Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: VcSD1l+Hjskvrw1nkmSrTLQZRE0n7S+3y5rNMx+yfYA=
Subject key identifier: EF:C6:F6:3C:8B:C3:35:02:8F:C6:94:82:E4:F2:01:FD:E7:20:DA:88
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019CAA58C27EBC8C413536B3A6B86B2E6DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0D76
Signing time: Sun 01 Mar 2026 17:01:09 +0000
Manifest this update: Sun 01 Mar 2026 17:01:09 +0000
Manifest next update: Mon 02 Mar 2026 17:01:09 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: OiiT8L85WEoCK9D34P2dBu9jRGY8no45mf2pBiVF8fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c2:7e:bc:8c:41:35:36:b3:a6:b8:6b:2e:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Mar 1 17:01:09 2026 GMT
Not After : Mar 2 17:01:09 2026 GMT
Subject: CN=efc6f63c8bc335028fc69482e4f201fde720da88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:fb:7a:ac:7e:93:81:0e:3e:43:01:3b:54:
82:e7:ab:ef:3b:d2:8b:02:e6:f7:6f:4c:aa:5a:e6:
59:c7:e7:0d:85:07:a8:d9:e1:8b:00:7f:75:f1:f0:
10:20:e6:18:fc:fa:fd:12:ac:ee:b3:59:0a:da:c3:
18:88:f2:87:2a:b7:71:a9:68:38:37:da:85:16:16:
cf:2f:d1:8c:dd:2c:47:e5:df:0f:8f:4f:03:f5:d0:
7d:ef:0e:e0:6e:e4:13:c4:b6:96:1f:d9:ca:c6:15:
7a:c1:f1:8a:ed:40:ca:e8:74:a6:a9:54:26:d4:e8:
8e:05:e4:f1:13:a4:a5:10:41:3a:74:af:fb:bb:91:
96:4e:fd:4f:fc:cb:09:81:96:63:38:df:fb:83:f9:
ae:a8:dc:ce:9f:ea:02:03:47:26:a0:7a:e6:a2:7d:
82:eb:1a:a2:a0:e0:3a:00:e3:ba:46:80:94:80:43:
42:98:fe:76:3d:57:61:96:ff:b9:68:fb:47:21:03:
dc:37:3b:49:b0:3a:ec:2e:a3:cb:c1:24:82:c3:08:
f9:bd:a8:40:d9:8c:c4:99:8f:fa:c3:08:be:15:5e:
6d:f8:3a:cf:dc:82:89:ec:07:da:09:3f:3c:01:94:
25:69:17:ee:a5:81:43:62:92:dc:9c:a9:f6:28:1b:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:F6:3C:8B:C3:35:02:8F:C6:94:82:E4:F2:01:FD:E7:20:DA:88
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c6:ac:3f:1f:5a:12:4e:b8:7f:78:2c:e5:2a:e2:0d:f2:ab:
cf:b8:4a:1c:4a:58:9c:fe:0c:dc:dc:bb:7a:6d:4d:e5:34:b2:
2d:b0:46:f5:f8:10:8a:ab:af:da:0c:2e:4c:66:42:19:72:40:
01:e4:5e:f7:32:59:05:24:c5:6e:f4:72:fa:0f:50:20:7f:5f:
17:8a:a3:27:f7:2e:bb:a9:69:5e:63:f6:19:d7:52:45:41:88:
99:0a:38:53:11:ff:b4:79:c7:3d:4b:6b:d5:57:45:6b:b3:93:
37:f9:ba:75:3c:0b:50:96:43:6b:0d:2d:8a:ae:7a:f5:36:94:
07:8a:a2:44:66:94:06:a8:31:05:2a:6a:d7:31:64:df:b3:63:
13:c1:b5:d8:76:64:82:05:01:f0:48:8c:41:83:7e:1c:86:0f:
8e:27:4b:c3:9c:e2:74:b3:ac:31:a1:ca:cb:23:fd:da:18:79:
e6:9c:f9:33:95:42:29:7f:75:7c:32:9e:e6:6b:5c:53:cb:30:
38:fc:fa:e1:ba:24:de:57:80:d1:0f:b6:5a:08:94:ad:2d:1f:
aa:28:70:f8:99:77:79:ab:91:16:6e:9c:d0:32:4b:a9:6b:3d:
ea:1b:d4:ea:c9:b5:b6:4b:4a:5f:10:7f:6f:09:90:fb:fa:3c:
39:fe:99:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:30 2026 by rpki-client