Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File: jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier: RVty8+wL+HzYvptggASKweT5R9c/dppaxD520y/CGAc=
Subject key identifier: FC:88:7D:5B:AF:1B:E4:8D:DE:A9:DF:7A:11:6E:E9:E7:77:B4:D6:38
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 019CAD906778A952AB5CC754C516520ECF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number: 016D
Signing time: Mon 02 Mar 2026 08:00:47 +0000
Manifest this update: Mon 02 Mar 2026 08:00:47 +0000
Manifest next update: Tue 03 Mar 2026 08:00:47 +0000
Files and hashes: 1: TtAaCTFF0V9X8WI_qdeQAA4oQwQ.roa (hash: U/4Lot4o8fBAgjVs487K4MVRQesaymU9w/eHxM2f0+g=)
2: jJ3iBMsrV4WrcYaVoCwtgvKSMik.roa (hash: JyB3VBljqjnVhW3q2qpc1RWIEob+iAtHO2A+PDdzJ64=)
3: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: XWRH5QagzJe2nX7lugDmUpaJZ0gg40tviIN0wpGMXGY=)
4: rA6VNsR6jroVmSktiBRw1rIhqrU.roa (hash: wXe4q97uD3eOmJG7Qhu7qR3Oh0Q+VQy4RtGB+wIv/0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:67:78:a9:52:ab:5c:c7:54:c5:16:52:0e:cf:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Mar 2 08:00:47 2026 GMT
Not After : Mar 3 08:00:47 2026 GMT
Subject: CN=fc887d5baf1be48ddea9df7a116ee9e777b4d638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:86:65:8a:c0:2c:43:1e:59:b0:c5:78:a8:
76:df:a1:a7:5b:45:9b:d4:75:e8:de:0b:06:d4:a0:
8e:7e:17:5f:a7:75:64:4c:33:28:42:99:df:49:15:
bc:e4:e8:65:30:d4:cc:81:32:4f:80:53:21:c5:4d:
8d:72:cc:38:6b:b4:90:fa:8c:b7:a8:f4:e7:1b:c0:
a8:e4:d0:01:23:cc:79:d2:c5:91:dd:63:cc:24:c3:
12:31:3a:27:3a:90:93:55:dc:7f:b4:0a:68:44:aa:
d2:94:35:a9:b0:5f:af:31:7b:33:0d:d7:41:db:e0:
ae:8d:0c:d4:ad:8d:6c:4a:3a:44:e4:b3:83:8a:4a:
8c:be:6d:1d:42:04:cb:41:7f:5a:98:62:b4:c3:30:
8c:79:bf:31:6b:94:51:8a:55:6e:47:18:6e:3d:b4:
18:aa:c0:84:63:e9:87:33:ea:72:71:2b:03:d0:f0:
d5:60:78:aa:73:c5:64:06:eb:08:45:30:67:a0:40:
e1:53:a1:46:16:8f:b6:a6:a9:f9:4d:d2:8a:ec:ec:
e8:f5:be:8a:b2:4e:c0:87:fa:e3:a7:6e:bf:1f:0f:
2a:41:b7:8e:7c:30:89:67:60:18:f0:1d:ec:97:b8:
94:90:28:b1:ea:e5:ff:3b:cd:8d:48:c8:d8:97:21:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:88:7D:5B:AF:1B:E4:8D:DE:A9:DF:7A:11:6E:E9:E7:77:B4:D6:38
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:3c:82:d7:82:fc:5c:4b:59:79:bb:99:c9:94:32:2b:85:
ed:33:d2:f1:29:34:62:8b:c3:6e:01:32:b1:c9:88:64:b3:97:
15:65:f2:8b:7d:49:d0:c2:78:75:a7:64:94:99:c7:b5:aa:22:
02:48:ae:23:ec:5c:30:c0:81:8d:92:aa:ca:2c:cd:0d:7c:7d:
6d:9b:13:07:07:be:74:90:56:38:cf:87:25:49:7f:ec:c4:29:
e3:2a:96:e5:ba:a5:2f:21:1c:9f:d4:b8:df:3e:e1:86:5e:4f:
07:ee:b0:e3:32:73:da:2e:e7:69:6b:22:bb:71:03:80:0c:b7:
6c:8e:68:ba:b1:31:c2:77:99:50:de:0a:fc:19:ba:53:64:8d:
87:96:9e:9c:2a:d0:e4:91:ba:fe:ba:c9:24:57:eb:4d:e2:77:
13:73:06:ed:17:05:fb:90:4b:c5:d1:85:0a:9f:4f:a7:6a:40:
e5:82:51:62:f1:b0:05:77:ba:ad:8f:fb:8f:1e:09:87:da:8c:
4f:9d:03:28:3a:2e:39:43:02:23:4c:86:9f:e9:2b:5a:52:8b:
55:3a:40:8d:bf:da:c1:79:89:7d:35:a6:37:36:cf:f3:e0:a7:
2e:88:74:7a:14:75:51:2b:9c:c7:3f:97:75:36:64:b1:8d:bd:
3a:04:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:31 2026 by rpki-client