Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: IPlPGMKrCBGmMLxZ7t+7AfrVKVJBuYbDNoXyBEwG/QI=
Subject key identifier: D6:3B:13:6C:53:C4:96:24:73:64:39:16:69:C0:9B:46:A5:E1:B9:A1
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 019CA945DDD6D0080F9D12C541A9A5FABD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0E74
Signing time: Sun 01 Mar 2026 12:00:54 +0000
Manifest this update: Sun 01 Mar 2026 12:00:54 +0000
Manifest next update: Mon 02 Mar 2026 12:00:54 +0000
Files and hashes: 1: UIv6jVS0p5268_XYhub9OHb_bA0.roa (hash: KT5y+HpZ43GmqDM+m5jLP788GzijAuuEants3+erKgY=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: TAcqrLMSyfAqmWbMfeQDfQChu/eck3jx4INL5wYzjyk=)
3: lP0Otoi5FEsx4Sjn_XQp3w7krL4.roa (hash: qcCySn5tj9h14UpAI2UnCKnAlV7VQfAi0DGrUD+71GM=)
4: v9kA4OCGrHclzg_4NvmtIc2Yk_A.roa (hash: tSlWesgG1ectPhUdMe7kuRGZ0HEk92YblgLL18UTzMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:dd:d6:d0:08:0f:9d:12:c5:41:a9:a5:fa:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Mar 1 12:00:54 2026 GMT
Not After : Mar 2 12:00:54 2026 GMT
Subject: CN=d63b136c53c496247364391669c09b46a5e1b9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:ff:77:9b:f4:05:c1:23:fb:08:cd:dd:a6:
6f:2f:c6:37:2c:c4:5b:69:d8:20:cc:75:fb:13:92:
d1:46:78:e0:53:e3:e0:4f:81:07:cc:78:f0:83:76:
70:fd:39:56:89:23:d3:15:a5:02:53:2d:0a:a2:6a:
29:43:a0:03:8b:8c:d5:d5:fe:b1:eb:9d:b1:2a:d7:
26:bc:51:4d:ab:e9:77:b0:a6:bb:fb:e1:d6:41:c0:
47:29:17:ea:6e:01:fc:b0:49:81:26:0f:3c:05:b1:
3f:41:16:8f:d0:3c:52:b9:d3:73:e3:8a:2a:12:46:
ba:87:c2:85:32:eb:3c:a6:fd:48:5d:b1:6f:82:aa:
c3:44:1f:3f:25:f2:ba:0d:2a:58:04:31:77:8b:f5:
b0:9b:b4:9f:86:a3:32:3f:a9:72:f4:e7:55:84:bf:
59:f4:df:ef:39:09:2f:7e:b0:b2:02:19:36:91:37:
b4:2b:db:c6:f5:b7:41:56:63:e5:74:4d:65:15:eb:
cf:c4:1a:81:87:f0:a1:7b:0f:46:05:79:c7:31:5c:
b8:1f:d1:5c:77:e6:3b:55:15:33:cb:31:a7:7d:d9:
a7:a6:33:da:4b:26:a4:9b:5e:fc:76:ce:d9:71:de:
ba:fc:ac:13:84:4e:77:b9:cc:d3:41:59:63:65:d2:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:13:6C:53:C4:96:24:73:64:39:16:69:C0:9B:46:A5:E1:B9:A1
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c8:75:bd:83:df:0f:35:81:85:12:30:3c:87:31:b5:5f:52:
85:4b:22:34:7b:8c:3b:e2:7c:62:95:be:e5:14:7a:f8:0e:40:
9f:62:65:ff:ae:5d:00:0f:58:2c:9c:86:ff:7e:d6:19:ca:ef:
d9:2c:73:23:92:dc:2d:c6:ab:8a:b5:d6:04:4f:a2:29:6f:57:
7d:45:5a:c5:5f:64:c9:50:84:c7:72:73:da:16:af:23:cf:73:
c0:cf:5c:9e:f4:d5:53:64:7c:51:89:a7:40:f5:5c:4d:c2:14:
25:1c:ab:98:58:97:39:eb:cb:c5:2b:18:f0:68:70:69:a0:35:
88:60:fb:97:c9:17:37:ca:7a:31:9b:47:71:3a:c5:f7:7c:a0:
af:de:1c:3b:bf:6f:95:35:71:28:a0:3c:da:3a:7f:24:ad:98:
de:00:c4:2b:9d:c5:f1:25:6a:03:e7:3b:44:44:e0:d3:04:f6:
62:71:fe:cd:5a:06:e0:85:d6:18:5e:13:d9:82:bc:02:8b:a4:
bd:17:58:51:49:60:1b:80:0f:6c:ec:db:53:9d:94:fe:97:94:
49:a3:ab:4e:b6:a4:94:72:e4:fd:0d:f8:1a:4e:76:00:fe:2a:
d2:cd:6f:ab:42:35:8f:cc:bd:79:b5:48:20:24:2e:db:e2:d8:
8c:1f:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:18 2026 by rpki-client