Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: kQYuR6kJKRQWFEJXl7E0FaQKxLouXHkkUA2afm/blpc=
Subject key identifier: 31:6E:69:11:6D:40:11:CF:CB:D1:9B:C7:B0:5B:6C:BB:88:4E:73:A9
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019CABA1E2B415A3780CAEC883E0607A7CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 045D
Signing time: Sun 01 Mar 2026 23:00:39 +0000
Manifest this update: Sun 01 Mar 2026 23:00:39 +0000
Manifest next update: Mon 02 Mar 2026 23:00:39 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: nhBq2hBNP4clQLgBsk6uKdHk1cGKUvgByKoQ2Wp+c8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e2:b4:15:a3:78:0c:ae:c8:83:e0:60:7a:7c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Mar 1 23:00:39 2026 GMT
Not After : Mar 2 23:00:39 2026 GMT
Subject: CN=316e69116d4011cfcbd19bc7b05b6cbb884e73a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:62:0b:41:86:69:52:ea:a6:ce:62:fa:b7:
54:89:bd:3a:ed:64:72:f3:3c:a4:04:3e:b0:46:b5:
b8:5b:e2:d9:3d:29:cc:d6:f8:d0:24:16:5d:4a:78:
ae:de:bd:bb:f5:de:87:14:64:a6:84:93:84:cc:3e:
74:60:c9:c9:35:ad:db:a3:79:20:7d:e4:93:d1:c6:
3a:bf:61:f8:8b:a7:2c:b4:06:dd:de:92:bf:8d:ab:
46:49:ca:39:16:30:1f:9e:3f:a1:a2:b7:a5:90:55:
08:bf:fb:96:ca:b2:55:3b:00:34:1f:1e:4d:79:a3:
c3:51:32:55:d6:61:bc:50:31:93:be:53:dc:30:39:
54:5f:34:da:80:4b:ff:62:a0:e9:0c:bf:9b:b0:d5:
44:17:9d:c7:3e:0f:83:3f:f7:ff:f4:88:9e:0f:ee:
46:68:ca:9e:3d:28:fd:d0:bd:7c:fe:e4:7b:8d:3a:
d2:b9:09:b1:0f:6a:1c:02:c7:51:2c:9c:6e:ee:77:
7e:ff:19:3c:43:3a:ba:50:30:a7:98:fb:0a:50:bd:
41:76:26:13:13:41:88:f6:27:8a:e4:99:d4:91:12:
0c:89:c0:17:07:0c:ec:39:a9:17:5e:0f:a6:c7:54:
b6:23:ff:61:54:7f:f1:62:b7:a7:2b:4b:f2:da:26:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6E:69:11:6D:40:11:CF:CB:D1:9B:C7:B0:5B:6C:BB:88:4E:73:A9
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:87:fc:5d:ca:9b:36:f5:eb:94:dd:eb:7c:a0:e3:8a:60:8e:
0a:a1:e0:2e:e7:84:52:e1:ad:73:02:85:c8:02:9b:43:c1:75:
f9:55:fb:14:b5:35:c4:39:0a:86:7a:ed:64:a6:2f:f9:0d:db:
9a:09:78:23:ec:d0:c2:03:1c:22:44:95:20:7b:6a:c6:ff:3c:
37:f6:42:48:4d:2d:e6:7f:48:e4:9c:9a:c4:93:14:27:1a:0b:
6d:fc:05:68:1d:d1:0e:59:03:02:d7:e1:61:df:81:4b:0e:90:
a6:81:e9:81:c9:1c:dd:0e:96:6a:ad:be:ec:0b:d0:30:14:53:
5d:45:ba:c0:f8:ce:81:e1:d3:39:f4:6c:79:c1:a9:62:54:e3:
83:d8:b4:de:e7:fb:af:fe:1f:a1:20:7d:35:b5:e8:ad:b5:a3:
62:6c:d5:e2:cc:86:95:f6:3a:6c:3c:2f:6e:0f:58:29:d2:02:
a5:57:81:35:12:70:b5:2c:c3:dc:6a:bc:1e:4e:d4:86:c7:51:
aa:49:1a:37:8a:7c:39:19:21:87:0c:fb:76:66:06:ae:5b:95:
e1:16:55:9d:c1:51:34:05:65:7f:c5:7f:aa:ea:00:4b:45:09:
dd:ee:24:9d:bb:3b:81:a0:6e:45:51:f6:a6:32:74:19:fd:19:
b6:37:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:52 2026 by rpki-client