Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: S5Mtcojg6qnAPsUFaBSRnKTsT5ff8U7or1rCzlIGw8I=
Subject key identifier: C6:D4:FB:49:58:C4:4C:05:23:3A:8B:3D:A3:DB:9C:62:96:4B:36:00
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 019CAAC6D6EAE3EE84B6154876291A791720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: r1wOPgaHPua8Uen6p5Pz9tlK/qcBNt44U0D1QNMrs78=)
2: jj1QCdoz6DIRBrESW5B-wlAqOc8.roa (hash: ZaZ7JhsHU0NSgwU2H6qsoPOdqLQB7G06Y4u8Nuaw8mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d6:ea:e3:ee:84:b6:15:48:76:29:1a:79:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=c6d4fb4958c44c05233a8b3da3db9c62964b3600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:8d:81:e8:99:d3:f7:2a:8f:10:00:7d:78:
71:3c:e0:8f:ec:8c:e6:0e:56:eb:10:34:0d:99:b4:
5c:d1:97:8c:d5:9f:39:c0:fb:62:55:f6:8e:5f:ad:
02:03:9e:23:88:c4:ec:be:99:62:d0:d4:93:06:85:
6c:76:ea:6f:f1:24:d1:3e:9f:43:50:aa:d4:91:20:
93:0b:88:d4:d1:5c:16:11:3c:9c:24:ee:68:94:bd:
7e:f7:5b:3e:91:b7:44:1f:55:51:28:18:2e:70:fc:
80:30:1f:08:bf:aa:7b:a9:01:cb:96:4f:ea:10:c9:
20:99:28:2b:c5:3e:47:58:c7:ba:cc:41:4a:b1:54:
6a:78:9c:c4:11:eb:ed:15:5b:41:48:5f:aa:6d:7c:
22:16:db:fa:9b:fb:90:b5:24:2f:a8:f2:69:3c:e2:
2d:cd:8f:3c:fe:61:f6:c3:5b:a1:07:15:15:b6:8b:
96:5e:50:36:04:51:ba:3b:7e:44:d1:49:5b:69:73:
e8:30:70:ef:51:9f:cb:a4:27:d3:03:21:e0:fb:5e:
bf:06:0d:fc:50:9a:c2:eb:67:07:ad:29:b6:aa:47:
9c:2a:da:46:e2:01:2d:9e:a0:ff:e3:31:99:ba:d2:
34:f0:95:2b:c2:6b:8c:b7:01:65:b8:f8:c3:f4:68:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D4:FB:49:58:C4:4C:05:23:3A:8B:3D:A3:DB:9C:62:96:4B:36:00
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:92:6d:6d:08:86:80:d9:50:77:23:34:d6:8f:9e:35:f5:da:
c1:9c:f5:59:86:cf:b7:ac:3b:52:b9:e6:ae:93:3b:de:7f:a8:
8c:c9:6e:e9:59:3f:66:0b:8e:14:5d:e3:b8:78:cf:c6:52:80:
ed:79:64:26:40:c4:5e:b9:ba:c6:2b:31:12:32:28:55:0b:5b:
18:51:64:c3:cc:33:0f:96:58:25:db:85:03:09:d9:9c:66:31:
9a:db:23:5d:15:f0:60:d3:30:9e:d3:5e:c1:fa:99:9e:10:c0:
3e:6c:f7:b8:31:a4:23:3d:d7:f1:ba:2f:a8:24:4a:fb:69:38:
f0:65:7c:0f:13:a5:e7:f7:ed:c6:3c:15:92:e9:96:3b:21:43:
de:05:45:ec:d8:d9:55:aa:55:ac:64:14:7d:01:59:b2:8c:cb:
83:08:33:cc:ef:40:10:d5:e6:ce:c7:7a:af:91:62:32:95:fa:
96:7b:bf:5a:ef:d0:8f:b0:51:8f:b5:ce:5a:98:07:ad:30:6b:
aa:fe:d4:03:e7:e7:eb:42:1b:e8:c8:89:cc:1b:68:10:7f:2b:
d6:0d:32:8c:f0:07:f6:e1:37:07:1d:8c:86:b1:00:59:a3:9d:
ad:50:c1:9b:b7:3f:88:0d:88:3e:9e:42:c8:42:e3:08:be:d5:
4d:23:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:16 2026 by rpki-client