Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: xeZyz1GaTD19Oe5/yO6a+iJ265CLS9VckmxAog1JgGo=
Subject key identifier: 92:9C:DB:CE:B5:A4:E3:21:8E:12:02:BA:66:52:08:F9:30:57:FD:0A
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019CA8D88401A6B39F0F623E1F1E5E5A4537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 05F7
Signing time: Sun 01 Mar 2026 10:01:27 +0000
Manifest this update: Sun 01 Mar 2026 10:01:27 +0000
Manifest next update: Mon 02 Mar 2026 10:01:27 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: k9s/AoN76ekaD6pctrQxYsK4exogisz8G35OVWLrdfM=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:84:01:a6:b3:9f:0f:62:3e:1f:1e:5e:5a:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Mar 1 10:01:27 2026 GMT
Not After : Mar 2 10:01:27 2026 GMT
Subject: CN=929cdbceb5a4e3218e1202ba665208f93057fd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:3c:48:f4:05:53:e8:81:56:47:17:b7:12:
e5:8a:4c:5d:7a:95:d1:e6:4b:1b:dd:b0:42:9f:35:
b9:bf:f8:df:91:9d:c5:d6:46:7a:75:3c:04:66:98:
cf:3f:27:cc:0e:18:69:4e:3a:16:f9:ec:da:c2:72:
e8:ad:4a:29:b6:1f:ed:76:b2:f0:11:f0:63:ad:73:
e3:0c:fa:88:f5:3c:48:0a:de:54:15:a0:9f:49:02:
5d:90:08:22:a3:75:da:cd:b5:9e:29:dc:6a:04:f5:
23:e9:a4:96:9f:29:00:f7:d9:f9:f6:7a:65:2b:b5:
f5:9b:2b:aa:5e:a6:7c:48:aa:8e:b8:32:a4:ca:90:
e9:42:0b:87:78:7f:2c:a2:f7:52:ed:91:5c:ad:ed:
00:45:12:bd:d9:51:cc:95:14:ea:0f:af:41:7d:59:
92:9b:11:1c:b7:10:27:d0:2c:23:af:29:fe:27:ac:
8b:ac:f9:9c:30:67:82:3a:5c:42:eb:84:17:0f:ed:
79:dc:9a:fe:51:45:01:48:2e:bc:b3:c0:9e:30:6a:
12:db:43:9b:03:aa:5a:d6:b7:8b:8b:7b:ed:54:d8:
34:b9:b4:09:7d:12:17:e8:e2:53:42:0b:c3:0b:91:
a8:23:36:65:1a:6f:01:fa:b0:89:0b:77:f2:da:82:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:DB:CE:B5:A4:E3:21:8E:12:02:BA:66:52:08:F9:30:57:FD:0A
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cf:64:8c:fc:b9:b1:e3:a5:29:b1:42:55:84:db:5f:72:a4:
7a:e0:58:4b:9d:1a:52:97:3b:16:66:23:09:ee:89:81:a7:96:
36:6f:e6:ac:f1:b9:61:9d:28:6d:b0:06:fc:80:65:c3:ee:1b:
86:1a:ae:26:d7:da:a9:20:f8:02:06:60:bb:10:23:08:33:1c:
fa:2e:50:4d:21:79:1e:f4:cf:ec:92:5d:39:06:fa:e0:00:fd:
c0:40:e7:b1:00:38:a3:72:44:b8:68:d4:b4:20:07:01:b0:fa:
2c:ee:80:e1:f6:11:d7:cc:4d:f0:ba:39:dd:0a:86:cc:b6:b0:
c7:46:ed:a6:f6:88:6c:f0:90:93:4e:e3:62:e9:a7:9a:3c:4c:
6f:52:b8:ec:9b:5d:6b:5a:b4:ff:cd:1b:ae:44:3a:e7:a2:7f:
2d:59:d7:73:a5:d0:91:63:2f:30:b1:4f:ca:11:57:ee:26:18:
64:6d:59:08:d6:ee:81:80:cb:a9:9f:ba:2a:19:e5:6a:74:7f:
e4:6d:6d:89:e6:7c:26:5e:04:fe:a7:ca:13:60:f8:b9:fb:69:
ac:fc:ea:5a:5b:37:0d:91:54:d7:29:be:e3:ba:46:85:93:67:
89:97:b4:c1:85:a0:6e:d3:ae:a0:dd:80:18:91:14:f1:5c:36:
80:3f:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:36 2026 by rpki-client