Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: Gjy5PJAdqcGgA4tJQSoiFGlIuQYdpZ65LMtOBJPvSDs=
Subject key identifier: 1B:9A:B5:B7:7F:28:D2:F0:2B:55:44:47:1E:77:31:07:1A:BE:6B:A8
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 019CAAFD97B753D330C3B1A87DA6AD0C009A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 1521
Signing time: Sun 01 Mar 2026 20:01:11 +0000
Manifest this update: Sun 01 Mar 2026 20:01:11 +0000
Manifest next update: Mon 02 Mar 2026 20:01:11 +0000
Files and hashes: 1: GO5gsgSjP6atrmJc6eN-oLN1XJE.roa (hash: T+zIy0ejXj3SXGWGil9zAIh7/YFmPINe0YtkNe4/+uU=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: kw6h3Aoc8I4Li0qG9mubg8IbGmZcPH++Vy9wa7HCj9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:97:b7:53:d3:30:c3:b1:a8:7d:a6:ad:0c:00:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Mar 1 20:01:11 2026 GMT
Not After : Mar 2 20:01:11 2026 GMT
Subject: CN=1b9ab5b77f28d2f02b5544471e7731071abe6ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cc:a0:0e:05:c8:36:39:0b:33:35:10:49:0e:
7d:59:4b:3c:27:d6:e7:8d:0c:e8:ca:63:b8:4f:22:
32:62:a0:bd:36:b1:ec:73:e1:9a:20:79:c4:74:ff:
9c:49:2a:00:18:1d:0a:e2:d2:4c:7c:4d:a2:fe:23:
8d:66:fd:60:cf:c4:2a:17:b6:c3:ec:ae:9f:5c:3f:
4c:a4:d8:4a:82:6e:45:1c:a0:6f:88:c2:d9:34:b5:
0a:16:7d:63:63:d4:ba:79:3e:69:46:5a:81:f6:04:
68:bd:b9:1d:d3:9c:02:9c:1d:52:76:71:d1:83:c9:
99:0c:4b:65:79:5e:37:28:b2:0f:e8:0b:95:72:d9:
da:15:e4:10:5f:2b:9d:40:67:84:e4:5e:65:8b:bc:
8d:4d:30:09:a4:a8:02:ec:56:0f:c5:42:ed:e8:da:
cd:00:39:16:7f:4c:66:c9:c0:da:3a:d7:5b:15:65:
bf:9d:04:b7:63:96:d5:79:8d:54:34:6c:90:04:e8:
70:48:08:33:ed:ae:6b:28:b9:4a:b3:61:92:be:ff:
ba:da:a1:51:25:94:4c:6d:32:37:ce:9e:33:8c:db:
e8:26:bb:49:13:29:ad:ab:06:c0:de:f4:6f:13:89:
62:e0:8b:d0:8b:8c:e0:90:e3:af:7b:d4:11:e9:27:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9A:B5:B7:7F:28:D2:F0:2B:55:44:47:1E:77:31:07:1A:BE:6B:A8
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:35:2d:7a:4c:0b:4e:4d:6c:22:24:f8:19:57:12:b2:18:20:
9c:a0:ab:86:fc:9d:52:ce:99:84:fe:fe:89:dc:e3:20:44:1e:
d4:d9:fc:81:09:ca:bb:06:ca:89:a5:70:45:3d:4c:31:6a:d3:
41:50:09:a3:ce:e6:5e:e4:ce:7c:7a:69:c8:ec:65:fb:91:60:
c7:16:04:11:8e:60:db:ab:7e:d5:ea:68:86:b4:27:d5:22:2f:
a9:02:04:87:f4:63:70:e4:f3:ee:e8:22:72:a0:f1:11:2a:3b:
9d:1d:9d:e7:7a:fb:8c:01:60:b8:e9:b7:8e:08:f5:2b:b9:d9:
48:2f:67:ed:0a:18:f0:85:46:f1:1f:02:36:a4:43:26:16:e3:
99:ee:67:1a:62:4a:15:1d:25:90:82:ca:6e:2b:56:34:15:79:
af:d6:7d:e9:58:ea:a3:e2:8f:48:a3:4a:50:68:c2:e2:24:e2:
08:24:be:a7:62:e6:ae:78:d3:2d:52:c1:ff:16:3f:09:1a:74:
51:37:54:8d:e7:08:9d:bb:94:b7:cb:2c:eb:2e:a0:3c:af:2c:
3c:e3:00:57:6b:44:92:9c:d7:5d:fa:9b:fe:fe:bf:48:28:d2:
96:2b:34:92:07:dd:49:86:3f:ab:e5:2e:a8:9d:5b:28:da:e9:
60:ec:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:19 2026 by rpki-client