Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: 9/nqhzXGUPmLcV/dDKTbuKj2m3NJfZpfdXjMWo30XNQ=
Subject key identifier: 3C:D2:80:48:DD:16:CE:02:21:99:92:BE:B3:83:F5:01:8C:67:7F:F6
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019CAB341DB3192891C5CAAC95DA3DB9B4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:45 +0000
Manifest this update: Sun 01 Mar 2026 21:00:45 +0000
Manifest next update: Mon 02 Mar 2026 21:00:45 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: DejVEvAaglksJiC6+kCo7eC+DieSpWxKQucdlV5931U=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:1d:b3:19:28:91:c5:ca:ac:95:da:3d:b9:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Mar 1 21:00:45 2026 GMT
Not After : Mar 2 21:00:45 2026 GMT
Subject: CN=3cd28048dd16ce02219992beb383f5018c677ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:01:4d:ed:00:68:60:89:24:ca:f8:57:f0:
7d:d6:35:58:e5:24:e5:f3:49:a6:ab:43:ca:67:81:
32:4f:79:99:5f:bd:b7:bf:44:dd:01:97:e4:dd:63:
5a:e1:05:41:b9:d8:2e:d0:da:76:46:a3:a6:1f:66:
4f:16:25:32:7d:63:65:75:10:a9:11:1b:9a:cc:7d:
0b:c4:01:dd:7a:ee:53:1f:b2:64:60:25:bc:40:0e:
df:fe:7e:74:5b:3d:7b:c5:5d:30:8b:33:d7:6d:fe:
d5:0f:d8:69:16:79:77:3d:8c:92:84:89:95:9c:35:
5d:9a:f4:6e:1c:e6:2f:a0:f5:e2:b4:a5:8d:1c:9d:
10:11:03:9d:04:c3:e9:bc:9d:ec:22:cb:5a:8a:61:
86:fe:9c:40:90:9b:71:bf:09:d5:9f:3b:ae:20:c3:
48:66:b5:af:dc:e5:c9:cc:7c:91:d3:33:9f:fa:fd:
33:7c:72:80:4a:7a:d6:fb:ee:d1:65:48:9c:ac:e3:
9b:45:41:c0:20:2c:5e:53:80:00:ef:70:2f:34:86:
e6:2e:aa:9d:a1:70:98:7f:36:91:a4:69:dd:b7:61:
d0:44:53:3a:1e:dc:60:0f:1f:1e:2a:0a:7a:d0:c1:
34:e1:68:f0:00:44:9f:00:ef:ef:36:ed:a6:04:d9:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D2:80:48:DD:16:CE:02:21:99:92:BE:B3:83:F5:01:8C:67:7F:F6
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:47:8f:94:2d:5c:18:14:a4:ef:19:9b:ed:4b:14:60:df:3d:
f0:38:cc:bc:f2:7d:bc:58:cf:5d:c0:5b:98:6a:60:52:26:51:
01:bb:4d:ab:b4:f9:9a:70:85:ee:dd:50:bb:f1:bb:31:fe:7b:
f4:30:22:f7:69:33:32:ca:ae:0e:6b:17:fa:40:b0:40:2c:63:
ce:e2:e6:b8:57:7c:d0:9e:b9:58:7e:32:cf:58:2c:36:5d:ad:
80:f6:69:3b:eb:e2:f1:e4:1b:a1:5a:6a:49:1a:ba:5b:95:75:
d9:a5:dc:50:f4:62:6b:3e:cd:09:ac:8a:76:76:29:32:ac:5c:
4d:21:3e:70:b8:04:ad:5e:3f:07:a6:cf:61:a2:8e:1d:d1:aa:
2e:c9:0c:45:cf:06:d4:47:2d:c5:90:98:cb:82:c3:71:86:d3:
6e:51:03:e1:63:d2:f8:ce:b4:ef:ae:82:1c:21:77:de:3b:c0:
6b:ad:62:75:e1:3b:02:bf:d3:5c:56:28:62:9a:b9:71:23:52:
be:7b:f9:db:cb:d0:56:5a:10:b3:7e:84:4f:e5:17:9b:dc:ca:
08:5d:c1:ac:7e:30:60:5a:c8:fa:15:e0:53:0b:bd:d2:17:2f:
84:ec:3e:50:af:b3:48:80:f4:c1:87:60:a7:0b:5e:ab:bc:57:
db:a8:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:49 2026 by rpki-client