Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: 52+5ncFy/xjwstOgTJwknVk1sV6ykKPwrOf0jzU5M1w=
Subject key identifier: A0:6F:2F:9E:42:E3:87:77:C9:E0:47:6E:67:E9:83:C2:43:09:81:3A
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 019CAE35AD7F7D0F5C9DF9AFD10DB406EA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 11:01:19 +0000
Manifest this update: Mon 02 Mar 2026 11:01:19 +0000
Manifest next update: Tue 03 Mar 2026 11:01:19 +0000
Files and hashes: 1: Jo4sL8lXLvyWdPSWoSkZwZCVJ04.roa (hash: bS0A196A1VxcXT/9qLUtNV5FjCCPOQid0Srt7nWffI0=)
2: bMn_23nrCl28y9SYIcSyjUBIZLU.roa (hash: CTefdSkQHU087fuAHIXzkavwf4EoaAetVJZcdLfAn7c=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: 9wT1qiIacX9oEHZmHqMKA65cqmfpGPa3qDgVl17ZKQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ad:7f:7d:0f:5c:9d:f9:af:d1:0d:b4:06:ea:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Mar 2 11:01:19 2026 GMT
Not After : Mar 3 11:01:19 2026 GMT
Subject: CN=a06f2f9e42e38777c9e0476e67e983c24309813a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:bf:89:40:f8:58:da:19:93:1a:bf:34:36:
c0:e1:32:ae:b5:8a:5a:0e:c0:49:0d:ac:33:71:a0:
68:41:b5:8c:5c:e5:0b:d9:dd:32:f4:49:d3:28:e5:
86:07:1e:7f:4e:30:21:d5:2a:40:97:f6:78:85:3c:
44:f7:81:3c:a0:04:11:4d:f7:c3:b9:d0:07:2a:e8:
7a:47:22:b9:7a:25:df:01:a8:90:e3:2c:82:28:09:
f8:f7:ac:80:77:6d:0a:79:89:4a:be:02:9f:3f:1f:
1d:0d:04:de:6e:16:e7:f7:cf:cb:dd:a4:50:16:05:
6b:13:6f:aa:db:6e:7b:99:45:c0:f8:f5:f8:74:1d:
52:ab:c8:5e:f3:d8:20:58:a1:85:e5:c7:f4:9e:0e:
34:99:08:38:0e:68:33:e8:9e:d6:12:a1:7c:b8:b2:
6c:8b:fb:ad:81:73:22:00:ec:61:d7:0c:1a:ed:9c:
63:ce:4c:cf:de:89:ef:12:ce:c6:73:43:b5:e6:2c:
17:f1:41:21:ba:05:b4:af:c8:28:cd:aa:68:ea:7e:
92:04:df:7c:25:3b:3e:e6:e7:e8:f4:ae:41:3f:7f:
bd:33:8c:64:0d:89:53:ae:4e:9d:83:01:34:8d:bb:
fa:80:20:0c:0f:15:2d:66:fc:48:23:76:bc:b9:c0:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:2F:9E:42:E3:87:77:C9:E0:47:6E:67:E9:83:C2:43:09:81:3A
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5d:b4:08:80:83:26:2f:c1:6f:63:1d:fc:28:1b:a9:01:4a:
d5:a7:73:cc:66:e4:50:a0:e7:82:54:b8:96:06:29:ed:4f:fb:
a7:8e:92:21:6c:36:8f:7f:70:d9:92:bf:73:8b:2d:5e:fe:5e:
08:a3:8d:0c:62:7a:7a:ff:56:8d:cc:49:3b:61:e4:26:02:e3:
c9:db:8a:fc:bd:6d:48:41:3e:fa:c1:91:28:c0:31:ab:c7:e8:
48:43:9e:55:af:c3:08:e8:43:21:32:75:27:b2:58:48:79:81:
cd:51:2b:39:94:05:bf:cb:26:e8:57:7f:4c:50:23:c8:d5:6e:
60:ff:af:06:9c:c9:45:65:82:08:92:46:36:d9:ec:44:f0:cf:
21:66:c5:ed:d1:4e:cc:6f:53:ca:23:ab:67:c6:70:6f:c9:eb:
4f:fa:89:c7:82:26:31:18:3a:77:18:91:63:10:ed:a8:28:b2:
b0:97:f0:18:57:27:bf:07:3b:2b:d4:5b:30:5d:27:b4:8f:40:
e5:cd:f0:2e:47:c1:9b:a7:60:dc:d4:99:af:29:68:1f:f3:a7:
8b:5d:0f:1d:ac:1c:bb:e2:7c:a4:78:ad:a4:4a:3a:06:f3:ab:
99:f7:6d:ad:82:ac:ae:63:70:f0:99:4e:e6:59:db:53:52:af:
46:2f:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:17 2026 by rpki-client