Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier: 5DAPqwIoVJV0JSWlJincWoEYkT8meXeHOISBiECo4VU=
Subject key identifier: 1F:41:69:D1:D2:2C:AB:C4:B3:08:17:5A:71:FD:A3:3F:7E:9F:E9:C1
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 019CABD9E097AEAD24FD4FB1890317DFCF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number: 17D4
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: 6JbzmaP2xdn3cLMc-Bm-Yx2pN-E.roa (hash: 48sCH02KoyoE9P/6e5vhQk2nQTUGu8hLX4O+xfTgtzc=)
2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: a79aYYHAuNsFeA/OTxC/0pivsvnVrUFA/msjR26QTAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e0:97:ae:ad:24:fd:4f:b1:89:03:17:df:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=1f4169d1d22cabc4b308175a71fda33f7e9fe9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:f0:92:13:4b:c9:d2:e9:8c:59:a7:61:a8:
b2:87:81:26:da:15:a6:71:17:91:39:11:d0:ea:9b:
68:47:0e:8d:d0:64:8c:9c:55:17:a3:e7:b0:dc:cb:
cd:d2:12:36:4e:d9:59:05:26:47:fc:e9:75:b2:de:
d7:66:90:45:62:0c:4f:91:63:9a:d6:2c:02:46:30:
68:42:2e:ae:aa:83:2e:c2:ca:48:3a:ee:2a:77:12:
07:40:e5:4f:2a:5e:ac:3d:aa:95:34:be:53:16:3f:
89:81:8c:a2:f2:13:55:0b:4d:76:45:16:3d:23:43:
f9:f3:bf:02:0f:45:35:04:13:a6:a0:80:8d:79:e8:
e6:fb:d1:7d:1c:ed:ea:5a:ea:9b:e4:21:44:0e:9b:
d2:28:6f:77:06:a0:94:db:fe:14:c8:9b:a9:33:a0:
9e:9e:62:61:b6:46:02:52:d5:11:9e:df:67:71:45:
74:87:ed:6f:bc:8e:b8:0e:08:bf:e9:7b:9e:bd:1b:
ee:10:da:14:bb:11:68:d2:31:95:9d:a2:d8:cd:97:
83:ca:68:34:de:ef:04:bd:b9:39:b8:ce:26:f4:60:
d6:ed:de:a5:11:48:78:e1:dc:59:22:4f:b2:4d:24:
d0:cd:fa:0a:5e:cf:ca:04:ad:53:42:72:23:33:29:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:69:D1:D2:2C:AB:C4:B3:08:17:5A:71:FD:A3:3F:7E:9F:E9:C1
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:70:d4:4e:5f:6b:75:69:a7:24:25:47:1c:4f:0e:8f:f4:
97:f5:73:34:2d:33:18:b9:9d:e5:58:8b:80:b9:0a:88:b4:d1:
fe:ad:87:68:ba:9d:e9:01:62:f8:fa:5a:ac:fc:75:6b:49:2e:
be:7d:d5:cf:ff:58:78:25:5f:af:a6:bf:e9:b8:2e:f4:6c:f2:
2e:18:e8:a3:b8:65:f8:d7:4c:74:78:7d:33:d2:50:38:af:a6:
64:09:df:3e:5a:5e:84:7d:fd:8b:0f:0f:2f:66:c1:5f:67:0b:
35:43:d3:18:d1:33:27:e7:f5:f6:20:14:3c:75:d7:91:f8:45:
0a:d7:0e:80:4f:f2:9d:f6:ba:14:53:84:71:2e:24:5b:2b:ca:
db:20:bc:74:57:c5:e9:b5:41:78:44:a1:f9:e9:42:82:1b:0e:
35:ca:4a:22:54:87:4f:8c:a1:6f:f7:9b:97:4e:ba:ac:52:ed:
93:22:36:a2:94:93:16:38:c8:74:5a:93:2a:55:3a:f1:15:b6:
35:94:31:4a:1e:13:7a:46:ba:51:ae:11:ed:aa:e3:60:84:6a:
06:29:02:4c:db:68:6a:3e:8d:0b:cd:16:25:c7:c9:2f:4a:9e:
99:7d:0b:07:bb:76:b6:4b:04:95:aa:67:94:67:e1:88:13:6b:
6c:a6:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:06 2026 by rpki-client