Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: cRqk23RPvZv1qlto7Cw2kU2GXU55Wdc7OSkfzB84Cig=
Subject key identifier: FA:D2:76:EF:77:D5:41:9B:4C:F1:65:D9:A0:7A:84:92:07:E1:40:4E
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019CACB4E1FA2EAEFA217CD54047A7CCC2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:01:01 +0000
Manifest this update: Mon 02 Mar 2026 04:01:01 +0000
Manifest next update: Tue 03 Mar 2026 04:01:01 +0000
Files and hashes: 1: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
2: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: EWufchXc/reJ+yQMqvYUTehWxY7IWZ97tkSwUfhblI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e1:fa:2e:ae:fa:21:7c:d5:40:47:a7:cc:c2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Mar 2 04:01:01 2026 GMT
Not After : Mar 3 04:01:01 2026 GMT
Subject: CN=fad276ef77d5419b4cf165d9a07a849207e1404e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:fb:9a:50:68:37:84:a9:c0:bb:fb:2e:d4:
8e:38:70:8a:27:83:af:03:a3:94:22:d7:a9:75:43:
3a:1a:9a:bb:37:22:6b:3a:59:45:a9:f0:96:49:26:
e0:8c:35:40:18:56:0e:b7:a8:cb:79:8f:2a:8b:6b:
55:d5:49:ed:44:9a:56:e1:df:14:8d:4d:ca:15:e5:
77:a9:08:3f:b1:ae:f3:1a:bf:a1:f0:c3:89:92:90:
21:27:2a:c4:e7:3e:62:11:cd:ea:96:10:08:a5:f7:
00:e3:38:1c:65:4c:0e:9a:d9:44:66:45:94:87:f2:
87:04:ca:07:d8:a7:7e:c1:1c:f9:32:cd:21:f8:af:
bb:25:a3:81:33:94:5a:db:cb:b5:c6:f5:c8:f0:f4:
98:fc:a1:fa:26:6c:03:f8:98:13:9d:5f:65:41:15:
97:4e:1f:ad:f8:d2:0c:71:17:09:70:a5:81:79:41:
c9:5d:a2:60:2b:25:6f:97:a5:ce:bd:08:e3:db:ff:
9c:5a:aa:d9:43:54:b7:a2:53:63:58:bd:ee:48:0f:
0e:5a:b7:82:83:6a:77:5c:4d:ec:0c:70:b2:05:2e:
4a:9c:50:60:b0:bd:36:25:fc:58:91:b0:da:e9:3a:
22:72:1e:2d:83:21:98:d6:14:ae:ee:ef:45:63:f5:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D2:76:EF:77:D5:41:9B:4C:F1:65:D9:A0:7A:84:92:07:E1:40:4E
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7c:07:80:d0:32:15:ea:cf:72:b9:db:d6:67:b5:f7:ae:6c:
2c:40:d5:1c:e4:c3:50:01:47:1f:cc:bc:d7:9b:c8:9a:71:fb:
1a:38:20:c5:7c:05:0a:5e:27:08:af:55:97:68:c1:ee:97:6d:
f7:27:4b:df:a7:a2:6f:e2:3b:d2:29:57:88:16:a9:92:6f:a3:
f0:2e:49:38:60:9d:0d:cb:5c:75:47:fc:37:1d:cf:ed:d2:ee:
48:80:bd:1a:18:f2:b4:53:03:7b:46:21:fc:b3:c0:c3:18:92:
fe:02:1b:cf:06:12:0d:c7:4a:e5:b8:6b:1e:ee:59:ca:7a:15:
c2:3a:6c:03:e0:2a:94:9e:b8:a1:22:5c:5b:7a:c8:d6:4a:60:
0f:ba:97:50:51:84:16:26:c4:9a:20:2e:34:e0:09:bb:85:c2:
48:92:ca:24:82:38:db:1a:58:49:d0:a6:de:31:48:ff:e4:ec:
ce:ae:1e:d7:a3:00:e5:b8:76:96:70:ab:a2:b8:69:3a:fb:74:
85:db:af:40:8a:6b:8a:a9:26:e2:39:36:5e:ff:f2:7e:2d:2d:
c4:82:1f:69:ee:14:77:7f:e7:2a:fa:47:90:6c:bb:53:cc:cc:
4c:1d:69:83:01:f7:94:94:7e:80:44:23:3e:b7:4f:d3:76:a8:
90:e0:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:27 2026 by rpki-client