Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: rbVXWYlCG/V3NAOsCIPRB4JDVgJ4/rfGZlHLNC+b/J8=
Subject key identifier: 9F:2E:7F:93:EF:E9:47:6D:86:29:AE:E5:8A:EA:D0:5D:C9:D2:59:44
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 019CABD9B087A44A654D351E0EFA8BE7DA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0F05
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: dsLdJMOUiI7q_-APyIwy34yOW5E.roa (hash: POXZCn3rwMGKOplLlMfSl2cF5aSp/HWGstxXZUZFABo=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: 1K2QR8i10xVHL+yUds78meX9ZdlTdALwxGfKaM6iKOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b0:87:a4:4a:65:4d:35:1e:0e:fa:8b:e7:da:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=9f2e7f93efe9476d8629aee58aead05dc9d25944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:14:cb:4d:18:5b:4c:f6:cc:57:6d:62:df:
36:1e:b9:83:5d:1e:b6:6a:c8:94:eb:3b:de:6b:55:
88:74:00:58:8d:11:73:87:4f:25:4a:b2:15:a3:a4:
50:86:c0:aa:f4:01:d5:a5:c3:05:be:f8:bd:7e:44:
0b:d2:65:f5:2c:34:0c:7b:0b:78:2f:29:7f:ef:48:
ac:3e:bf:9d:a6:d7:e7:61:7b:0e:be:f9:82:5e:28:
6e:65:53:d2:04:2e:c2:e9:52:4a:06:54:34:c3:ef:
c7:8d:10:2b:61:4e:b8:c7:1f:79:8f:6b:cb:b8:6d:
70:d3:b3:10:68:40:aa:46:94:97:33:41:34:05:a2:
88:8c:18:d2:c9:0a:ff:35:4f:b8:69:4e:f9:25:03:
b2:69:2b:67:0d:04:c0:76:2e:d0:09:b2:dc:56:ae:
b8:eb:e3:64:31:58:3b:62:1f:13:27:b9:c0:b3:e1:
9c:62:fc:6e:dc:3a:ac:4d:bd:46:a8:33:d8:a4:6d:
39:a9:18:83:d6:ff:06:df:86:e3:1f:97:18:5e:1e:
5e:08:78:97:50:be:87:a9:7d:a6:c3:5b:d7:d7:1a:
62:aa:df:94:f5:19:f1:a3:f4:d4:ef:13:12:4d:27:
58:31:50:79:c0:22:fa:41:c0:6f:bf:23:76:32:d3:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2E:7F:93:EF:E9:47:6D:86:29:AE:E5:8A:EA:D0:5D:C9:D2:59:44
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d2:73:e3:ef:d5:71:6a:4c:c7:bc:c9:01:99:44:07:59:a4:
f8:e9:47:a8:30:27:46:9d:e0:f5:77:9f:fb:b6:91:5a:e2:72:
b2:51:96:7f:65:4b:00:78:04:1f:2e:5d:9b:ae:d3:53:f3:07:
ea:16:e9:12:48:3f:bf:b6:41:be:85:c5:b5:2e:f8:dc:89:5c:
32:7e:71:06:d5:9d:13:5d:c8:2e:21:1a:92:73:13:32:0c:f0:
4e:f2:c3:2b:92:22:f3:b1:15:a1:bc:e2:86:80:93:f0:d6:a6:
b4:68:15:0f:cf:fe:6e:63:64:64:87:51:74:9b:38:26:96:4d:
3f:0c:3a:4f:8f:c9:cd:c2:0a:0b:e6:81:49:eb:c5:01:16:4c:
3b:b7:40:24:1f:03:87:ea:a6:83:b5:82:7a:80:b2:8c:c8:b5:
22:88:fd:3f:3c:e8:01:ff:a3:6c:e4:b4:09:21:d6:0e:36:59:
62:23:e8:6e:a4:b1:a1:b7:1d:c4:19:c5:f3:26:fc:26:85:ce:
3e:4e:93:cd:a6:48:91:c3:79:3f:65:1e:5b:45:3b:2f:f4:6e:
f2:6b:25:2f:7b:51:38:91:d3:29:ed:40:e2:48:22:04:b6:03:
89:a2:35:ec:a9:c8:eb:ca:f6:41:b7:00:e0:a4:20:d2:92:3c:
53:ce:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:14 2026 by rpki-client