Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier: cNm2bqJq6R2QL0Vk222Kd7knAy/aKTox+NEvx7DhraY=
Subject key identifier: 4F:68:5C:B9:DA:04:A4:4A:B8:A1:4B:FC:2F:B9:AE:C7:79:09:2A:51
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 019CADC809E13CD16AAE7211C0404557F3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number: 0C34
Signing time: Mon 02 Mar 2026 09:01:33 +0000
Manifest this update: Mon 02 Mar 2026 09:01:33 +0000
Manifest next update: Tue 03 Mar 2026 09:01:33 +0000
Files and hashes: 1: Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa (hash: 9nj7uwXDpwi4IaoN4BLsfOwzpOwzS34nmfQiM2vUZE0=)
2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: lsW3DTt518HpbHCET5MdrX1GBksWs0CLRnbdE6Vg+CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:09:e1:3c:d1:6a:ae:72:11:c0:40:45:57:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Mar 2 09:01:33 2026 GMT
Not After : Mar 3 09:01:33 2026 GMT
Subject: CN=4f685cb9da04a44ab8a14bfc2fb9aec779092a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:83:02:a1:b7:7f:71:ae:5e:da:ea:1b:a8:
e5:f7:d1:2d:44:4d:47:09:35:bf:a6:0e:d9:39:af:
13:31:4d:33:bf:c2:b8:93:ea:3a:e2:f9:f4:1c:a1:
57:eb:00:a5:2e:d1:8a:dc:ae:77:7d:4b:10:13:d2:
36:53:d0:5d:cf:7d:ee:db:59:4b:b9:eb:6b:33:fa:
7e:45:c5:28:f7:29:ed:3d:76:85:eb:f7:47:65:6e:
1c:c9:7e:8d:d6:b6:51:40:9b:e1:59:b5:64:d4:6e:
ad:ae:f4:2c:2d:f8:5e:6b:f3:94:1f:5e:d0:06:00:
4e:51:71:8e:c5:3b:81:b8:7c:5a:96:7e:03:bb:28:
75:82:d1:e6:25:af:52:80:25:ec:86:01:a5:d3:ca:
df:72:c3:6c:12:74:7c:6d:2b:72:a8:ae:6c:b2:6d:
92:44:8c:e8:1b:99:3d:c6:f3:3d:6d:6a:1b:ef:af:
fc:a5:9b:e0:32:de:84:d8:a0:ba:66:26:10:df:63:
37:58:a9:c6:5b:e6:c5:01:38:07:89:20:2c:01:5e:
46:e9:33:a8:43:5a:80:e9:df:d4:b3:e0:51:b5:84:
ba:02:35:53:92:b2:98:59:59:30:88:f8:ee:b2:24:
dd:3e:37:f7:14:b6:38:75:94:8f:15:cc:09:26:a5:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:68:5C:B9:DA:04:A4:4A:B8:A1:4B:FC:2F:B9:AE:C7:79:09:2A:51
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cd:cf:da:85:1b:13:bf:a3:04:65:15:6d:ec:99:76:60:db:
c5:bc:c4:b5:c4:90:bd:47:ab:97:7a:0b:7d:0f:b6:00:aa:e5:
9c:a6:63:c4:e4:6e:c8:1f:75:ec:f6:d3:82:76:58:23:99:c4:
c8:9b:5b:8a:1f:b4:9e:77:1d:d4:72:70:4c:68:77:f2:83:68:
52:f2:f0:10:10:ef:42:ac:fd:71:dd:6e:de:db:22:54:38:d7:
72:70:6c:c3:66:7b:b1:ac:2d:b9:d4:a9:f0:d2:a6:57:9f:27:
df:99:bf:ef:6a:b5:02:67:9c:47:f0:c5:4f:06:34:99:f4:a0:
6b:8b:b6:d7:1f:7d:63:b7:80:67:49:dd:2e:d5:8c:e2:69:46:
5f:24:ec:1d:7a:76:1d:20:d3:de:7e:4b:22:e9:3f:9d:30:a3:
ba:e1:fa:d8:ba:b3:93:51:b7:1f:37:1d:85:94:92:09:20:73:
63:4e:2f:61:8f:79:9d:d3:7c:4d:1b:10:14:30:3b:8c:6b:ee:
80:20:23:11:07:2e:00:87:69:18:40:b6:1c:ed:d6:4f:8e:09:
84:f1:61:66:09:a9:73:b6:93:6c:e6:26:e4:dd:b5:6b:db:10:
0e:de:3e:06:db:d7:59:fe:b1:00:f6:08:34:bf:88:29:61:53:
f3:d9:b5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:46 2026 by rpki-client