Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: +DOejWZtoKhl0Kkllhhgd3KNH2EwDR6z+Kpv4HSE4cg=
Subject key identifier: 9A:55:B9:8E:19:15:AC:BA:1D:B5:DD:67:76:04:CF:9C:51:29:E1:61
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 019CA9B37C4C177D7E961D8D0B04D6C5E4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 14:00:38 +0000
Manifest this update: Sun 01 Mar 2026 14:00:38 +0000
Manifest next update: Mon 02 Mar 2026 14:00:38 +0000
Files and hashes: 1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: bk0QMiihT4Jc9tYTLuujZsdxNK/hazFrly10r4vvYaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:7c:4c:17:7d:7e:96:1d:8d:0b:04:d6:c5:e4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Mar 1 14:00:38 2026 GMT
Not After : Mar 2 14:00:38 2026 GMT
Subject: CN=9a55b98e1915acba1db5dd677604cf9c5129e161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:37:ef:6e:49:44:08:c1:e5:38:53:0b:fb:30:
d0:74:5a:93:d8:c1:8c:38:a3:18:10:34:7d:dc:3b:
2d:96:e4:f7:3f:d7:17:b2:14:9b:89:5d:d8:11:50:
dd:8e:7f:1b:b2:8b:80:bc:23:8d:e9:a4:ca:16:8f:
50:ee:cd:3e:55:ad:65:10:d4:7b:06:1a:34:f1:13:
29:04:a0:96:b9:50:8c:6d:22:fb:da:7e:d8:8a:f5:
54:15:f9:09:43:02:5c:58:6b:24:d4:f0:cd:6b:c6:
9e:49:e6:ca:32:57:4e:df:70:36:a4:74:40:1f:1d:
b3:cb:06:42:05:59:ff:8b:a2:c9:11:24:0b:39:53:
83:09:d5:e2:2b:dd:d3:e4:be:49:76:ca:a7:a5:8a:
23:a8:d0:b8:63:73:ce:77:df:b3:8d:f6:d8:9f:f7:
73:01:c4:62:19:89:1b:4a:38:b3:67:18:1e:5d:33:
f8:fe:e0:c4:50:04:4f:27:9d:74:fe:fa:71:8c:6e:
7a:33:6d:a4:82:01:fe:0c:9d:00:a4:89:22:65:3a:
02:b0:cd:2c:81:c1:7c:fa:b3:d3:a4:b2:8b:5c:9d:
4f:67:5d:59:5b:cc:34:b4:b9:3f:cf:46:1c:9d:52:
f1:8d:8c:13:24:d9:ce:39:e1:d8:90:c9:20:cb:6f:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:B9:8E:19:15:AC:BA:1D:B5:DD:67:76:04:CF:9C:51:29:E1:61
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:04:25:66:03:4d:a8:d3:13:da:53:27:d6:a2:04:83:c0:e3:
d4:5b:4e:d6:df:22:19:e3:43:29:ee:d6:69:de:67:54:95:1a:
a1:eb:88:99:a1:f2:06:74:c8:6a:f0:0a:9e:07:ac:51:3b:3d:
b8:3b:8d:16:c8:6d:0c:0c:6e:69:37:81:f0:2d:0e:2d:e7:0b:
00:21:70:71:67:50:bd:86:4d:89:4a:54:12:56:ed:b8:d6:38:
c0:c9:0f:32:18:51:af:ec:8e:dd:6f:8a:20:f7:6a:99:b3:05:
cb:87:97:0a:91:ec:93:7d:16:cd:3d:2b:c3:dc:dc:cb:85:f6:
2d:5b:3b:91:61:0f:40:77:a6:53:95:31:16:04:4c:1c:f8:25:
13:0e:f2:24:32:67:5d:be:f6:2f:3c:1b:60:d1:17:0c:ef:00:
1d:78:c6:ef:5b:ce:a6:a1:1e:10:b3:38:70:ca:75:0f:40:c7:
2c:7f:dc:47:63:3b:8f:67:0e:64:d8:9c:fe:65:cf:c6:21:e8:
3f:d0:82:21:7d:81:7c:0b:28:b6:9f:bf:8c:6f:75:fe:3a:e7:
fd:5f:eb:b4:5f:6d:5a:ea:6b:d4:19:c9:82:cc:ee:16:5a:af:
7c:e6:42:e3:9c:45:1e:1b:da:c4:4c:b5:a8:03:d5:35:40:49:
32:e4:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:00 2026 by rpki-client