Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: dwHSTIBulunVNzjrkyJdbpfUEMTrJAXiwz6N/gmhh3U=
Subject key identifier: F6:3B:47:C9:B6:1B:22:82:BB:5F:F6:6C:FF:D2:B9:C1:BD:8F:15:3E
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019CAF7E9AEB335DA070CADC1A42DB16C14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 1606
Signing time: Mon 02 Mar 2026 17:00:35 +0000
Manifest this update: Mon 02 Mar 2026 17:00:35 +0000
Manifest next update: Tue 03 Mar 2026 17:00:35 +0000
Files and hashes: 1: cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa (hash: 9j0sAYqHnylk8DHpPYOuCBCLe7gHNXAvxTbqjQ3el4M=)
2: lNDMKb0aTV8SXs00e18A81qWIek.roa (hash: herRhJivtwm2jHvfa8VAdymtufMvK+b5YDKOa9xoFaM=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: uxh906umYiqHsZSQ0eETqef3dK0L3rc0vC5S6+ZFldA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:9a:eb:33:5d:a0:70:ca:dc:1a:42:db:16:c1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Mar 2 17:00:35 2026 GMT
Not After : Mar 3 17:00:35 2026 GMT
Subject: CN=f63b47c9b61b2282bb5ff66cffd2b9c1bd8f153e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:4c:33:95:a3:4c:45:11:83:f7:7e:87:15:
21:95:63:0f:3a:22:ad:0a:8c:74:a5:93:47:9d:a6:
32:49:6f:90:65:55:97:05:35:e0:df:92:f4:4e:0e:
a2:48:92:08:18:96:cb:fc:90:7d:eb:ae:b3:1c:a3:
71:85:c6:cd:82:5a:b3:12:3b:ed:91:fe:de:00:d1:
4b:4c:ce:0e:c9:05:4e:bd:d5:2a:ba:1d:cb:4e:b7:
ce:04:8c:24:8e:16:51:60:71:46:a9:15:e6:73:aa:
3e:f1:74:c0:d2:71:2f:4f:00:58:fa:90:8c:3e:6b:
87:78:d1:63:0c:15:67:23:ae:b4:6c:24:21:f8:75:
86:9b:d6:c7:39:40:2e:cf:a3:1c:1a:0a:31:ad:4e:
31:59:03:a4:21:e9:80:43:3f:da:ff:64:8e:75:38:
b0:e7:c8:9b:62:b4:b0:90:01:70:89:ce:88:09:79:
2c:93:2f:e6:28:ad:e2:d6:d3:86:a1:83:a2:e4:23:
fb:69:ef:d5:77:27:04:68:da:43:48:ef:38:c4:bc:
49:5f:f0:05:56:84:ae:f9:79:93:f2:38:98:7d:46:
2c:5f:c1:5b:9e:f4:44:8e:13:0b:5a:b4:bf:71:e2:
56:bc:5a:6c:15:41:8e:96:71:82:cc:35:32:29:27:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:47:C9:B6:1B:22:82:BB:5F:F6:6C:FF:D2:B9:C1:BD:8F:15:3E
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:15:69:05:12:f8:df:1c:06:aa:1e:57:4f:43:eb:55:68:68:
5b:db:5c:c7:f8:d9:98:24:59:e8:eb:75:e9:65:e4:6b:8d:43:
64:68:74:6a:c5:70:54:fe:4f:ea:85:16:b2:35:ae:7f:fa:f4:
9f:12:c9:0a:5f:bd:d9:34:4d:c3:54:6b:c1:c1:e4:77:5a:18:
fc:03:e3:de:0d:c4:be:3b:76:d5:58:4d:82:8a:6c:bc:49:7b:
33:be:f9:b1:25:8b:5d:84:a7:33:61:3c:98:43:6c:67:c3:e7:
59:23:3a:3f:3d:f9:6e:16:94:29:65:22:c8:da:a2:e3:06:e3:
8e:73:12:21:71:72:6a:d1:a1:71:41:75:37:a9:40:49:0e:4f:
15:89:ad:78:51:2d:47:cd:44:e9:c8:c1:7a:74:9c:f4:d8:2d:
c0:c3:1b:2f:98:c2:71:22:48:3b:48:af:a8:76:66:10:95:21:
ce:98:65:72:fa:84:a2:1b:10:90:ec:3b:7f:56:70:6d:bc:15:
d8:83:8e:dc:38:33:6d:7f:b3:b8:47:be:70:e8:8e:13:e2:07:
54:bd:7e:53:14:2f:1a:35:d2:1b:88:37:0e:63:d0:52:04:98:
72:ba:c4:8f:2b:c7:b3:7c:b0:85:09:25:44:1c:24:c2:90:0b:
16:a2:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:54 2026 by rpki-client