Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json)
Hash identifier: jy91yRjpFtJ2Axu8BFr6gfuA7HWmMPVx5r36dQzU7i4=
Subject key identifier: C7:87:BB:13:22:29:82:1E:6D:8D:A7:E9:B2:EC:93:B6:AF:98:CF:22
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial: 019CAAFD02E3368F439FE941D53C89EFE80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
Manifest number: 0FA5
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa (hash: gLzddFQSRg/+84Z04UYrdta+47qpL6E3gmNgoeRKLvI=)
2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: 5UPRuPGcsRBEBXTsK+U2xrOji2qM7KpFnqleWKgyjpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:02:e3:36:8f:43:9f:e9:41:d5:3c:89:ef:e8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=c787bb132229821e6d8da7e9b2ec93b6af98cf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:1e:f5:4e:e0:2e:61:2c:48:f5:f4:97:95:
3c:2d:a0:ac:d5:7c:37:d9:59:1d:4f:99:23:34:95:
ff:ab:77:a9:35:e8:e9:85:20:dd:41:6c:da:60:25:
33:e3:b3:bd:85:65:3e:95:0d:24:69:60:a3:45:52:
cc:b4:f6:a1:dd:8f:ec:bf:31:36:71:2f:82:86:f5:
b6:79:32:87:dc:e2:d6:3a:7f:26:f5:a1:cf:4e:af:
7d:9d:67:8c:5c:a4:67:3c:a7:64:85:ed:7e:60:08:
1e:5c:3e:7b:54:cc:a4:ac:c5:39:8e:d1:08:07:88:
79:f3:28:92:7c:54:c2:30:44:d3:55:0f:96:40:76:
d0:4e:99:5d:6c:06:d7:d0:e8:81:2b:c6:de:cb:40:
ad:b5:a1:e8:93:a4:b2:11:38:c1:4d:aa:38:62:9d:
d7:59:57:16:61:9f:42:9a:74:b9:a4:5f:99:8f:46:
51:1f:c1:2a:d6:5e:9f:d6:d9:a7:72:4a:2b:e8:2f:
0c:c6:e8:b8:3a:62:af:f2:0f:12:d6:8a:d5:ed:f9:
4f:14:6c:57:d3:87:96:d4:89:5c:87:47:ac:35:a3:
66:62:48:7b:ad:a3:ab:5e:90:3c:6a:9f:6d:7b:10:
40:ac:73:79:49:56:e2:c0:3c:2b:83:99:2c:8a:26:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:BB:13:22:29:82:1E:6D:8D:A7:E9:B2:EC:93:B6:AF:98:CF:22
X509v3 Authority Key Identifier:
keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d4:74:9d:4f:e8:1e:ff:3c:4d:73:29:cb:46:3b:a5:c7:c4:
c8:35:92:5c:33:af:91:00:a6:17:0c:4f:6f:00:5e:04:60:c4:
4c:07:2b:86:f8:a2:e8:d8:c0:6f:84:71:fa:c1:36:6f:91:fa:
49:47:d9:7d:44:56:3a:a4:46:58:44:9c:a6:e8:66:4a:21:9c:
ec:16:0a:6d:09:9c:64:86:35:9e:dc:9b:11:72:2a:27:d6:f5:
65:26:0f:ec:a6:8b:f2:31:8f:63:4b:d9:d1:12:27:76:23:56:
c7:30:a6:97:b8:08:17:58:c5:e3:91:e8:5f:1e:cb:e8:6f:37:
39:60:6a:cc:d0:c3:63:64:d7:9b:3d:b9:cf:55:91:e6:40:58:
79:a0:70:d2:4e:0d:35:2d:37:33:2a:d9:4d:43:a9:6e:50:2e:
b4:56:43:70:01:dc:bf:6a:15:12:02:cb:10:6d:e6:95:64:e9:
88:ec:6f:28:39:aa:71:40:52:58:83:6a:0d:39:e5:9b:c4:57:
7a:0b:8e:79:ba:a4:ee:4a:f1:a8:be:05:7a:38:3f:1d:35:08:
27:f2:f5:64:2f:54:9d:f5:86:c8:d0:01:e7:47:bb:d2:24:83:
98:79:de:46:e7:f6:11:53:a7:58:5a:12:56:91:d7:06:63:a2:
32:a1:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:06 2026 by rpki-client