Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: 2dqXMEdbd9O9OP13c4X2jrOSaiRx/G24gspZf81SkG4=
Subject key identifier: DF:DF:F9:D4:52:50:21:D0:B5:CD:98:BB:FD:9B:54:28:5E:44:A4:39
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019CAC106E16F5D2D83ACEF7095EE397BC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0F28
Signing time: Mon 02 Mar 2026 01:01:23 +0000
Manifest this update: Mon 02 Mar 2026 01:01:23 +0000
Manifest next update: Tue 03 Mar 2026 01:01:23 +0000
Files and hashes: 1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: ZjgdOYij40cLI7VipRZ2EVFTSd4LvyL5nvIAVfBGJjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:6e:16:f5:d2:d8:3a:ce:f7:09:5e:e3:97:bc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Mar 2 01:01:23 2026 GMT
Not After : Mar 3 01:01:23 2026 GMT
Subject: CN=dfdff9d4525021d0b5cd98bbfd9b54285e44a439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:43:5a:b3:b3:70:8d:d4:dc:15:c6:e0:2a:
22:c7:ca:a4:c2:f7:ec:bd:b6:70:3d:b8:db:48:9d:
7d:84:b4:3d:3a:aa:8c:72:6c:be:da:e4:b0:60:c2:
1d:7f:df:27:43:91:f8:bc:f9:5d:60:ce:9a:63:d1:
b9:f6:f7:ff:e8:39:9c:91:38:a4:51:e2:64:96:5b:
bb:2d:b1:e8:53:17:96:d4:c5:a6:d7:46:b0:7b:e1:
a2:20:a2:d7:d9:52:df:34:de:71:68:97:58:02:4c:
1a:98:76:e6:35:ff:60:af:8e:c7:07:29:89:e5:a0:
6f:21:ae:ee:ea:4e:19:72:3b:20:5b:a3:b9:52:76:
3a:df:5e:ba:01:49:aa:ed:58:82:6f:3c:b8:33:5b:
df:ee:0e:7c:ad:7e:48:23:1c:b1:e6:06:e9:b4:d8:
55:71:bc:8c:4d:7c:73:0f:43:b0:a7:ee:71:a0:ed:
44:28:8a:8b:41:a9:69:08:55:7b:34:1b:80:ee:63:
cf:68:2e:93:fb:cc:ff:ed:b3:82:68:05:3d:d5:dd:
34:6a:42:ca:05:db:06:b2:a2:a6:49:1b:0d:37:79:
26:43:ad:cf:c8:5c:cf:16:0f:eb:b9:a7:82:83:98:
1d:7b:3a:fa:cc:04:9f:05:17:09:89:e2:81:b3:4b:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DF:F9:D4:52:50:21:D0:B5:CD:98:BB:FD:9B:54:28:5E:44:A4:39
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:14:96:4b:78:0b:76:1f:27:9f:aa:24:08:de:26:83:c4:49:
14:98:03:1f:5d:e7:8b:af:0f:af:38:f1:dd:09:0d:15:fe:f6:
e5:cc:c9:49:51:15:a8:e4:fa:9f:a3:75:8f:b8:48:65:c6:ed:
ae:fd:48:7a:04:5a:74:f2:77:f4:e5:69:84:be:2e:ce:bd:76:
e0:f1:25:af:41:d5:98:bc:ff:4f:3a:c6:75:53:34:68:9c:1e:
b4:7c:ff:94:9f:54:6e:cd:89:80:e6:c7:8c:ba:73:4f:49:a8:
9a:e3:53:de:b1:d3:6a:07:d2:d7:e1:ca:03:02:ee:81:70:a2:
47:58:3d:ee:53:3f:a2:b8:4a:fa:f7:39:02:4f:01:d6:85:4f:
9e:15:b3:ee:ba:8d:c4:68:ea:5f:09:7c:54:0a:b6:54:e0:62:
15:b4:9e:9f:72:4f:68:2c:e1:b4:98:56:c7:cd:3f:35:f3:a5:
e4:48:09:89:7e:5e:1f:81:77:86:03:05:d4:78:75:9b:4e:0e:
28:70:49:db:f4:96:70:9c:a2:01:c5:d9:1f:cc:d2:ed:af:ec:
35:9b:f7:b4:49:03:ad:f8:c4:39:49:14:65:ab:9a:fc:70:6a:
f8:bc:40:5f:0f:79:02:27:cc:1e:cb:e3:f3:11:82:ee:6a:f3:
3e:47:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:29 2026 by rpki-client