Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier: XUpDAlVOFLe9M7rkysjpJSUM5DhH78391T3PzWD5rNc=
Subject key identifier: 20:A1:41:C6:38:58:0C:2C:11:61:7A:75:83:B6:73:8E:FE:8B:EE:93
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial: 019CABDA0FD5E66BD2BF02C29D4C31E6F131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 00:02:00 +0000
Manifest this update: Mon 02 Mar 2026 00:02:00 +0000
Manifest next update: Tue 03 Mar 2026 00:02:00 +0000
Files and hashes: 1: 9h49lJWwF1PdYlUFcV2QXMYgM9o.roa (hash: GCIawhjOg95GqWKJazHKfaZHhHNmcBK7aJ3Mw2UEcAc=)
2: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: 4wss+W7jETA5LAiw0763i8U6PNXt2K27C03v18QGn+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:0f:d5:e6:6b:d2:bf:02:c2:9d:4c:31:e6:f1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Validity
Not Before: Mar 2 00:02:00 2026 GMT
Not After : Mar 3 00:02:00 2026 GMT
Subject: CN=20a141c638580c2c11617a7583b6738efe8bee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:a2:76:24:f0:9c:db:df:71:eb:ed:2f:d7:
80:76:12:66:e9:93:16:15:3f:ae:9b:0d:d3:74:1b:
1e:bb:78:43:ac:4a:f7:dc:90:8f:a0:8d:93:7c:02:
bc:e9:26:39:f6:56:e1:14:fd:64:3c:17:11:b1:d5:
f8:57:8e:ca:ba:19:80:cc:c2:a6:99:61:1e:a2:de:
a9:7b:52:c8:54:99:af:23:d4:69:b9:20:96:94:a7:
dd:8c:fa:f3:cd:51:66:bf:c7:2a:4f:4c:62:7f:08:
08:1f:a9:37:31:fe:e1:87:44:9b:e0:96:e3:05:ee:
52:13:6c:d9:dc:92:57:af:31:3c:ad:85:fc:2a:14:
39:12:b7:97:33:78:5a:95:83:e5:5e:6e:fd:c1:1f:
fb:cc:c1:16:46:17:85:e5:ec:b8:75:86:3c:9f:59:
da:d5:52:1a:91:c5:95:b6:76:47:8d:f7:5e:17:c6:
0d:54:06:f6:0d:ef:50:6a:3d:9f:89:47:f3:ec:87:
a0:f3:46:37:e7:74:da:08:82:88:d5:9a:30:7d:71:
a0:42:74:1e:13:2a:6f:0a:8b:96:fc:e6:ff:a0:20:
c6:86:0e:c7:b0:8e:10:c2:7f:db:4d:23:4c:c5:34:
78:ac:50:31:76:79:be:00:92:88:43:b9:10:77:08:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:41:C6:38:58:0C:2C:11:61:7A:75:83:B6:73:8E:FE:8B:EE:93
X509v3 Authority Key Identifier:
keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:14:bf:33:f0:2d:29:88:ee:ae:3b:65:2f:40:b4:2e:70:ab:
61:5b:ce:40:27:07:c1:82:bb:d0:b0:a7:8a:a9:79:3f:93:f2:
f6:70:b5:ea:7c:00:bf:24:06:16:da:6c:36:d3:4d:ac:32:e1:
fa:c3:0b:bb:99:60:5d:5d:44:fe:37:01:63:ae:e0:86:78:62:
0f:49:86:3f:92:f8:05:a4:98:34:8a:f7:97:1c:d5:3f:fb:71:
16:ce:7c:c2:09:d0:c9:73:86:61:fd:3d:01:e9:bb:b7:46:6d:
7d:37:dd:9c:5b:9f:c0:1d:9d:7d:7c:aa:27:c1:c8:ce:cb:95:
df:d0:87:4e:4b:26:4c:35:1c:78:16:86:6b:51:9a:70:fa:4e:
cf:4c:9b:6f:8b:c1:08:f1:d6:47:27:ef:32:62:a4:c6:d0:f7:
73:7d:20:cf:0b:f1:88:26:f5:95:ac:32:a3:77:a1:a8:7e:d9:
ab:36:8c:3f:a4:28:52:56:c3:fc:f3:8b:dd:18:11:69:ba:5c:
8d:13:f4:1c:c2:c8:84:c4:6b:7f:37:0a:00:cb:15:8c:a9:33:
d6:2d:4c:4d:b8:0c:cc:c1:86:7c:25:ec:0e:80:3b:66:54:51:
3e:2f:a2:2c:e5:42:ae:b5:7b:ba:9a:b4:cd:d7:44:ba:f3:c4:
21:b7:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:42 2026 by rpki-client