Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
File: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft (raw, json)
Hash identifier: xZ/IHL5Fra78l3buZt8KhRWNr+gFVHBfOiJeb5Nw7d4=
Subject key identifier: 64:92:3E:68:D7:63:74:39:3C:A3:A0:4E:1A:A9:E9:16:D2:53:32:46
Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Certificate serial: 019CAD22555AEAE77C265D8202ED4791F6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
Manifest number: 1568
Signing time: Mon 02 Mar 2026 06:00:34 +0000
Manifest this update: Mon 02 Mar 2026 06:00:34 +0000
Manifest next update: Tue 03 Mar 2026 06:00:34 +0000
Files and hashes: 1: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl (hash: ULY3IJfyesp+DvfsL+K2Qpt+YWmXF6D5TsayIrfAcUg=)
2: n2cwiplK4QxCrTwGBHLplO2ULeU.roa (hash: 7aeKHzASb9QXAHN2dhVECcGoHU8aQKfp4EYYcWeuYiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:55:5a:ea:e7:7c:26:5d:82:02:ed:47:91:f6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Validity
Not Before: Mar 2 06:00:34 2026 GMT
Not After : Mar 3 06:00:34 2026 GMT
Subject: CN=64923e68d76374393ca3a04e1aa9e916d2533246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:56:2f:5f:d8:38:71:8e:90:98:35:73:45:
b0:a1:ce:52:90:47:a6:a7:76:ec:30:2c:bb:e8:fb:
bf:b0:cf:bd:4e:e1:11:8d:4f:41:cf:52:79:e3:44:
6d:bc:c3:28:d5:8b:4f:b6:dc:1c:c5:b2:54:32:bc:
03:f1:e0:9e:ef:a6:54:a0:79:b4:fd:e8:33:67:4d:
a7:35:34:6f:1e:d2:e9:be:86:ca:ab:60:7c:2f:40:
f4:a6:78:77:42:f6:af:a6:b3:91:c9:54:46:5c:c3:
50:31:b2:8a:bd:1e:76:8e:b1:ae:fa:7b:af:41:57:
c4:ba:32:db:4e:fb:6a:a1:e8:11:f3:a3:05:a5:c7:
66:ed:97:f3:a8:05:a4:60:6c:d2:2d:c8:b3:db:08:
47:b9:44:81:33:7d:26:62:27:8b:c6:27:c6:c9:51:
3d:85:56:35:22:00:15:fa:b0:12:a8:53:a9:9a:b1:
d9:1d:7b:65:9d:1f:14:e9:6f:67:4c:45:54:86:77:
9f:3a:6e:89:af:6d:b5:1b:8a:65:81:f1:31:fe:86:
fd:1a:30:6a:57:a0:1a:49:09:2e:5b:e8:6d:62:a0:
82:eb:75:d8:fb:7e:ab:cd:00:e7:73:be:62:46:96:
65:0f:7b:8b:13:c2:cb:ae:f8:37:c3:ce:80:b4:0d:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:3E:68:D7:63:74:39:3C:A3:A0:4E:1A:A9:E9:16:D2:53:32:46
X509v3 Authority Key Identifier:
keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b7:39:8f:b2:14:23:64:b5:fe:cc:4e:d1:cf:9f:a7:a0:35:
c8:90:4b:6a:a8:8f:f2:a3:bf:2b:74:02:ec:91:b4:60:e8:74:
78:19:95:c7:8d:19:66:38:41:98:59:8d:d7:4d:60:89:04:65:
93:85:ec:a8:dc:21:a1:ec:54:af:90:d3:8e:8f:7d:43:ae:88:
de:02:37:cb:1d:1c:94:30:9f:ca:60:10:46:d0:16:4f:9b:8c:
b8:21:25:96:7b:a6:0c:25:0e:64:86:8e:e4:2e:5c:73:d3:e6:
e0:f0:ed:72:97:77:f1:11:20:86:2b:32:85:50:b3:cc:60:fb:
fe:47:38:43:fe:8a:40:fe:c1:9f:9e:d5:20:d4:e5:4a:bc:fa:
39:44:93:ba:b6:cc:47:f7:d9:87:8f:c5:52:98:f9:9c:db:aa:
d0:d8:ee:d7:b8:4d:53:cd:6f:88:44:4f:a9:b5:1e:77:89:d9:
1c:f3:83:01:d3:58:fe:f8:8f:d8:ef:21:b8:00:98:2e:86:da:
d8:2a:ab:a0:4a:eb:ea:d4:c5:dd:18:b6:2f:52:18:69:b8:19:
b1:b7:c2:c7:4d:1e:85:a0:79:c0:d3:a6:54:d8:1d:a7:2b:93:
a2:e3:74:24:2d:2d:42:21:14:97:67:81:d5:cd:23:48:bb:59:
83:0f:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:20 2026 by rpki-client