Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: EBnarER8gza5jJybARyT2zlfb4QuX86amlUsLAdiTos=
Subject key identifier: 99:E4:6E:73:6E:A8:F5:1D:9E:B3:DC:7B:56:EE:A3:5C:F5:3B:91:A7
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 019CAAC64814C361A0ABA81BF7611A80EE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 1107
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: H42IMZpbSiNofW7DgJpiiUW0iazTOI6QJhVbBgAuGKE=)
2: t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa (hash: j8FLow634/sFX5We1fU/Tl5tl/Iw6/b+Vn5Ia8rywE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:48:14:c3:61:a0:ab:a8:1b:f7:61:1a:80:ee:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=99e46e736ea8f51d9eb3dc7b56eea35cf53b91a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:00:58:03:34:72:3e:48:88:8d:b1:05:c2:1c:
f9:1b:a9:51:80:96:32:88:f5:cf:4b:ba:9d:ea:1f:
88:e3:a8:c8:5b:44:71:44:4d:3f:14:40:47:93:63:
6f:4f:ce:4e:75:92:77:bb:6d:1a:13:83:7f:c2:6e:
ef:6c:49:11:7e:3f:92:3d:bb:d2:07:48:ba:86:32:
37:3b:9d:8a:69:86:fe:7b:78:15:db:02:8b:5f:44:
16:1f:32:c0:0f:d7:08:f6:fe:f6:05:51:7c:c6:80:
ae:6f:63:ee:eb:d7:d1:51:74:30:cc:9a:84:f3:c4:
c4:95:da:77:2b:49:85:54:a1:15:dc:88:9e:bb:71:
98:3b:2e:4f:28:5a:a5:a3:ba:1c:54:67:3e:d7:e0:
40:bc:83:75:7e:26:59:a7:07:9b:a0:f2:c8:dd:f8:
5e:1b:d8:ff:38:72:2d:86:a4:b4:81:e1:1e:44:ba:
cb:53:e7:23:f2:55:89:08:77:d1:cb:75:fe:8b:af:
f0:4d:ed:53:b8:34:2c:6e:08:b2:17:8f:3f:f6:cd:
94:16:4a:5c:6c:3a:62:b6:d6:06:e9:3d:8d:2e:0a:
52:67:e2:f0:6d:83:82:ee:7a:b7:33:93:77:25:65:
00:be:e4:16:62:9f:9f:15:df:8a:ed:0a:03:2f:8e:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:6E:73:6E:A8:F5:1D:9E:B3:DC:7B:56:EE:A3:5C:F5:3B:91:A7
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0d:3b:53:90:45:9a:e0:6a:8a:af:af:64:9f:be:cc:7b:b1:
14:26:04:9c:6d:c5:17:ae:3b:d8:ec:f7:ea:71:2d:0d:70:7d:
63:06:49:2c:50:9f:65:c1:05:47:47:78:d9:7a:b7:d6:45:8d:
36:fc:32:24:ad:7a:05:96:ae:68:39:50:41:23:80:0b:ac:60:
79:3e:94:87:41:bf:e6:37:38:7c:a1:1c:27:a5:ee:ed:31:5d:
9e:dc:c2:13:16:cb:7c:c3:cf:23:95:84:ca:3a:9c:1e:22:33:
32:34:ec:38:2e:bf:3c:05:82:be:86:5e:84:ea:32:34:75:d2:
7a:15:1c:72:50:cd:cd:82:1a:04:a7:6a:b2:f1:34:cf:c4:90:
46:8c:c0:17:b7:af:90:76:d5:02:a9:d1:67:8c:f0:4e:54:29:
6c:b7:42:0a:1f:7e:7f:8e:7d:c6:93:87:fb:d1:55:e1:36:5a:
94:e1:86:99:43:71:7d:d8:e8:66:b2:bc:17:68:e4:68:ad:7d:
06:2c:0a:af:81:9e:87:82:a1:ed:87:40:23:b1:8e:20:05:95:
4c:f8:02:79:3e:d6:a7:0c:83:6c:34:9c:b8:f1:b4:31:1c:2c:
22:44:a2:ed:21:89:aa:b0:3d:85:de:85:5d:4a:6d:50:09:ed:
8b:ba:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:15 2026 by rpki-client