Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: 2Cf23VD8txlzbD0CBXhLKS8gBnH7mivZH5kmVsE+icI=
Subject key identifier: 01:F1:F9:D2:CC:58:EE:09:E5:BC:A7:28:83:6E:55:58:F3:3B:16:05
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 019CAA215EB878B0FC91E571A682A4FA7565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 12F8
Signing time: Sun 01 Mar 2026 16:00:39 +0000
Manifest this update: Sun 01 Mar 2026 16:00:39 +0000
Manifest next update: Mon 02 Mar 2026 16:00:39 +0000
Files and hashes: 1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: WRi7jxx7r0KYrKlf8N7TKeSOrRVqJ3sjdRBf7/hsuHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:5e:b8:78:b0:fc:91:e5:71:a6:82:a4:fa:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Mar 1 16:00:39 2026 GMT
Not After : Mar 2 16:00:39 2026 GMT
Subject: CN=01f1f9d2cc58ee09e5bca728836e5558f33b1605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:03:e5:c4:09:8b:54:d2:1c:d1:f4:25:91:
fb:f2:29:15:dd:28:23:20:8e:b1:4d:27:5f:2d:30:
16:04:c6:bd:60:72:16:c6:91:47:b3:69:f6:5a:e4:
a0:9b:3f:43:b6:76:5c:8e:2a:f5:44:31:59:b4:76:
e1:d4:d0:a9:ec:51:5a:c5:54:c1:85:79:4b:b0:d8:
81:e1:65:ba:70:3a:ba:be:81:d0:0d:a1:7a:fb:fb:
77:bd:cc:c4:52:30:f6:cb:05:4c:ba:dd:c8:9c:fc:
1a:ef:61:5b:f2:97:75:7e:81:f2:89:32:f0:68:c2:
a3:93:15:14:38:a3:e6:3b:f5:ad:03:86:7f:80:06:
af:6a:df:16:50:79:cf:8d:62:10:89:3b:bf:10:34:
9b:c0:54:08:54:c4:5c:52:21:0f:8f:e7:b1:df:89:
1e:3c:12:0e:e2:2d:9e:c4:d6:78:5f:ec:d6:5b:98:
60:0b:0d:fe:79:c6:5c:90:92:3f:ab:5c:ac:b2:8e:
54:2a:e9:78:44:29:ee:39:0e:7e:f0:b4:26:39:13:
81:e4:3e:ef:01:fd:a7:c5:a2:8d:85:61:c7:dd:80:
76:17:98:60:a1:56:ad:93:c9:42:95:84:70:ab:dd:
52:f1:20:60:a9:87:99:81:3d:26:e4:0c:02:6c:b2:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:F9:D2:CC:58:EE:09:E5:BC:A7:28:83:6E:55:58:F3:3B:16:05
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:82:a2:82:ef:ec:58:1d:11:01:da:3e:c6:fd:5b:73:39:55:
da:2e:70:9b:d1:e8:b3:4a:6a:09:e6:f4:b3:99:bc:48:ac:00:
c9:5a:bd:2b:a1:ed:ba:66:1e:4f:bb:0e:3b:f9:74:8c:3e:95:
2a:29:0f:b0:62:e9:93:8d:fb:e5:0d:93:4b:19:75:bb:41:fb:
f1:15:f9:92:b4:c1:f7:95:ac:2a:be:99:af:b9:dc:f8:ee:ef:
7d:77:e8:ea:18:aa:87:0c:f4:ee:8f:06:3e:7b:06:09:eb:1d:
a0:9f:7d:a4:08:55:c6:9c:f3:6b:e0:90:3a:36:67:55:c4:fd:
9f:03:c9:61:a7:46:b4:0b:00:46:e4:a2:b5:8b:23:86:78:e7:
b3:ad:fa:0a:36:43:da:e4:ef:d2:e5:7d:6f:0a:49:94:05:e6:
a3:37:82:64:c7:6f:23:26:11:c7:a7:4d:46:53:fe:da:c8:d5:
a9:16:3a:6e:51:c2:77:ee:92:bd:1d:96:24:07:2a:3d:27:cc:
64:d5:54:7e:21:6a:73:b4:0d:5f:15:2d:84:52:b3:27:c5:8d:
88:f0:8b:97:01:0f:4b:6f:e7:a3:09:57:f8:94:10:fe:ba:97:
b0:7d:60:2a:31:df:e0:23:4a:55:f7:2e:09:88:97:ee:03:b5:
bf:a6:02:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIV64eLD8keVxpoKk+nVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj
ZTlkMjkwHhcNMjYwMzAxMTYwMDM5WhcNMjYwMzAyMTYwMDM5WjAzMTEwLwYDVQQD
EygwMWYxZjlkMmNjNThlZTA5ZTViY2E3Mjg4MzZlNTU1OGYzM2IxNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUgD5cQJi1TSHNH0JZH78ikV3Sgj
II6xTSdfLTAWBMa9YHIWxpFHs2n2WuSgmz9DtnZcjir1RDFZtHbh1NCp7FFaxVTB
hXlLsNiB4WW6cDq6voHQDaF6+/t3vczEUjD2ywVMut3InPwa72Fb8pd1foHyiTLw
aMKjkxUUOKPmO/WtA4Z/gAavat8WUHnPjWIQiTu/EDSbwFQIVMRcUiEPj+ex34ke
PBIO4i2exNZ4X+zWW5hgCw3+ecZckJI/q1ysso5UKul4RCnuOQ5+8LQmOROB5D7v
Af2nxaKNhWHH3YB2F5hgoVatk8lClYRwq91S8SBgqYeZgT0m5AwCbLLevQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHx+dLMWO4J5bynKINuVVjzOxYFMB8GA1UdIwQY
MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct
ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh
LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYKigu/s
WB0RAdo+xv1bczlV2i5wm9Hos0pqCeb0s5m8SKwAyVq9K6HtumYeT7sOO/l0jD6V
KikPsGLpk4375Q2TSxl1u0H78RX5krTB95WsKr6Zr7nc+O7vfXfo6hiqhwz07o8G
PnsGCesdoJ99pAhVxpzza+CQOjZnVcT9nwPJYadGtAsARuSitYsjhnjns636CjZD
2uTv0uV9bwpJlAXmozeCZMdvIyYRx6dNRlP+2sjVqRY6blHCd+6SvR2WJAcqPSfM
ZNVUfiFqc7QNXxUthFKzJ8WNiPCLlwEPS2/nowlX+JQQ/rqXsH1gKjHf4CNKVfcu
CYiX7gO1v6YCdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:39 2026 by rpki-client