Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier: bcHs220WW/9/W1EC6SjO3uXwaZ79bZ5nBcGISsmECYw=
Subject key identifier: 20:44:0F:89:88:A8:8B:2C:A9:C7:DC:12:1C:1A:6E:41:F6:7F:98:33
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 019CAA58CB3B92E4A88472AAAB73D26CF5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number: 0CEE
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: WArZWYHwF4S9nQhaJYZmZeozUPYWsD5z7zFlWCY/2lk=)
2: ybGK7D59nhsrV5zcx9pDpZj5zRw.roa (hash: lUVMObnC7ci77KqYjQKC6vaADGXMIPOZVK0KWxLUoCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cb:3b:92:e4:a8:84:72:aa:ab:73:d2:6c:f5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=20440f8988a88b2ca9c7dc121c1a6e41f67f9833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:6f:91:35:fb:dd:3f:ca:d9:2c:b9:4d:ff:
2d:22:55:24:a8:60:83:89:f5:52:e7:ab:65:c9:95:
e0:8f:33:5d:a3:d0:30:d0:c1:b1:f0:e1:cc:0e:6c:
66:45:d7:26:a1:1e:95:fc:e8:7a:a2:ad:83:5c:43:
19:82:ee:36:51:60:b3:c6:02:fb:ee:ee:74:bc:3d:
a5:f1:29:cc:38:f9:38:51:59:dc:cf:50:27:38:fb:
15:a1:f2:7a:16:23:21:67:eb:a9:d8:0f:be:1f:7c:
d3:a1:09:dc:dd:cf:d8:35:32:9f:3c:8d:86:74:a7:
e5:36:9e:1e:86:22:10:5b:3b:54:2d:6b:81:d2:8b:
12:16:0b:18:8b:18:74:fa:5f:9c:45:a6:d5:9b:05:
c0:fb:26:5e:56:14:b9:61:ab:79:f6:67:a8:2b:c5:
14:9b:2a:66:94:98:a3:0d:ca:f5:89:38:97:bb:e6:
e9:f1:c4:a2:a1:19:7e:46:56:b1:81:51:f7:a1:16:
e8:96:e2:ee:d9:4c:c0:7b:6c:4e:31:7d:d4:a5:c0:
d8:ef:9d:2d:6f:92:ec:1e:38:74:9e:13:a7:41:84:
be:74:1b:36:75:9f:2e:25:b4:16:9f:57:77:dc:8c:
0a:cf:58:4e:cf:86:51:9e:be:bd:a7:99:8b:5b:2e:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:44:0F:89:88:A8:8B:2C:A9:C7:DC:12:1C:1A:6E:41:F6:7F:98:33
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:d9:39:64:5d:65:32:e1:05:41:ba:be:17:02:a0:d2:08:
17:08:fb:bf:40:66:d5:a4:2d:6e:60:cf:66:9f:e0:21:5d:1e:
6c:81:25:90:f0:fd:ed:ae:2a:24:38:11:e0:ea:b2:99:03:6c:
19:5c:a1:de:f0:75:c9:1b:18:db:58:5f:79:b7:93:bc:13:6a:
81:00:79:f8:98:ec:78:92:19:47:5b:c4:46:1d:63:de:8d:39:
88:91:4b:e2:eb:b0:82:07:7b:c9:dd:56:20:9b:b1:28:11:64:
ef:b0:65:ff:a9:8c:14:e5:79:38:4b:13:a6:18:bf:53:22:5c:
a6:ec:24:f1:2d:e4:68:2f:87:1e:8a:56:41:a5:65:44:88:94:
22:58:18:2f:e8:79:0d:e9:15:32:8a:3d:86:70:ec:0c:1e:d4:
11:2d:3f:67:84:46:50:76:8a:72:41:e8:2a:9f:77:d6:57:7a:
5a:3e:41:3f:c0:32:81:fe:b0:bc:ce:da:66:b7:7a:ab:b0:4b:
f3:1b:be:25:0c:9c:5b:ca:60:f0:09:e1:fc:15:d3:e2:04:9d:
d6:79:e6:8f:b6:06:01:3a:20:df:a6:2e:e9:dd:2d:ce:cb:91:
49:48:16:54:3c:11:11:74:d0:d5:5b:5e:d6:f9:9d:a3:ca:e5:
49:b2:4e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWMs7kuSohHKqq3PSbPXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjA3NTNkZDUxNjMzYWEyZTE3YTkyYzU5ZjRjNDg0NWQ4
NzZjZDMwHhcNMjYwMzAxMTcwMTExWhcNMjYwMzAyMTcwMTExWjAzMTEwLwYDVQQD
EygyMDQ0MGY4OTg4YTg4YjJjYTljN2RjMTIxYzFhNmU0MWY2N2Y5ODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLtvkTX73T/K2Sy5Tf8tIlUkqGCD
ifVS56tlyZXgjzNdo9Aw0MGx8OHMDmxmRdcmoR6V/Oh6oq2DXEMZgu42UWCzxgL7
7u50vD2l8SnMOPk4UVncz1AnOPsVofJ6FiMhZ+up2A++H3zToQnc3c/YNTKfPI2G
dKflNp4ehiIQWztULWuB0osSFgsYixh0+l+cRabVmwXA+yZeVhS5Yat59meoK8UU
mypmlJijDcr1iTiXu+bp8cSioRl+RlaxgVH3oRboluLu2UzAe2xOMX3UpcDY750t
b5LsHjh0nhOnQYS+dBs2dZ8uJbQWn1d33IwKz1hOz4ZRnr69p5mLWy7o+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBED4mIqIssqcfcEhwabkH2f5gzMB8GA1UdIwQY
MBaAFIwgdT3VFjOqLhepLFn0xIRdh2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYt
YzI5YmViMWE0NzM0LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYtYzI5YmViMWE0NzM0
LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH37ZOWRd
ZTLhBUG6vhcCoNIIFwj7v0Bm1aQtbmDPZp/gIV0ebIElkPD97a4qJDgR4OqymQNs
GVyh3vB1yRsY21hfebeTvBNqgQB5+JjseJIZR1vERh1j3o05iJFL4uuwggd7yd1W
IJuxKBFk77Bl/6mMFOV5OEsTphi/UyJcpuwk8S3kaC+HHopWQaVlRIiUIlgYL+h5
DekVMoo9hnDsDB7UES0/Z4RGUHaKckHoKp931ld6Wj5BP8Aygf6wvM7aZrd6q7BL
8xu+JQycW8pg8Anh/BXT4gSd1nnmj7YGATog36Yu6d0tzsuRSUgWVDwREXTQ1Vte
1vmdo8rlSbJO3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:54 2026 by rpki-client