Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: IP1/tdpmDJ7f6tRvKId4EjvX/cLJC3daxD+wy8bfKS0=
Subject key identifier: 17:A7:C6:69:8C:6F:46:ED:29:D1:B0:37:58:E6:EA:B3:B6:A1:48:A5
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 019CAD22707DF4490CDB8DB222D41F0B5387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0F3D
Signing time: Mon 02 Mar 2026 06:00:41 +0000
Manifest this update: Mon 02 Mar 2026 06:00:41 +0000
Manifest next update: Tue 03 Mar 2026 06:00:41 +0000
Files and hashes: 1: 4oS7f5aNMThyZTin7FlnkmNfcnM.roa (hash: Rq3EvqTLDbExRBsoliQM1/05zLN71ScvdftpfuJDfm0=)
2: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: BYw5gNnX59fnsR3kbV12ul97cNRi3WUDFs/ayHfVjMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:70:7d:f4:49:0c:db:8d:b2:22:d4:1f:0b:53:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Mar 2 06:00:41 2026 GMT
Not After : Mar 3 06:00:41 2026 GMT
Subject: CN=17a7c6698c6f46ed29d1b03758e6eab3b6a148a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:df:97:35:38:f5:cb:c3:f3:52:c3:d8:4c:
22:b3:97:09:64:87:38:ed:0c:f4:4e:57:4b:cd:6d:
de:73:d9:5a:13:b7:30:c5:7d:10:1d:0d:8a:e9:44:
53:1f:41:4e:3b:6f:dd:14:59:a5:7c:0d:5d:f8:e6:
00:57:fd:96:cc:3b:7b:17:ed:8e:af:7b:6e:ba:c9:
1b:89:ec:07:ea:fd:5e:f7:96:04:63:96:0d:f8:02:
ff:4f:e5:c5:ce:a8:00:9a:62:fd:6b:24:5c:29:52:
22:b8:c3:4d:f4:9a:22:6c:43:ad:79:dd:49:eb:60:
34:86:4f:75:6b:46:44:22:c7:35:a1:43:d7:88:1f:
ab:3d:d0:90:8b:ca:30:2e:35:33:18:42:5e:87:ee:
5f:e7:ac:54:4b:9a:8d:2b:ce:28:a8:4d:dc:86:c7:
70:b4:02:14:10:6b:90:31:fb:0a:ff:33:6b:ba:d9:
c7:8f:4d:75:76:8c:be:fa:9c:3a:e5:1b:24:66:c5:
3b:c9:8c:31:8a:2d:b6:14:ae:4b:1c:bf:df:6e:98:
47:d8:93:08:64:96:4f:3f:db:c2:57:ad:a1:f1:e3:
79:6f:a2:a5:ba:23:f6:95:3e:5b:c7:93:d8:5d:0f:
c9:89:fb:f6:e8:6c:c0:c5:ef:ae:48:78:9e:96:71:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A7:C6:69:8C:6F:46:ED:29:D1:B0:37:58:E6:EA:B3:B6:A1:48:A5
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:b7:6c:78:06:b8:05:e2:17:2b:e0:90:1a:d8:9c:87:79:
5c:5b:74:70:e7:92:cc:59:aa:93:80:3b:dd:9c:4f:e4:04:be:
fc:93:95:1c:74:bd:d9:6f:98:35:41:1a:08:bd:50:9f:f8:9f:
c9:46:81:0d:b2:13:26:b0:3a:00:46:f8:1f:ed:c4:6c:a2:be:
3c:0d:73:d7:44:a3:28:06:64:6d:08:a1:db:e3:24:33:c3:b9:
9b:f8:44:dd:cd:08:e7:23:21:de:fa:37:04:61:f9:6e:b0:a0:
72:5d:bc:3b:8f:e4:00:76:8e:ee:7c:70:5e:93:d8:98:3f:e9:
ef:2e:4f:ac:a5:d0:72:df:60:0c:e7:6b:71:cb:64:5f:3a:84:
c5:86:6d:ad:82:6b:b5:03:51:04:3a:ee:84:2c:3b:cd:74:09:
8e:ba:84:ab:a0:f9:28:09:90:3c:cf:0a:74:8e:19:90:f5:cb:
57:00:0e:37:59:ae:5f:73:08:06:1a:b4:7b:f6:ec:16:c9:cd:
79:eb:58:8b:04:3d:cf:33:23:9b:69:ce:b7:c4:1f:5d:70:64:
41:ff:30:18:98:2f:91:b8:20:78:01:8f:3d:42:6c:9c:87:96:
33:c8:57:83:9c:c8:70:0e:44:33:c1:fc:18:89:cb:76:f5:5b:
e4:8e:52:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytInB99EkM242yItQfC1OHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzYzN2E3MDlkZGJlN2Y2MjM3YWY4ZDViMjkxM2I0MjIz
NzE1N2MwHhcNMjYwMzAyMDYwMDQxWhcNMjYwMzAzMDYwMDQxWjAzMTEwLwYDVQQD
EygxN2E3YzY2OThjNmY0NmVkMjlkMWIwMzc1OGU2ZWFiM2I2YTE0OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs/flzU49cvD81LD2Ewis5cJZIc4
7Qz0TldLzW3ec9laE7cwxX0QHQ2K6URTH0FOO2/dFFmlfA1d+OYAV/2WzDt7F+2O
r3tuuskbiewH6v1e95YEY5YN+AL/T+XFzqgAmmL9ayRcKVIiuMNN9JoibEOted1J
62A0hk91a0ZEIsc1oUPXiB+rPdCQi8owLjUzGEJeh+5f56xUS5qNK84oqE3chsdw
tAIUEGuQMfsK/zNrutnHj011doy++pw65RskZsU7yYwxii22FK5LHL/fbphH2JMI
ZJZPP9vCV62h8eN5b6KluiP2lT5bx5PYXQ/Jifv26GzAxe+uSHielnGD4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBenxmmMb0btKdGwN1jm6rO2oUilMB8GA1UdIwQY
MBaAFCfGN6cJ3b5/YjevjVspE7QiNxV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMt
Y2JhZGI2NDM0MGUwLzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMtY2JhZGI2NDM0MGUw
LzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6e3bHgG
uAXiFyvgkBrYnId5XFt0cOeSzFmqk4A73ZxP5AS+/JOVHHS92W+YNUEaCL1Qn/if
yUaBDbITJrA6AEb4H+3EbKK+PA1z10SjKAZkbQih2+MkM8O5m/hE3c0I5yMh3vo3
BGH5brCgcl28O4/kAHaO7nxwXpPYmD/p7y5PrKXQct9gDOdrcctkXzqExYZtrYJr
tQNRBDruhCw7zXQJjrqEq6D5KAmQPM8KdI4ZkPXLVwAON1muX3MIBhq0e/bsFsnN
eetYiwQ9zzMjm2nOt8QfXXBkQf8wGJgvkbggeAGPPUJsnIeWM8hXg5zIcA5EM8H8
GInLdvVb5I5S6w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:21 2026 by rpki-client