Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: 3DPM6Q7LtuGp2GSogMGRgKfEjcVqOJW4fFlzEwnC10Q=
Subject key identifier: 47:D7:D9:93:CA:F2:4A:B3:21:48:11:4D:98:4F:24:EC:9B:AE:BC:1D
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 019CA94634D0C0D7E4E8633FC758CCAB4FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 04D8
Signing time: Sun 01 Mar 2026 12:01:16 +0000
Manifest this update: Sun 01 Mar 2026 12:01:16 +0000
Manifest next update: Mon 02 Mar 2026 12:01:16 +0000
Files and hashes: 1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: mHJz0Va+TfmVJ4gnOuaVp1ov5pnzpiRYkMe685jObIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:34:d0:c0:d7:e4:e8:63:3f:c7:58:cc:ab:4f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Mar 1 12:01:16 2026 GMT
Not After : Mar 2 12:01:16 2026 GMT
Subject: CN=47d7d993caf24ab32148114d984f24ec9baebc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:24:3a:9a:18:69:5f:f5:cd:ff:80:e6:07:
57:ce:ea:8b:aa:42:75:16:5a:29:37:ad:bf:14:3e:
ed:f4:31:4a:30:f2:bb:03:4f:94:cf:b9:4d:aa:f0:
eb:a2:d3:f5:b1:8e:0f:34:0e:d2:c0:2d:b0:1a:d4:
6a:1d:0a:20:62:46:01:1e:12:28:84:2e:3f:29:2d:
01:24:1c:d5:cb:c3:6d:95:44:b0:e0:70:4a:1e:ae:
2e:2a:f5:1d:a7:41:c6:e6:5e:e2:ba:b4:1e:a2:ec:
a1:da:0c:3f:01:71:78:3a:40:0f:92:4c:75:90:94:
2c:54:cf:8e:83:04:fc:65:10:86:a5:1d:03:25:6e:
21:91:06:07:b3:e2:73:39:58:e3:90:81:ad:1b:36:
03:fb:fa:dd:ed:18:f7:3c:bb:6f:79:2d:d2:33:12:
ff:c7:3b:e2:2e:e2:60:b1:5a:cc:31:e3:46:a4:8d:
d2:a3:d8:35:0d:1b:be:3b:b2:5e:c7:51:6a:c8:fc:
17:7e:b3:95:7a:f7:12:ea:d2:c2:d1:70:62:ac:85:
da:c1:1d:38:d1:5f:ff:f8:7d:00:65:0b:89:64:67:
7a:86:f0:c3:1d:58:94:05:0f:fc:a2:65:91:56:d7:
4f:54:ca:9e:a3:a3:0f:d9:74:a6:cb:84:32:5d:f1:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D7:D9:93:CA:F2:4A:B3:21:48:11:4D:98:4F:24:EC:9B:AE:BC:1D
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:71:43:07:d7:d4:94:01:cd:e1:77:af:ac:e0:69:55:99:17:
a4:ee:17:57:32:a8:c8:69:72:50:b4:cf:ff:46:76:23:04:ae:
88:15:7d:8b:d2:08:95:f9:61:33:73:fa:4e:8d:04:74:10:22:
be:3e:45:6a:35:ce:35:e5:9c:c5:20:3e:8b:67:3b:ab:0e:a3:
dd:6b:65:07:3d:a8:e1:55:ba:cd:43:59:81:60:41:98:91:89:
04:ba:55:67:0a:24:9f:d5:d6:38:c9:61:f6:78:04:42:0f:67:
40:09:63:21:b1:f1:99:97:7b:8d:00:10:cf:c8:73:0b:2d:09:
e3:08:10:35:85:bc:92:6e:a4:5c:42:eb:90:a2:9d:63:96:a7:
b0:92:65:93:ad:dc:6d:62:26:15:bd:48:1d:62:6c:d6:a8:a6:
e6:19:b4:12:b0:b0:d2:03:c9:30:56:02:de:d1:79:9a:4b:c9:
2b:6f:6a:1f:2a:06:45:f0:39:e0:f5:5b:05:4f:25:88:a8:13:
22:e5:55:55:8b:9f:56:04:21:67:a3:f9:b6:02:18:7e:bd:12:
d1:08:a7:13:46:66:68:94:74:82:fe:4d:91:54:19:9f:53:5d:
fa:a3:a6:ea:2a:ad:81:ca:bd:ba:4d:c5:61:3b:0d:6c:94:aa:
04:d0:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:40 2026 by rpki-client