Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: INDXwoso5Q47EJzhRtpzvmjYzccbv5VmqczcT0vhMnQ=
Subject key identifier: D6:9F:A1:CC:84:71:57:BB:5F:53:73:71:32:4C:C0:4A:BF:EE:64:FE
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019CAB3454B5155AD4C51C43C0B4D0CB1E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 21:00:59 +0000
Manifest this update: Sun 01 Mar 2026 21:00:59 +0000
Manifest next update: Mon 02 Mar 2026 21:00:59 +0000
Files and hashes: 1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: ZkNKZ2NLI6XZtMOXqZqjAWEyspypmMaq5pa442L0W44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:54:b5:15:5a:d4:c5:1c:43:c0:b4:d0:cb:1e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Mar 1 21:00:59 2026 GMT
Not After : Mar 2 21:00:59 2026 GMT
Subject: CN=d69fa1cc847157bb5f537371324cc04abfee64fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:0a:10:7c:94:c2:b6:df:76:85:4c:ce:95:
bb:ad:18:ec:a2:bf:9c:41:4b:ad:aa:9d:54:5c:53:
6b:cf:bb:9b:b4:4a:11:a3:a1:84:b4:c9:2f:89:8e:
5c:7e:fe:ab:3b:ce:2e:89:97:c6:82:d8:e1:12:25:
a4:b8:d5:5a:17:9f:cf:65:36:ff:7c:b1:1c:5a:07:
5b:b2:83:06:f5:cc:5e:7e:29:b4:55:2e:c7:99:af:
c4:ac:3d:ee:71:1c:9f:c1:54:32:57:f5:cc:24:c8:
cf:dd:d4:93:08:55:f8:49:f9:ae:57:17:27:bf:7e:
b5:eb:ad:bc:a0:c2:dc:9c:06:cb:e2:25:64:68:a9:
69:5a:72:4c:79:97:e2:97:6b:b4:9c:ac:74:6f:62:
ad:d5:98:10:42:20:5a:7e:f2:ec:77:67:fa:7e:0d:
1a:bc:5f:78:53:ff:c0:ee:65:e5:d5:85:22:6f:c7:
3f:01:da:c5:39:3f:00:61:e1:1b:2c:93:a7:b5:93:
b9:d3:b1:b9:a3:5b:ba:83:df:3a:89:d6:1e:1c:44:
3d:2d:31:13:de:66:05:f9:2f:43:d4:6a:58:a7:e0:
64:ff:38:79:d0:a8:e2:ee:aa:8e:14:b6:3c:1c:5a:
71:db:31:d1:d3:5a:f3:e3:98:65:57:b6:05:96:ba:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9F:A1:CC:84:71:57:BB:5F:53:73:71:32:4C:C0:4A:BF:EE:64:FE
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fa:75:57:95:ca:62:0e:e3:ee:83:26:40:6c:a7:f2:77:96:
82:6c:2d:69:6b:5a:72:b0:98:0a:52:97:e6:5a:9d:e1:14:28:
a5:08:db:73:e6:29:6b:3b:bb:8b:6d:14:4c:c3:6a:15:2f:2d:
50:4e:2a:0a:8d:d0:29:c1:c7:e4:ba:ec:b6:06:a2:c5:a6:02:
9e:49:d9:d4:ac:e0:a5:38:34:25:c4:d4:d6:19:df:a6:b3:48:
9c:00:ab:ad:34:33:50:ea:77:13:c7:82:54:bb:3e:80:d7:39:
0f:86:a3:45:c3:01:ed:79:98:30:12:fa:5e:c6:2b:5f:13:66:
a7:b8:6a:f4:b7:e4:0a:60:0b:50:a9:b0:60:9c:5b:d5:ff:42:
e9:67:d0:b1:11:51:70:6d:b0:19:fb:59:ec:43:b0:0f:5f:bb:
4d:0e:5f:53:da:94:b9:fb:08:40:82:13:c7:0d:b3:ca:bf:5d:
54:9d:68:13:33:d0:bc:18:e4:bd:da:c5:c0:3e:32:be:76:e1:
8c:36:69:27:f1:14:6d:67:7c:64:69:ea:18:84:f2:58:de:c7:
87:b6:0b:2b:e4:52:b9:e4:af:83:a3:cb:b0:fb:c5:ee:12:36:
b4:75:dc:49:d3:58:8e:73:51:f3:bd:92:c2:64:da:1a:36:c0:
ef:07:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:14 2026 by rpki-client