Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: mKutdzxup6Vz0uIY9MOdlBA0DS2SooXnIg+IhAArkws=
Subject key identifier: 9B:9F:2B:FB:05:3F:B0:3A:5E:94:EC:AC:03:8D:85:73:91:D4:6B:D2
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019CAC471E546603B7AD77C0A4B97EEB9A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 1588
Signing time: Mon 02 Mar 2026 02:01:07 +0000
Manifest this update: Mon 02 Mar 2026 02:01:07 +0000
Manifest next update: Tue 03 Mar 2026 02:01:07 +0000
Files and hashes: 1: 9cLaCRMmkUSsyxFDOIgTHYqGjrA.roa (hash: M8D9X9HUQkQdMWCylk5MMocwUSM9A6MJTfk46/lEGqw=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: Docqx5BKQ5/MRmo9IiZ8wYWt8SyAqBFmz/bNuc0/06o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:1e:54:66:03:b7:ad:77:c0:a4:b9:7e:eb:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Mar 2 02:01:07 2026 GMT
Not After : Mar 3 02:01:07 2026 GMT
Subject: CN=9b9f2bfb053fb03a5e94ecac038d857391d46bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ed:9c:de:3f:c1:7a:89:3d:76:0e:fa:87:9d:
04:ad:64:9c:12:dd:a9:00:80:25:0c:4e:4a:f8:a9:
b9:94:5e:ae:4d:5d:9b:6c:b7:68:94:ea:28:7e:00:
f1:73:7b:cb:ec:4f:ec:ff:6b:c4:cf:5e:94:d5:72:
5c:e4:77:d5:77:9e:8d:c8:58:95:88:8f:f5:44:46:
b5:01:6b:34:7f:8e:95:f6:ad:49:54:78:cc:d2:ed:
e4:78:92:16:e1:e8:92:11:c6:7c:04:97:6d:c4:e4:
7d:77:e7:19:5e:9c:23:c4:4b:47:b4:d9:70:a0:c0:
84:1d:ac:78:4a:6c:43:2d:2f:f9:31:d3:1f:e9:f2:
3c:61:3b:f2:3a:06:10:63:72:e7:a1:b5:37:a7:96:
26:ae:5c:df:38:19:0c:4c:f1:88:11:1e:e8:27:66:
5b:a5:91:1b:43:87:14:80:e7:a6:9d:83:33:54:7e:
61:fd:ec:82:92:91:bd:93:33:81:d1:3e:88:08:27:
57:8e:ea:c0:32:1a:03:c5:21:7d:dd:29:96:22:fa:
dc:10:2f:d7:bd:d6:92:40:ae:66:9b:f5:17:f9:b5:
0d:14:0c:2a:60:e5:85:aa:36:53:b7:72:82:9b:c3:
d0:69:e1:d1:51:5d:2f:e4:fd:d6:ee:b2:60:e4:40:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:2B:FB:05:3F:B0:3A:5E:94:EC:AC:03:8D:85:73:91:D4:6B:D2
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:e3:34:7c:eb:66:79:98:fb:1f:07:c0:a6:93:29:d0:c2:
be:28:c0:f9:77:1a:29:55:7b:89:c8:b3:47:30:b0:bc:f2:5a:
3d:76:f1:6f:2f:36:2c:f8:50:5d:3b:5a:08:4a:89:e0:fe:f1:
33:d9:87:57:1d:91:17:fb:76:1a:cd:c1:66:2d:ce:04:de:ff:
67:ea:11:3c:83:ae:af:20:29:78:1a:a3:ba:d0:65:8b:cb:86:
42:ec:66:76:2b:37:8a:59:6f:a5:2d:73:a6:07:2d:16:d4:f4:
d8:5f:45:3c:55:52:b5:f7:a0:5e:a5:f0:16:16:9c:15:7d:87:
16:f6:7a:fa:8b:0e:8c:80:81:30:a8:a8:90:af:0a:3c:43:cb:
be:3b:ee:6f:c5:76:4e:f3:c0:3f:36:03:71:ff:f2:47:59:be:
a6:38:67:20:c3:50:ba:7d:70:40:62:6b:c2:25:c3:25:a8:9e:
13:0d:55:65:27:72:ff:98:99:95:f2:58:3f:80:19:65:fe:d6:
25:0c:37:68:d6:2e:fa:d6:68:c9:2b:24:d9:9a:76:d3:f7:a0:
01:ba:b4:c7:58:82:08:99:82:e9:68:a5:d6:2f:55:98:2f:48:
16:3e:c6:af:87:b6:b1:a1:cd:0d:b0:c8:7a:52:f9:c0:8e:0a:
7c:d0:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:19 2026 by rpki-client