 04:01:31 +0000
Manifest next update: Tue 03 Mar 2026 04:01:31 +0000
Files and hashes: 1: O9jTuaIwSklnvAfhZBN0WWcgZXE.roa (hash: TZQoxFlSub9NUs3bu775AFUShxwX/KmkPryQTWD+vU4=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: L1y2FCAZgz25BWb2PUqD1HMRBGl2QScMi9Gxw959fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:59:53:23:c8:fb:d0:21:c3:68:a2:c1:23:50:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Mar 2 04:01:31 2026 GMT
Not After : Mar 3 04:01:31 2026 GMT
Subject: CN=088caf54e6d4eff845eb003699e56822e09bf2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:df:44:b7:86:cf:04:e5:43:e4:fb:e6:ef:
45:fd:3e:14:83:6a:07:99:74:ca:71:5f:db:ac:0d:
f4:89:de:b9:be:d8:66:fb:54:fb:ed:99:d0:9f:5d:
29:f4:16:85:72:4d:53:36:95:7c:9e:01:f2:db:46:
ac:7e:53:4e:02:b7:53:d4:e9:e5:c3:71:6f:fe:2e:
25:9d:f8:17:01:c3:1e:97:c6:2c:a4:5b:0a:4c:36:
c1:f2:ed:54:c0:8b:07:9e:0f:64:06:e2:44:0b:90:
13:c7:4b:2f:7b:8c:61:32:54:22:a2:e1:19:66:78:
a8:fc:f9:f7:c9:c4:68:e8:74:e8:3b:40:0b:37:8c:
5e:fa:f8:f6:d2:ed:bd:ea:15:d9:7c:8d:94:85:1e:
36:e0:b4:96:b5:14:db:c1:7e:db:26:51:dc:21:91:
15:4c:cf:80:cd:9f:92:2d:3e:31:85:76:d5:dd:27:
4d:6c:3d:fe:35:25:9d:6a:cf:26:df:d1:e6:82:ed:
b8:1d:c2:cc:da:41:db:56:88:6b:d9:63:91:d2:7d:
d8:ef:e0:a0:8a:a4:8b:04:53:d0:4a:97:5c:da:c9:
ba:39:78:eb:bb:32:b5:3d:04:a7:47:1a:c3:5a:b2:
60:db:dd:b0:7d:cc:ea:d9:10:33:27:52:c4:50:3a:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:AF:54:E6:D4:EF:F8:45:EB:00:36:99:E5:68:22:E0:9B:F2:C0
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:69:7d:88:8a:86:6f:42:87:5f:35:c7:88:f9:4c:38:36:3e:
46:77:74:97:0e:94:2b:d8:66:7f:f1:f1:b0:8a:ba:4c:e6:4f:
cc:59:90:6f:b8:4d:3a:a7:d6:00:b8:a5:50:16:45:68:0d:b5:
7c:16:22:23:00:cd:1b:ce:e9:43:2b:aa:ba:90:86:d0:ae:50:
2c:0b:39:0b:65:34:e3:f9:4a:91:60:53:58:1a:5a:f4:cf:f5:
2a:a9:1e:f3:3e:6f:e6:06:43:a7:1f:ca:13:25:46:80:61:84:
47:98:4e:1c:53:d7:25:a7:b6:10:1f:b3:a5:a0:7d:80:1e:a2:
5e:b0:7e:2c:28:c6:08:58:d3:ed:6f:f0:25:0b:64:e3:37:de:
d6:5b:59:cd:3d:2e:71:70:19:c3:1d:9f:94:9f:31:e5:e9:78:
2b:54:b4:ee:69:93:b7:bc:e9:16:40:5a:83:9c:03:d9:55:95:
a6:0e:3d:7c:b3:82:64:1c:3f:4d:fc:2f:3d:ae:05:07:ae:6f:
23:71:dd:b4:28:28:35:74:a1:91:cf:b9:ac:09:de:f3:e4:52:
d3:bb:22:9a:a9:66:63:25:48:f7:60:b1:ac:28:03:96:da:9b:
89:7d:08:4c:1e:fb:85:e8:6a:67:2d:33:12:2b:c7:6c:82:02:
fc:aa:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:44 2026 by rpki-client