Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
File: j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json)
Hash identifier: vd/ElFwfHbRXp0NC5qSITs70oiPAM3P/QYfdJ9HIepU=
Subject key identifier: 2E:3D:D9:3B:F4:AE:65:7C:23:C3:E0:10:E5:32:9B:25:4D:44:CC:8D
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 019CA9EB38D75DEFE86DA7B28A180B427DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
Manifest number: 0100
Signing time: Sun 01 Mar 2026 15:01:30 +0000
Manifest this update: Sun 01 Mar 2026 15:01:30 +0000
Manifest next update: Mon 02 Mar 2026 15:01:30 +0000
Files and hashes: 1: XiMWlcnYu15otXM1SpS0Znny3pM.roa (hash: HhN+oEh/TLjrfvVsB28CfHRheFgOREvZ8MiqN/vatGw=)
2: d476BYeaJLqNSnr-4TzLtIvX_-4.asa (hash: DGmo0q0ksnUeOLLpbyw3uKqXcWfdPN/1LjZwfME/+Cs=)
3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: b+aU36P/kbtiuC8QQtEGvPECAOsSi3N3DBN6gJhLlik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:38:d7:5d:ef:e8:6d:a7:b2:8a:18:0b:42:7d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Mar 1 15:01:30 2026 GMT
Not After : Mar 2 15:01:30 2026 GMT
Subject: CN=2e3dd93bf4ae657c23c3e010e5329b254d44cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:13:cd:a1:a9:c9:cb:e9:85:f8:68:64:a3:
5e:82:9a:13:43:4c:de:d7:54:54:d9:aa:ed:c5:34:
02:42:2d:25:52:21:07:ec:af:c4:7e:0c:1e:4e:8a:
4d:ec:a7:60:83:b8:b9:02:ea:a5:7a:26:79:7a:70:
49:3b:d2:c2:14:fb:b2:8f:23:93:4f:3b:2f:97:b9:
5d:5a:8b:22:55:0a:aa:fa:72:b4:4f:e1:a8:c1:00:
24:17:af:bd:95:62:ad:01:29:34:1e:dd:da:dd:fe:
66:3d:32:17:ac:9a:33:7a:37:b6:3d:d8:13:db:8d:
c3:a3:55:6f:d9:e5:c9:67:10:6b:cb:b9:b2:7e:86:
69:b3:e5:55:3d:87:84:4c:6e:fa:f2:b5:44:e3:85:
f1:b7:1a:29:2e:b5:f3:bf:08:f6:b2:0e:a1:ec:52:
97:11:92:29:38:fd:54:e5:e7:27:40:16:ca:2c:45:
1c:ab:4d:66:c8:be:20:40:4b:3e:03:33:d1:f9:3c:
88:1d:34:21:b5:2d:db:6a:d8:ea:b8:c7:23:73:94:
8d:89:80:55:d1:b2:90:be:98:8c:bd:30:bd:f2:9f:
27:d1:94:d6:38:c3:99:73:2b:e8:28:d9:fe:27:77:
07:42:7c:14:66:52:4a:2d:f2:e6:f3:06:3a:dd:42:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3D:D9:3B:F4:AE:65:7C:23:C3:E0:10:E5:32:9B:25:4D:44:CC:8D
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:49:57:c3:46:98:fb:30:e7:bc:08:1a:70:e1:12:4e:c2:4d:
50:87:0e:37:65:e0:ff:30:ea:b3:eb:4d:58:fa:44:ef:ee:94:
33:a4:3f:e3:a1:4b:60:55:ce:37:44:fe:e6:1b:df:a5:7e:9b:
31:50:03:94:a4:5b:3c:c1:f7:86:32:9e:24:7a:f7:46:04:e0:
27:87:63:e9:63:41:e9:72:82:85:4e:86:93:9f:58:2b:0a:70:
90:2e:58:ef:b1:54:9e:02:14:e9:42:43:de:5d:ac:f8:e8:32:
c9:01:d4:77:75:9e:43:ad:f6:54:eb:fb:e4:6a:c9:a4:b0:21:
e1:08:8c:a5:66:17:99:5f:60:ba:54:82:9c:50:ed:23:e2:8e:
c5:6e:f9:d2:55:c3:dd:9f:ea:7d:9f:8c:a1:23:4f:21:f6:fc:
8f:89:88:bc:20:07:a9:43:c7:2f:ca:fa:b8:c8:ac:8e:3e:e5:
4d:3b:4e:82:ca:78:d6:28:75:4d:ec:b1:86:74:40:70:11:aa:
21:9f:02:33:b3:03:8d:5c:e9:48:3d:39:1b:dc:ba:b2:8e:2a:
3d:92:2d:10:a3:38:44:04:87:43:fd:55:bd:c7:61:31:3e:83:
4e:9c:b3:c8:f9:fc:2c:b9:c5:e0:65:ee:28:20:08:06:6a:66:
46:c3:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:49:16 2026 by rpki-client