Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: +5BBdcqsQM+eT9OK8jBY7zLyGwRfubAN11zMBFZjdhw=
Subject key identifier: CA:EF:A4:B9:AF:EA:78:03:4B:D2:E0:12:06:D5:38:27:21:82:21:00
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 019CAA5883C7A050B7BAB4C650948DBD9AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 16C7
Signing time: Sun 01 Mar 2026 17:00:53 +0000
Manifest this update: Sun 01 Mar 2026 17:00:53 +0000
Manifest next update: Mon 02 Mar 2026 17:00:53 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: m3D7x312c99pwH671mzsPfHWsACMOgV2S/T4FKPBSq0=)
2: 7eWcGeApexXCyJ5zpUATMUfIfjE.roa (hash: 25j7Y9KcJOf9q796TODAMGOZw8uhZj4cuQLUqDrqWiw=)
3: eh5f2bSFFBPtD-itI_yMFOKVNl8.roa (hash: 1eTnOvtuGR3xM5v0Vi+oWqoLUpmMh/7COfXsHBvYGt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:83:c7:a0:50:b7:ba:b4:c6:50:94:8d:bd:9a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Mar 1 17:00:53 2026 GMT
Not After : Mar 2 17:00:53 2026 GMT
Subject: CN=caefa4b9afea78034bd2e01206d5382721822100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:f5:36:80:1d:ab:b8:b5:12:53:04:bc:1c:
7f:98:2f:3b:4c:e3:49:8e:d2:86:8c:44:4f:27:30:
6a:04:7d:b6:d1:08:56:dc:bc:8e:5d:67:ef:19:e6:
84:ef:ac:a6:00:46:2a:83:9a:25:51:f9:f2:fb:8a:
d7:0a:63:78:ec:1d:69:66:29:8f:0d:fc:54:a2:d1:
21:7c:43:65:f4:58:31:9d:2f:55:45:5d:b7:3a:3a:
fa:bf:9b:92:37:ff:7a:8f:3e:cb:2f:4c:17:c0:f3:
2b:ec:61:e8:9b:68:fc:53:ed:de:f3:53:4f:fd:14:
ed:68:b0:b0:56:43:c4:9b:49:d5:ba:c0:de:59:ef:
49:e7:42:8f:7b:ed:92:59:b8:e2:f4:99:3a:a4:62:
b0:ea:e6:78:a6:4d:bb:8d:ae:15:03:02:d9:ef:13:
60:09:ad:ae:f1:29:de:49:b8:db:d6:99:2b:cc:c6:
2a:57:a6:20:f2:20:68:01:00:b8:27:98:bd:9d:9d:
70:1e:a2:88:08:15:28:58:fd:9f:ea:bf:33:cc:e2:
42:38:27:71:72:ca:0a:18:c2:72:d2:14:22:ed:9b:
07:a0:2d:ad:41:b0:c4:37:a1:7c:b4:6a:58:b4:26:
a0:13:b1:2a:11:5c:81:6b:86:b4:b7:0e:ce:18:b5:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:A4:B9:AF:EA:78:03:4B:D2:E0:12:06:D5:38:27:21:82:21:00
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:50:f3:90:f3:c5:24:50:e9:fa:81:3d:9e:64:7e:d6:c7:88:
e9:85:a4:d2:da:5c:0d:fc:9e:28:95:08:2a:7a:06:91:07:9d:
74:6a:4b:3f:ad:11:62:42:71:f4:63:2c:12:72:d9:3c:3d:89:
eb:02:cd:80:b5:cc:64:3c:e5:5d:26:03:96:05:57:8b:52:66:
f0:82:3b:8d:1d:01:f7:d5:0d:15:f8:bf:40:00:24:d1:61:ba:
47:a2:b9:80:78:3b:8b:5c:21:c1:8c:78:b0:b0:3a:0a:0d:35:
db:8f:66:82:e8:0a:e9:9b:69:fa:5f:84:91:ac:42:bb:6b:f2:
a3:df:99:0a:c8:71:4f:83:e6:35:46:f4:c8:ca:86:44:52:5d:
50:73:e4:21:37:c8:df:05:6c:a9:9e:8c:79:eb:5f:59:22:a7:
af:7b:a9:3d:8d:f4:cd:6d:a2:1e:d3:92:ea:cc:59:a0:74:b7:
17:b9:ca:1d:31:3c:27:c1:1f:32:a7:96:b3:58:89:0a:fe:2a:
3f:fc:51:bc:52:b7:ef:55:a9:9b:23:51:b1:f9:f8:18:44:7f:
05:e8:e8:97:50:fe:fd:3d:a6:dd:0a:a0:e4:e8:ea:9e:40:8f:
cc:37:4a:a3:67:10:23:8e:bd:5c:56:cb:2d:f7:a2:e1:39:09:
13:a0:d8:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWIPHoFC3urTGUJSNvZrRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWE3ZjdmZGQ1NGExN2NlNWUxMmE0MTgyZWI2NTI0Nzlm
OWQ3NTgwHhcNMjYwMzAxMTcwMDUzWhcNMjYwMzAyMTcwMDUzWjAzMTEwLwYDVQQD
EyhjYWVmYTRiOWFmZWE3ODAzNGJkMmUwMTIwNmQ1MzgyNzIxODIyMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXT1NoAdq7i1ElMEvBx/mC87TONJ
jtKGjERPJzBqBH220QhW3LyOXWfvGeaE76ymAEYqg5olUfny+4rXCmN47B1pZimP
DfxUotEhfENl9FgxnS9VRV23Ojr6v5uSN/96jz7LL0wXwPMr7GHom2j8U+3e81NP
/RTtaLCwVkPEm0nVusDeWe9J50KPe+2SWbji9Jk6pGKw6uZ4pk27ja4VAwLZ7xNg
Ca2u8SneSbjb1pkrzMYqV6Yg8iBoAQC4J5i9nZ1wHqKICBUoWP2f6r8zzOJCOCdx
csoKGMJy0hQi7ZsHoC2tQbDEN6F8tGpYtCagE7EqEVyBa4a0tw7OGLXOBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrvpLmv6ngDS9LgEgbVOCchgiEAMB8GA1UdIwQY
MBaAFNCaf3/dVKF85eEqQYLrZSR5+ddYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgt
NTg3NWE0NDg5ZGJhLzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgtNTg3NWE0NDg5ZGJh
LzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFDzkPPF
JFDp+oE9nmR+1seI6YWk0tpcDfyeKJUIKnoGkQeddGpLP60RYkJx9GMsEnLZPD2J
6wLNgLXMZDzlXSYDlgVXi1Jm8II7jR0B99UNFfi/QAAk0WG6R6K5gHg7i1whwYx4
sLA6Cg01249mgugK6Ztp+l+EkaxCu2vyo9+ZCshxT4PmNUb0yMqGRFJdUHPkITfI
3wVsqZ6MeetfWSKnr3upPY30zW2iHtOS6sxZoHS3F7nKHTE8J8EfMqeWs1iJCv4q
P/xRvFK371WpmyNRsfn4GER/Bejol1D+/T2m3Qqg5OjqnkCPzDdKo2cQI469XFbL
Lfei4TkJE6DY5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:00 2026 by rpki-client