Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File: JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier: KS1A9WEqgDgHTaxIbsaUeG55MKLJ6EjbWRkdT5xlYXU=
Subject key identifier: 70:4F:8A:D2:81:01:9E:58:BD:02:C1:03:E7:04:C1:1C:19:E3:01:DF
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial: 019CAC0FE1DCBD090E5C3B7933343D0D370B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: 5i2LXXcgt/GIEmn3uSKFxizXQUYN+A2YR0yrDHmINVQ=)
2: waZwL5p70K3eubkjn4rt16lrpmo.roa (hash: Yb1Set22MMS78/VHLDK1SdDRV6cNd11Qc3kiWPaHjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e1:dc:bd:09:0e:5c:3b:79:33:34:3d:0d:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=704f8ad281019e58bd02c103e704c11c19e301df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:65:8c:2f:3f:4c:9c:04:36:97:4e:1c:57:
2a:57:f1:48:52:f3:99:15:a9:f3:da:1f:d0:28:93:
8c:77:40:38:b6:91:34:00:ce:f5:98:45:9e:d6:69:
81:e5:fe:d4:69:d4:4d:ba:e7:af:f9:d8:65:77:fe:
eb:1d:fe:42:1f:51:88:3f:21:26:0f:8f:1c:d9:d9:
d4:52:01:8e:dd:a2:fd:78:4e:8f:38:fe:76:fc:af:
e8:7f:45:82:a9:e7:a7:39:c9:48:9d:d1:01:3d:77:
a8:78:d8:35:50:59:f0:bd:81:18:04:e7:6a:71:cd:
a3:bc:d6:14:dd:04:42:27:ad:19:67:fd:dd:6c:e8:
fd:fe:47:5a:ae:c9:30:14:3a:08:5d:b3:7d:8a:bb:
6a:2d:35:f1:ce:a4:51:39:43:f1:ef:88:ae:4b:da:
5a:09:0b:42:35:38:8f:34:f8:6e:31:31:db:66:88:
61:31:f5:6e:f2:10:99:99:6b:05:b2:12:48:26:b8:
52:9a:3f:cf:51:bd:bf:8d:88:3f:ab:51:2e:79:c3:
12:d3:0b:f7:45:09:c9:76:0e:b6:05:b1:e1:39:6b:
69:dc:dd:dc:59:ba:9c:79:bc:0e:57:68:b0:3b:72:
7f:4a:d7:fd:f5:9a:05:f8:bb:21:db:4f:5f:c1:7a:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:8A:D2:81:01:9E:58:BD:02:C1:03:E7:04:C1:1C:19:E3:01:DF
X509v3 Authority Key Identifier:
keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:80:7f:19:2c:c2:c5:22:9a:8f:f2:a9:42:81:c3:4d:a5:07:
e1:38:7b:e7:e9:cb:b5:9d:c6:76:6e:99:bb:a0:dc:f3:7f:8a:
49:6d:96:fc:29:e2:b7:fd:7c:5c:08:9a:5f:c9:46:eb:19:64:
c3:08:9f:0b:ab:27:27:a9:bf:d3:59:b8:fb:12:17:8a:bd:37:
eb:6e:78:3b:57:72:d7:67:3b:be:99:21:3a:a8:ee:82:5e:6a:
b1:6f:32:b9:f9:91:59:98:f5:f7:94:b4:64:e5:c5:c3:d1:d3:
6d:6a:e3:86:67:a3:08:51:75:84:72:c0:12:e5:62:48:89:04:
2a:47:ac:b1:b9:92:cd:11:fc:5d:65:5a:21:38:31:f0:c8:df:
b0:2d:20:db:7f:43:d9:09:66:e6:bc:2c:a1:4c:f1:8e:0a:ba:
a3:d7:b3:70:ae:c0:3e:ad:13:aa:c4:5c:f5:32:8b:5d:85:77:
6c:b5:59:9e:98:19:30:9c:f8:cb:9a:16:f8:82:1a:be:d3:77:
b6:be:cf:3d:2a:cd:4a:bc:12:6a:94:fe:ae:03:9b:17:5f:66:
bc:d0:a3:8e:a0:5d:da:6e:34:51:59:4c:36:1f:15:e3:7a:a6:
b0:97:bc:a0:81:67:82:2e:35:7e:d7:2b:6d:1a:e3:75:55:c1:
44:ad:5a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+HcvQkOXDt5MzQ9DTcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjhjYzdmMDZlYTA5YTI0N2Y2YmU5ZTllNTc0YzRmMzdi
NGU5YjYwHhcNMjYwMzAyMDEwMDQ3WhcNMjYwMzAzMDEwMDQ3WjAzMTEwLwYDVQQD
Eyg3MDRmOGFkMjgxMDE5ZTU4YmQwMmMxMDNlNzA0YzExYzE5ZTMwMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6VljC8/TJwENpdOHFcqV/FIUvOZ
Fanz2h/QKJOMd0A4tpE0AM71mEWe1mmB5f7UadRNuuev+dhld/7rHf5CH1GIPyEm
D48c2dnUUgGO3aL9eE6POP52/K/of0WCqeenOclIndEBPXeoeNg1UFnwvYEYBOdq
cc2jvNYU3QRCJ60ZZ/3dbOj9/kdarskwFDoIXbN9irtqLTXxzqRROUPx74iuS9pa
CQtCNTiPNPhuMTHbZohhMfVu8hCZmWsFshJIJrhSmj/PUb2/jYg/q1EuecMS0wv3
RQnJdg62BbHhOWtp3N3cWbqcebwOV2iwO3J/Stf99ZoF+Lsh209fwXrCPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBPitKBAZ5YvQLBA+cEwRwZ4wHfMB8GA1UdIwQY
MBaAFCYozH8G6gmiR/a+np5XTE83tOm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWIt
MTJhMjk3NjFlMDk0LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWItMTJhMjk3NjFlMDk0
LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4IB/GSzC
xSKaj/KpQoHDTaUH4Th75+nLtZ3Gdm6Zu6Dc83+KSW2W/Cnit/18XAiaX8lG6xlk
wwifC6snJ6m/01m4+xIXir036254O1dy12c7vpkhOqjugl5qsW8yufmRWZj195S0
ZOXFw9HTbWrjhmejCFF1hHLAEuViSIkEKkessbmSzRH8XWVaITgx8MjfsC0g239D
2Qlm5rwsoUzxjgq6o9ezcK7APq0TqsRc9TKLXYV3bLVZnpgZMJz4y5oW+IIavtN3
tr7PPSrNSrwSapT+rgObF19mvNCjjqBd2m40UVlMNh8V43qmsJe8oIFngi41ftcr
bRrjdVXBRK1ayA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:25 2026 by rpki-client