Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: smu6wCnllxGgaPzUYKmCwXpEe8XAa/77n80IWPI4dvE=
Subject key identifier: 06:97:68:40:36:69:4F:4C:9F:E7:36:E9:AD:79:BD:AF:75:17:67:DA
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 019CAAC678868A32D0A527D0A996D1250319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:00:59 +0000
Manifest this update: Sun 01 Mar 2026 19:00:59 +0000
Manifest next update: Mon 02 Mar 2026 19:00:59 +0000
Files and hashes: 1: j20qybaMMnEffof95SNFhPW89PI.crl (hash: /W0v+YGljymFO+cVVVxEJRUM4xMt4kEyHk78yNHbIVc=)
2: yy7RjY9VjJxpv75GhAQEnVx8t8k.roa (hash: KHt8fJdWAUNtqMOeAAHu9NRYtOwOJC7Y60cmxx721z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:78:86:8a:32:d0:a5:27:d0:a9:96:d1:25:03:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Mar 1 19:00:59 2026 GMT
Not After : Mar 2 19:00:59 2026 GMT
Subject: CN=0697684036694f4c9fe736e9ad79bdaf751767da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:42:71:ae:e1:8a:53:4e:d1:08:b4:39:7f:
47:9c:eb:d1:05:e2:91:56:e0:ae:92:5a:90:06:ca:
72:f2:2e:7c:c5:51:ef:2b:e3:e8:29:1e:cc:78:72:
d0:23:ff:95:9d:75:e0:ea:4a:d8:ab:65:8c:de:d7:
f8:62:ad:3c:8d:61:a9:f1:f4:8d:cc:f9:27:84:5a:
be:f1:9a:5a:8e:0f:d0:5d:4a:56:d0:56:05:31:51:
42:d4:12:c4:fa:71:26:91:16:88:88:02:98:5e:4b:
cb:ca:04:7c:e6:01:cf:aa:5b:a8:56:bb:dd:33:ab:
34:24:4b:3f:26:9c:5a:23:74:91:30:83:46:67:a3:
01:fd:cc:24:81:bb:c7:b1:55:16:a5:e9:50:ae:27:
a3:27:9e:d3:c4:d2:c4:f5:87:66:76:92:65:79:f8:
25:32:0f:02:ca:53:d7:f9:4f:6c:3e:2e:85:26:2e:
5b:da:1d:26:7d:5a:db:75:f4:31:95:9d:b2:db:93:
55:ad:0e:cd:2c:55:2a:8e:be:44:69:25:97:a2:ec:
6f:be:ac:a9:89:8c:1d:b2:12:da:f1:2b:e7:4d:e3:
ea:41:97:35:9d:63:ee:fe:26:6b:1e:b5:aa:db:3e:
e8:d4:8a:3e:80:09:7b:36:88:fc:01:4b:4c:b3:53:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:97:68:40:36:69:4F:4C:9F:E7:36:E9:AD:79:BD:AF:75:17:67:DA
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:88:d4:18:06:3c:b3:5e:b3:c6:f1:da:0d:4e:d7:89:1a:b4:
a5:7e:be:17:04:4e:b6:37:96:99:9a:3c:a0:0f:91:36:8a:53:
86:b9:af:58:bb:ee:29:55:cf:36:03:5a:9b:04:9b:4f:4e:e9:
95:29:82:f8:45:6d:03:f9:33:1b:55:e0:f2:e1:89:5a:19:02:
80:61:b2:a7:c5:2a:df:6d:c3:98:84:5f:13:b7:94:1b:e6:bd:
f2:7e:b1:b1:14:7b:55:e0:63:1d:62:b4:da:7d:aa:28:0a:6a:
3a:11:9b:f1:18:bb:5e:95:ac:c3:98:5f:91:2d:58:d6:96:22:
48:91:da:1c:42:32:f1:35:a7:de:66:e2:db:46:31:77:bc:ec:
bf:d7:e3:11:0e:04:ab:84:df:54:a4:a9:3d:9d:08:a1:be:0c:
51:ed:01:05:f9:c8:6e:7c:1e:27:68:1e:26:23:68:ab:6b:49:
da:0f:f7:c7:6f:3b:c4:cb:88:fe:23:eb:d1:99:04:67:bd:d7:
7e:32:83:9e:46:7e:f6:f3:29:14:ce:eb:12:74:04:12:64:e5:
d8:8e:35:76:97:32:81:9b:fd:b1:8f:ae:a5:d3:1e:08:3c:7d:
ab:3f:77:55:c2:52:ad:9d:66:ff:f1:df:88:e6:39:cd:05:c7:
22:a3:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:30 2026 by rpki-client