Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json)
Hash identifier: FmGp1Y8TPvWAsnhfjwQoMAlQ1mkADGR6Xo0mwWm+VWA=
Subject key identifier: B2:D8:EC:3B:76:A4:0A:7B:9B:A9:CD:4C:A4:87:8F:9E:78:D3:9A:A3
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial: 019CA9B3DFF87D78C8F25EF47DE7DC3A33DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 14:01:03 +0000
Manifest this update: Sun 01 Mar 2026 14:01:03 +0000
Manifest next update: Mon 02 Mar 2026 14:01:03 +0000
Files and hashes: 1: M1Lf11eksEvqz34PbHYO7Z4jXHI.roa (hash: 1wwr1qMj1Er+C+R6P5FqGwBBlZMubvTHn7IuCGLNv1Q=)
2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: 4ceUy8rXka39XmxBJCoNngBTZEmARQwv+AThcxsbMzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:df:f8:7d:78:c8:f2:5e:f4:7d:e7:dc:3a:33:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Validity
Not Before: Mar 1 14:01:03 2026 GMT
Not After : Mar 2 14:01:03 2026 GMT
Subject: CN=b2d8ec3b76a40a7b9ba9cd4ca4878f9e78d39aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:77:93:f7:9d:c4:b6:5b:f4:14:1f:87:ec:34:
d5:95:3c:c6:a5:d9:0d:d2:d7:b1:09:f0:3d:f5:db:
ae:53:67:c8:7e:18:2f:6c:2c:bb:ac:3c:7f:19:20:
fb:ea:6e:d2:04:2e:95:24:cc:73:2d:5c:85:25:c8:
0a:d0:4f:56:83:06:53:92:5c:47:07:6a:a3:70:19:
df:14:fb:14:97:02:27:c9:03:d3:91:73:9c:87:52:
10:43:c8:2d:5b:19:f4:d8:39:a3:31:f9:13:01:01:
98:0e:1c:90:83:38:68:0b:d7:2d:89:02:c5:83:0a:
b1:5d:ef:10:24:7a:2a:ee:6a:f9:bc:d0:bd:62:ae:
29:c9:65:6d:09:f9:bd:94:23:52:31:68:c6:4a:07:
45:96:32:a3:4b:91:57:57:69:fd:be:ee:b4:89:fd:
5b:70:4d:62:1b:dd:f0:57:fb:1f:8e:3a:81:85:c4:
a4:f9:d7:55:59:99:25:38:74:18:25:7a:e1:78:74:
43:20:72:7a:0b:86:c6:4b:48:a7:71:19:cd:2b:2e:
58:55:25:1b:ca:1c:85:c5:45:86:3c:f2:24:ea:87:
50:3f:5b:15:49:e8:88:c3:f6:fd:3f:15:4a:89:ba:
ba:a7:6f:0a:d3:21:57:03:91:da:0f:78:7a:6b:91:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:EC:3B:76:A4:0A:7B:9B:A9:CD:4C:A4:87:8F:9E:78:D3:9A:A3
X509v3 Authority Key Identifier:
keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:98:35:b2:90:23:02:46:f9:a8:07:63:75:bc:8c:4a:3c:ef:
84:5e:77:c0:10:39:14:34:0e:64:b1:44:eb:96:7a:8c:1c:0f:
25:c8:da:d2:37:0b:ae:68:c3:28:0f:51:90:47:1b:e9:32:36:
2d:fd:70:da:54:ad:33:a3:e2:1c:87:69:e8:60:82:60:2d:ed:
a5:60:e7:00:71:7e:f6:f1:13:64:64:f9:09:b8:66:e9:58:a0:
7b:e1:a3:38:d6:90:39:2a:14:62:38:a2:df:4e:e2:17:c5:8d:
2d:3a:dc:b5:00:3c:58:2a:c3:64:b6:33:e5:97:18:89:22:86:
a2:4d:cf:7f:8b:d9:f7:cc:0e:38:61:61:a1:5b:57:18:55:47:
db:5e:82:45:58:d9:22:00:f3:21:1a:c5:2a:5e:75:0d:69:d3:
0b:01:5e:26:25:9c:e5:f6:fb:8f:ad:99:97:c5:3a:af:df:3f:
62:4d:79:f2:9a:85:91:5a:c2:2e:f1:2f:8c:6e:10:24:08:87:
56:58:94:da:18:f8:d7:b9:8e:80:e0:97:90:c0:4e:03:52:d8:
e6:95:3c:78:2d:fc:04:e9:66:a1:52:44:a1:ad:60:ab:27:5b:
45:50:6e:01:2a:78:9a:05:44:e1:e0:07:3d:8f:53:91:71:5f:
e9:f8:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:27 2026 by rpki-client