
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File: j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier: kMlrzIiIstgR7z6tcFDFqa7U/apAF+mMFUsEdKqZuE8=
Subject key identifier: AD:BF:76:64:D8:C4:FA:29:89:19:66:24:B4:E5:8D:7C:F1:FF:EE:FD
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial: 019CAC46E2737B5BD20F928A2573460039BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number: 0791
Signing time: Mon 02 Mar 2026 02:00:52 +0000
Manifest this update: Mon 02 Mar 2026 02:00:52 +0000
Manifest next update: Tue 03 Mar 2026 02:00:52 +0000
Files and hashes: 1: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (hash: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=)
2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: t/ch1ZG//tMusBLGdoWz0wVE/0+zCplZfdHZimfKZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e2:73:7b:5b:d2:0f:92:8a:25:73:46:00:39:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
Validity
Not Before: Mar 2 02:00:52 2026 GMT
Not After : Mar 3 02:00:52 2026 GMT
Subject: CN=adbf7664d8c4fa2989196624b4e58d7cf1ffeefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:79:9a:1e:a4:85:fc:c9:0c:22:27:b6:44:
12:b9:69:a3:5c:c4:10:3b:90:35:68:21:c8:f6:0e:
83:34:0e:7a:a6:03:8c:55:2e:84:a2:b6:9a:51:f9:
b1:34:c2:ee:ea:b3:60:81:ee:bc:56:93:8f:9b:74:
5b:4f:61:44:f5:24:8c:39:9a:c0:6e:21:86:a4:96:
aa:50:8b:9e:71:29:0a:85:30:cb:f8:d8:af:d1:9e:
26:69:e4:69:c5:96:02:af:6a:c7:d4:03:8e:6a:a4:
46:ec:02:8f:bb:df:19:af:7b:b1:16:df:18:35:e5:
67:9b:6e:a3:45:69:ea:90:ae:a7:9f:3b:db:4c:f4:
6c:79:7e:d3:1e:77:f0:8d:79:cc:0e:9d:99:ca:cd:
46:85:3e:69:26:7e:44:b3:02:1b:a8:65:41:14:27:
41:4f:fb:ec:a0:da:85:1e:1f:24:2c:ba:96:85:0f:
ba:69:83:a5:52:49:e9:f3:f3:12:09:b5:1c:d4:7a:
b0:69:35:6d:78:ad:7e:6b:c2:b4:8d:85:e5:77:d1:
52:7f:e2:c6:7b:42:45:7e:83:9e:06:07:ec:2c:33:
9b:9e:50:a7:8d:96:da:9d:cb:21:0b:26:50:61:25:
42:b3:7e:1b:7e:ac:60:0d:a7:fe:08:c8:e3:1b:4e:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:76:64:D8:C4:FA:29:89:19:66:24:B4:E5:8D:7C:F1:FF:EE:FD
X509v3 Authority Key Identifier:
keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a0:f7:d7:5e:5a:dc:43:99:f1:4e:09:b2:8e:b2:3f:97:f2:
cd:bc:8a:e1:f7:a8:7b:73:b7:5b:2e:33:8c:ed:db:6b:2e:48:
ae:8c:8b:73:fe:da:dc:9c:c2:8b:bd:65:47:31:55:60:40:1e:
c4:99:b1:a4:b4:8d:85:01:9f:f0:5a:80:03:17:f7:59:88:0d:
9c:e2:7f:80:e5:e3:96:e5:c9:8d:19:df:4c:f5:9a:d6:47:a7:
1f:13:ca:29:76:e8:b0:37:64:6e:e9:28:fa:2a:50:9b:35:90:
79:eb:63:28:38:af:f2:54:fb:32:fe:de:29:02:83:a7:86:9d:
ca:f4:36:c3:e9:dc:55:ab:f7:ae:d2:40:47:1d:82:22:b1:22:
dd:58:07:ef:d6:de:d1:9d:e5:55:f0:f2:25:13:e0:77:7b:db:
cb:71:c0:72:80:fd:79:b8:93:37:0c:37:9d:19:e2:5b:1b:62:
dd:0f:8c:e6:fa:8c:16:31:9e:ef:f1:9b:4b:39:5b:1e:37:23:
ac:02:f0:01:ac:3d:1f:80:03:6c:e5:7b:66:d1:a0:ab:8d:ac:
89:28:49:8a:ae:f8:d7:0b:19:9a:57:a9:4d:62:af:9d:bf:e4:
32:d8:45:54:c0:fa:c6:34:ce:eb:e9:56:ab:0b:90:44:86:78:
cb:0b:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:26 2026 by rpki-client