Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: RbsiojrySyeTJYehZP9CZ/OK7qlAAYMNv+z7+wVdrDo=
Subject key identifier: FB:1F:ED:8B:9E:07:D9:70:C1:05:B4:CB:AA:B1:C0:E4:EF:3F:4E:DF
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 019CAB6B1B3F671257C3BC5824381728943C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: K7imHnGp5a0GZEXjdJA9ycC0yM0.roa (hash: WpPn3I2nrpKd+2H696eaEy1UwnJ6zYF2icMGlpKEWrE=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: oJxXbT7X1q08EHSlr5MpvDX4AD0bgLO6YI9fsAG4whs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1b:3f:67:12:57:c3:bc:58:24:38:17:28:94:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=fb1fed8b9e07d970c105b4cbaab1c0e4ef3f4edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:5a:c2:a6:02:a2:87:25:66:b3:ae:44:03:
11:a7:98:ec:9c:77:83:27:cd:7f:0e:4a:ef:2f:e5:
65:bd:2a:7a:49:5d:9f:06:a6:7d:d3:08:3e:91:5a:
f5:d7:ba:ce:0f:e4:e9:9e:74:41:03:a1:1c:40:0e:
a8:4e:70:fa:08:7e:52:b9:42:f7:80:13:fb:04:7a:
99:b9:62:3a:d8:92:ac:81:d4:13:f0:ec:e1:5d:5c:
e7:dd:64:e0:48:ed:59:88:85:e0:20:f8:22:b6:13:
68:6c:c0:60:aa:0f:c9:4d:f9:b7:7c:83:bb:8d:58:
c4:0f:75:78:15:aa:23:56:5a:e0:e1:35:c0:24:44:
0f:a9:ee:7a:55:e6:9e:f4:fd:36:8b:f5:53:3f:65:
be:16:b8:c2:7a:44:ea:98:7c:4c:f0:05:08:ca:c5:
90:3c:fa:60:2c:3e:d3:b0:52:1a:50:4a:2e:23:5e:
a3:6d:8b:9b:8e:f9:f6:69:9d:b1:fe:6e:a5:2b:ce:
eb:57:47:63:b4:14:e6:c0:2c:93:80:61:b6:eb:6f:
40:48:ba:2b:0b:c6:64:e1:ab:9b:7c:4c:3f:52:52:
0a:58:dc:36:65:ec:27:5b:b6:e1:bc:80:e5:65:a5:
85:42:30:63:13:6c:88:f2:05:57:b0:5f:10:a5:bf:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:ED:8B:9E:07:D9:70:C1:05:B4:CB:AA:B1:C0:E4:EF:3F:4E:DF
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5a:59:ed:4e:2f:ff:b0:f6:d5:7a:8a:69:9b:3d:93:d7:06:
64:29:cc:66:32:ba:07:ca:98:e8:61:10:52:9a:a3:b3:f0:f2:
f7:fe:f7:92:4d:9f:0e:d1:0d:7f:c9:17:1c:d3:3e:49:db:4c:
72:af:a0:de:2d:59:66:d4:5d:b4:a7:e6:3a:49:35:e1:fa:26:
da:f4:10:3e:39:d4:3e:4a:53:cd:42:cf:57:87:2d:cb:7c:9e:
99:93:8b:f6:51:0d:1d:bb:17:14:f1:d1:2e:2d:4c:b6:8a:63:
9e:f0:85:08:ee:f8:d9:6d:ec:29:16:0c:da:d8:85:59:a3:36:
2c:5a:e1:1c:09:85:c9:b1:07:b1:9d:8c:55:ea:3d:49:5f:ae:
25:4c:2c:3e:ef:e9:58:78:a8:f7:7b:f5:d7:4a:a3:12:6c:4b:
aa:2e:ee:a0:e2:52:e2:46:10:fa:a7:4b:1f:e2:72:8a:e1:b4:
3e:70:3f:f8:29:19:06:1b:01:63:b3:80:ec:d3:c6:6b:96:90:
e6:58:44:8a:eb:fe:c8:c6:e7:11:97:e4:60:ed:28:6a:15:fe:
30:91:9c:aa:c1:99:c3:ce:e4:48:85:35:21:e2:f4:6d:57:4b:
a9:d5:f6:90:db:e4:78:a6:69:c9:b0:98:2b:98:90:df:8c:a6:
82:ff:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:20 2026 by rpki-client