Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: 6wGXieAUOqxyJtobt72RwEIfqVECeTKLL0gn85kO0kQ=
Subject key identifier: C7:AB:D0:B2:C3:4A:E6:8E:9A:AF:29:D9:5D:ED:5A:FE:D2:3D:82:82
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 019CA945A7A90B92ECCBE37744BCF4A96796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 1806
Signing time: Sun 01 Mar 2026 12:00:40 +0000
Manifest this update: Sun 01 Mar 2026 12:00:40 +0000
Manifest next update: Mon 02 Mar 2026 12:00:40 +0000
Files and hashes: 1: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (hash: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: oFAAfOrJLedm+O+Vz50LjY2LhpVYRw41vzS1XzG3YMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:a7:a9:0b:92:ec:cb:e3:77:44:bc:f4:a9:67:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Mar 1 12:00:40 2026 GMT
Not After : Mar 2 12:00:40 2026 GMT
Subject: CN=c7abd0b2c34ae68e9aaf29d95ded5afed23d8282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:83:a7:52:f4:7e:c9:bb:89:bb:b7:9a:5e:
f9:3d:68:10:7c:63:c5:b1:4b:64:98:6c:f7:75:3d:
17:2c:97:8a:4e:d0:6d:e7:53:27:60:33:3b:13:e3:
88:c2:20:b4:cf:84:54:7d:15:90:25:16:5a:29:af:
b6:de:e3:93:ac:ed:07:79:53:b2:da:f7:d4:2a:94:
18:22:b0:c2:a6:b9:45:94:86:a2:34:54:4c:4d:0c:
b1:75:12:23:d4:d5:88:33:fb:36:fb:a8:6d:8a:b6:
67:e6:fb:6c:68:0b:34:2d:3d:cc:81:05:1b:94:8a:
1d:00:f1:bf:b3:24:59:09:52:df:28:50:83:9f:66:
3e:90:42:05:02:af:ee:68:a4:f2:52:85:5a:76:c4:
15:01:24:1a:ad:f0:f6:64:d8:bc:ba:a0:95:b5:37:
91:d5:14:d7:17:95:2b:e5:ae:7f:2f:24:61:d5:9b:
35:bf:b1:08:33:d7:96:25:6a:a9:22:50:12:8a:e8:
6e:76:8d:19:42:24:1f:14:ce:85:69:d9:d8:9f:bd:
06:79:0b:d9:87:32:9c:42:bc:f4:6b:bc:a0:fa:3a:
3f:26:94:7c:e5:e9:db:9d:e3:0f:fb:65:5a:1a:a5:
14:dc:68:c7:3e:c2:9f:c4:81:7a:dc:3d:ef:c0:aa:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:D0:B2:C3:4A:E6:8E:9A:AF:29:D9:5D:ED:5A:FE:D2:3D:82:82
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fd:73:e9:98:f5:36:8a:7b:6e:9a:fd:43:be:4c:2b:a2:79:
17:bc:ce:98:06:e7:cb:11:b5:b6:ce:f3:24:b2:6f:f9:8a:61:
69:5c:91:45:ae:f3:c7:28:bc:89:f2:aa:12:11:55:ac:be:d2:
cc:49:a9:72:62:5c:17:e2:76:16:a2:3f:f7:a0:9c:5d:8b:82:
40:2e:b3:13:09:18:2c:f8:e1:38:3a:1a:7c:1f:5f:80:d8:40:
ed:05:d4:20:53:f8:d8:2f:72:60:51:ad:9d:2e:ee:a2:09:6b:
44:63:11:f1:a1:48:26:e0:dd:38:12:a7:8d:a9:1a:a4:df:aa:
ee:04:fa:a5:ed:8c:cb:02:07:8d:34:8b:41:4b:4e:95:fe:c1:
68:d5:df:86:5e:2a:fd:c1:b0:d3:fd:c1:f5:a8:8a:5d:98:35:
58:cd:33:fa:15:4d:69:59:45:8e:bc:44:26:9c:43:00:3b:e6:
5b:97:b3:54:13:d3:a7:f5:16:fb:8f:44:0d:42:9e:05:bc:ac:
72:0f:77:57:12:bc:d3:5c:e8:b4:c1:dd:49:49:fe:ef:ee:07:
cb:c3:d1:d7:f6:fd:69:83:01:53:96:31:8c:60:08:65:7c:35:
aa:41:0f:bf:20:16:16:de:40:c7:6f:a8:b1:ed:88:7b:2d:c5:
fd:49:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:15 2026 by rpki-client