Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: MH9s1ww+MVfgnaYB1HKePG9rIXmbRszI5Av/Y+WaZ90=
Subject key identifier: 77:92:AC:A1:67:B6:21:7B:B6:25:79:95:90:24:E6:B4:4A:03:4D:00
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 019CAAFD0BD67236E5989211B4AB2EF4DD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 170B
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (hash: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ=)
2: _Q8Mb-3UvfMhIjv_xRaFDoLApBs.roa (hash: IHr0cgRLyfbFPNalDZLOfmKJvgcvrc9t828c9yf4EtU=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: AfPY+Butistj4RHR8XqthXVSJU5qvyzMt6a2M+kyW80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0b:d6:72:36:e5:98:92:11:b4:ab:2e:f4:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=7792aca167b6217bb62579959024e6b44a034d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:46:49:d9:1a:83:9b:ee:54:c0:4b:98:7b:
89:da:5e:9f:f7:d0:de:b2:3e:f4:3f:6c:70:f9:e6:
09:35:4f:10:d4:48:2f:ae:06:8b:5c:2a:8d:74:c9:
b7:9b:76:3a:ed:22:10:4a:38:b9:e3:b9:4d:2b:37:
35:79:e8:87:b2:3a:b6:64:ce:03:4e:e1:dc:97:d9:
05:b4:12:37:1f:19:d4:d9:50:23:e0:45:f5:c7:bb:
2f:6c:7c:2b:7c:ff:46:19:47:33:36:b1:55:b2:a3:
4d:cd:ce:66:1f:d2:e0:ac:58:a8:9d:7e:c1:f3:8e:
ce:57:d7:8b:fb:94:7d:a4:2a:b3:38:ba:b6:14:d6:
5b:02:61:f4:05:f4:17:ca:79:43:6d:f7:d4:d1:54:
1f:b3:f1:cd:62:c2:be:f8:21:5a:1b:c2:0c:93:1b:
17:d1:ed:32:b4:26:62:a5:77:9c:b8:bb:1a:7b:f5:
d4:32:4f:36:54:17:7e:65:93:aa:a6:34:dd:34:c6:
28:d9:97:45:50:fb:5a:35:d1:4f:0d:9d:2b:6a:1b:
b2:a7:83:fa:83:b3:80:14:e5:ea:7b:ae:f3:d3:d2:
d2:d7:20:90:91:9b:42:28:96:fb:e3:7c:ce:0a:6d:
c9:1e:48:5a:f4:b1:cd:53:12:d2:77:59:7d:1b:f3:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:92:AC:A1:67:B6:21:7B:B6:25:79:95:90:24:E6:B4:4A:03:4D:00
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d7:f0:ae:63:5a:27:48:36:e9:df:fe:34:c8:3b:c2:16:a2:
be:bf:64:1b:42:1f:8d:cc:64:d5:ef:ae:dd:cb:a0:e4:cd:81:
ad:e0:db:99:56:14:f0:fc:4b:9f:ac:56:ab:53:ab:7d:0a:b2:
8e:c1:bc:69:23:51:f1:ac:56:72:00:62:95:d1:51:09:91:0b:
0a:ab:a2:6b:0b:1c:f2:f2:47:81:ac:f8:47:68:8e:e1:43:76:
f9:c9:a5:85:de:56:60:fa:f1:fa:8a:4a:7d:91:a2:7d:ba:9c:
12:54:8e:97:a2:f8:c4:7e:38:0a:1d:ec:3a:7c:86:b0:57:3e:
c2:8d:ce:f4:29:b6:9a:68:aa:e2:ee:7a:68:8b:11:cd:8a:be:
eb:9c:65:73:d2:57:5d:92:12:7d:c2:66:61:f8:6b:ac:bb:9d:
16:27:71:37:7f:b6:26:99:f8:38:b8:19:4e:b8:57:d3:65:90:
ad:84:5d:b8:30:f8:58:89:e8:43:ca:8e:4c:6b:f5:7c:a9:d8:
7c:1b:3e:48:89:43:c6:62:4a:00:ce:ec:12:91:dc:da:34:a6:
fe:48:42:e9:fd:b6:9c:44:e3:16:68:ec:e7:74:e5:fe:44:49:
6b:da:e8:71:8b:e2:bb:a3:7f:96:70:9b:31:87:d4:cf:a5:14:
f6:6e:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:37:43 2026 by rpki-client