Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: FVXlCu9ObW0P5CYyzWrEAe7Fd99kxaCAqwvpUe6Yuck=
Subject key identifier: 88:F8:40:8A:2E:CB:0C:4C:5B:CA:98:F7:90:D8:8D:F2:71:C5:98:3F
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019CAB6BB25868C985444BCC04786054F471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 04A0
Signing time: Sun 01 Mar 2026 22:01:27 +0000
Manifest this update: Sun 01 Mar 2026 22:01:27 +0000
Manifest next update: Mon 02 Mar 2026 22:01:27 +0000
Files and hashes: 1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
2: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: hYJ0pKDAnpZJo6HKnGY7ODBbEfq66ZtL0GJYV83rDkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b2:58:68:c9:85:44:4b:cc:04:78:60:54:f4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Mar 1 22:01:27 2026 GMT
Not After : Mar 2 22:01:27 2026 GMT
Subject: CN=88f8408a2ecb0c4c5bca98f790d88df271c5983f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:54:80:46:1f:51:4e:a3:4f:69:e2:99:82:
5c:e3:cb:43:c7:cd:fb:75:42:0c:5e:25:9d:00:2f:
a1:94:12:99:0c:05:75:3d:51:15:c7:aa:cc:e1:75:
49:7a:79:6b:c3:6d:ce:81:fd:e9:5b:8d:97:b5:ca:
dc:6a:65:d6:1e:0c:2f:9d:ed:3e:5a:e6:6c:25:e4:
db:b5:32:7b:25:96:e9:c2:6f:6c:6d:9d:5a:f8:e2:
66:ac:21:69:8b:8f:51:94:d9:85:a9:fc:eb:94:00:
28:07:45:bb:c1:ca:0f:6a:e7:ed:f4:7b:cb:a1:03:
74:aa:fb:c4:fd:56:d6:2f:08:48:c9:1e:28:cf:83:
27:eb:14:e6:2b:aa:68:ad:c5:0c:ab:85:0b:46:2d:
43:52:73:72:c2:b2:d5:56:2d:95:50:49:2b:10:4a:
8d:5a:43:b6:fd:b7:9a:f9:5b:2e:97:ef:1a:3a:34:
24:e9:ce:7e:ca:91:a1:06:89:78:b7:46:0f:17:44:
97:9b:5b:6c:ff:6a:33:5e:ad:85:2d:3b:03:94:9d:
81:dd:c7:d9:84:f1:30:9a:db:a7:26:0a:78:e6:07:
03:49:c4:84:a7:8b:7f:1b:cc:de:c5:30:25:65:39:
ca:8b:97:96:fc:e4:b3:f3:64:46:1d:b8:a3:30:53:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F8:40:8A:2E:CB:0C:4C:5B:CA:98:F7:90:D8:8D:F2:71:C5:98:3F
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a2:d0:f3:d5:74:7f:31:8f:7e:39:bd:c9:8d:5e:69:ef:57:
aa:d3:b6:a3:be:0f:19:c0:c4:73:a8:c6:6b:56:bf:c9:83:d7:
4c:6b:a2:37:7c:c5:6b:3a:5d:69:80:54:47:41:81:25:3b:b6:
12:e8:c8:c7:1b:d6:3f:9c:cd:cb:88:34:60:68:50:d4:b8:8e:
d2:1d:20:b9:99:00:72:59:9d:7b:25:e8:ee:63:91:05:6a:e2:
06:5d:83:50:a3:3d:3d:e4:c1:70:c8:f6:05:00:84:d6:09:66:
76:b9:f1:fa:38:aa:11:d3:01:05:9e:47:fa:22:56:20:d4:87:
b3:e8:fe:42:b0:2e:27:fe:1c:96:d4:82:ff:55:63:92:04:7b:
ad:16:56:cc:92:6c:a4:19:67:ab:4b:58:aa:9a:50:f8:68:df:
6a:37:09:82:93:6a:7c:bf:98:2b:aa:72:f4:38:7a:cf:b1:03:
47:38:73:c9:50:b1:b1:ad:af:74:9a:84:77:7e:b6:95:5d:d5:
50:74:26:49:bb:78:30:56:4b:10:b3:a1:a8:21:88:06:a1:6e:
3d:34:c2:8d:55:9f:18:b3:b5:3a:cc:da:25:60:4a:67:d3:b4:
14:b3:0a:b2:b4:a0:d3:fe:68:73:a5:15:04:9d:43:5c:92:3f:
7a:a0:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:26 2026 by rpki-client