Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: 1Cyd5dNe5ns0CBDedViExZgkUAD1Sy33JoA22vTqu4c=
Subject key identifier: EB:52:06:63:8D:66:44:10:68:A9:9D:0A:67:2A:7B:6F:26:68:F3:DC
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 019CAC474BFADCF6C30DD4771843C8AE19AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:01:19 +0000
Manifest this update: Mon 02 Mar 2026 02:01:19 +0000
Manifest next update: Tue 03 Mar 2026 02:01:19 +0000
Files and hashes: 1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: MbjdFDjRYWt3LWBs3UReas6nYAnljAX4AJNr5Z8LqXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:4b:fa:dc:f6:c3:0d:d4:77:18:43:c8:ae:19:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Mar 2 02:01:19 2026 GMT
Not After : Mar 3 02:01:19 2026 GMT
Subject: CN=eb5206638d66441068a99d0a672a7b6f2668f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:be:97:14:c3:61:8d:13:e5:a1:8d:f7:47:
11:b1:c5:70:f3:51:03:6a:e0:00:29:e5:09:d1:77:
25:b7:6f:70:61:cc:23:b6:bb:8f:0c:b1:21:b9:ad:
fe:77:f9:b4:c8:0d:63:35:c5:00:81:b8:4d:f3:91:
f2:d4:9d:9f:24:49:16:09:61:e3:ed:d4:53:c2:b6:
3c:67:20:56:27:cb:97:f8:06:bf:09:14:d2:9a:f4:
cf:4e:9c:84:35:59:7c:f2:e2:e3:16:7d:93:0d:2e:
52:37:c7:f8:3c:f7:fc:b8:0c:68:8e:e3:6e:50:c8:
fb:a5:66:dd:86:cd:c0:60:34:63:f4:28:c0:53:95:
2b:5d:98:52:31:1b:0a:b2:c1:2a:52:8b:98:58:2e:
57:d2:be:e1:57:7a:01:95:75:5a:9b:45:85:af:d5:
9f:8c:64:6e:07:58:fc:e3:06:1d:bb:a5:73:ba:70:
24:4f:96:8c:8e:86:46:da:dd:85:03:38:8a:9c:55:
e4:30:a7:2a:cb:4f:ca:9c:87:31:a8:8c:cd:1e:cd:
6a:66:4d:b8:ab:92:c2:f2:a6:d1:95:b3:9f:bc:23:
85:14:ec:c9:fa:c6:72:6c:e5:5c:20:84:ec:c0:22:
e4:72:e7:ad:7f:00:59:85:39:da:cc:1d:a2:72:30:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:06:63:8D:66:44:10:68:A9:9D:0A:67:2A:7B:6F:26:68:F3:DC
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:fa:6c:d2:7a:28:f3:91:6c:ab:8e:9e:1d:01:50:79:7d:
4d:da:05:76:4b:9b:ee:25:17:85:38:fe:2e:50:25:21:f7:df:
b6:7d:e1:f4:cf:37:ef:3e:d1:ab:cd:31:af:81:26:7e:9e:33:
9f:4d:3d:f7:68:02:4a:e6:3b:6a:6d:9f:5d:7f:f9:a7:87:dd:
e9:e7:7e:e8:3e:5e:47:44:d6:bf:ac:b9:34:2f:4d:5c:1b:3d:
73:9f:3a:57:fd:40:24:cc:3e:0a:61:bc:e5:21:f3:2c:be:bf:
be:2e:63:2e:56:11:6c:00:d6:14:17:ba:e3:b1:69:77:00:6d:
97:fc:16:bd:03:65:87:0b:dd:41:cc:86:5f:65:7a:bd:e6:07:
bd:f5:10:c1:9e:4e:02:8b:ea:73:fb:08:b5:60:74:0c:6c:1e:
9f:3b:ad:d1:30:7f:14:e7:df:db:9c:d2:83:3a:2d:2d:35:2a:
12:45:27:66:b9:9f:4a:d0:47:65:75:21:fc:c9:73:3e:5b:0b:
24:c2:cd:02:9f:8b:db:97:18:77:29:a2:da:01:80:87:4e:a5:
5c:04:4e:e7:1e:ce:7c:05:39:90:8b:80:93:da:7a:f9:02:f7:
10:1a:77:f0:42:96:82:8b:af:35:6c:4c:3e:6a:c0:c8:2c:b4:
6e:8e:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:12 2026 by rpki-client