Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: HNb7BmqX1AeOGQF4y+iiDWmeo7pKj4QMGHGbhYm19Vo=
Subject key identifier: 9D:BC:3B:E5:34:0F:CC:3D:DF:48:71:D3:A7:24:A6:1B:B3:A6:DE:81
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019CAA8FD79AF5D63C163C2721045135E7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 1368
Signing time: Sun 01 Mar 2026 18:01:19 +0000
Manifest this update: Sun 01 Mar 2026 18:01:19 +0000
Manifest next update: Mon 02 Mar 2026 18:01:19 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: BWKQr+ztt2Ig15uoJMoDJ5BnGOi0jXuLF8Tapl4LEPw=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d7:9a:f5:d6:3c:16:3c:27:21:04:51:35:e7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Mar 1 18:01:19 2026 GMT
Not After : Mar 2 18:01:19 2026 GMT
Subject: CN=9dbc3be5340fcc3ddf4871d3a724a61bb3a6de81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:ee:d2:5a:2f:5b:24:01:c6:a0:68:a4:43:
dc:07:09:ae:a0:62:23:0b:a6:7a:dc:54:45:9a:b2:
2e:e3:b3:c0:15:dc:98:0c:90:a9:15:dd:39:e0:74:
3d:2f:a6:6c:a8:9e:cb:51:63:79:63:16:fe:dd:0b:
ec:48:6f:e8:08:78:2a:1a:2b:fc:05:57:47:73:7b:
f4:a4:bf:ff:af:cc:b7:75:05:9f:1b:ec:3a:f7:59:
0c:3f:c9:36:45:9d:e5:6d:a4:f0:e8:00:8d:49:c3:
f3:e2:37:0e:37:dc:75:4f:1e:6d:01:dc:b5:86:2e:
94:85:80:cf:9d:8a:b0:ea:89:79:04:90:4d:55:57:
fb:2c:64:58:34:f8:e4:de:91:5e:61:ef:71:ff:e9:
87:69:b8:95:17:02:76:e3:8b:36:91:55:13:e8:10:
49:ed:f0:0d:94:48:2f:b0:af:12:1e:da:e1:02:b9:
62:ca:a5:f0:62:36:dd:78:e8:dc:09:11:6a:00:32:
47:c3:eb:ac:f1:af:df:29:9c:3e:90:3e:ac:17:22:
58:65:cd:34:f9:4d:ec:2f:7e:ec:c2:16:78:5c:b0:
f5:44:f4:12:3e:0b:8e:2a:63:1c:bc:b7:5a:17:d2:
98:04:e6:2d:8b:f7:38:c2:fb:a3:98:b9:73:98:bf:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BC:3B:E5:34:0F:CC:3D:DF:48:71:D3:A7:24:A6:1B:B3:A6:DE:81
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:76:87:84:98:e5:82:2c:8f:e7:f8:81:4a:68:2c:d2:fe:
53:85:99:fd:c3:32:dc:e8:50:54:58:23:d9:12:1a:80:d3:be:
43:24:a4:ad:7f:24:03:37:c0:ea:13:7e:0f:b3:45:5c:a2:d4:
c4:14:dd:2d:89:3e:13:71:1b:88:60:e5:bd:a9:84:80:d5:a5:
79:0e:55:00:74:68:2c:95:cb:16:87:e2:57:dc:63:75:d0:c7:
a5:5e:6c:ec:64:a8:8f:11:a0:93:d8:aa:3d:8b:4e:72:c0:1c:
92:92:c6:2c:2e:89:38:7d:f0:ed:88:c0:d1:67:06:22:ef:0f:
97:14:8e:af:25:6c:5b:c2:4b:7b:e5:bf:00:55:b5:63:bf:fe:
5f:cc:77:1c:c8:04:bd:c6:71:91:81:7b:23:c5:f2:a9:85:b7:
93:11:49:10:be:80:20:40:50:8d:67:c3:1f:c2:4f:f0:9c:85:
92:69:c0:c6:64:ba:c5:10:68:6b:81:27:e3:fa:54:aa:78:fb:
1b:9a:0f:c0:a0:bb:c7:5a:0c:6d:13:ba:ea:ac:4e:68:c2:f0:
b5:d5:a6:04:3b:6b:b9:b9:d9:5e:f8:5d:03:4c:3a:d9:a2:3e:
91:64:6c:2d:63:fa:ad:18:43:d1:e9:d3:34:7a:dd:53:89:8d:
e2:7c:b0:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj9ea9dY8FjwnIQRRNeeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2
ZWY0NDMwHhcNMjYwMzAxMTgwMTE5WhcNMjYwMzAyMTgwMTE5WjAzMTEwLwYDVQQD
Eyg5ZGJjM2JlNTM0MGZjYzNkZGY0ODcxZDNhNzI0YTYxYmIzYTZkZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFLu0lovWyQBxqBopEPcBwmuoGIj
C6Z63FRFmrIu47PAFdyYDJCpFd054HQ9L6ZsqJ7LUWN5Yxb+3QvsSG/oCHgqGiv8
BVdHc3v0pL//r8y3dQWfG+w691kMP8k2RZ3lbaTw6ACNScPz4jcON9x1Tx5tAdy1
hi6UhYDPnYqw6ol5BJBNVVf7LGRYNPjk3pFeYe9x/+mHabiVFwJ244s2kVUT6BBJ
7fANlEgvsK8SHtrhArliyqXwYjbdeOjcCRFqADJHw+us8a/fKZw+kD6sFyJYZc00
+U3sL37swhZ4XLD1RPQSPguOKmMcvLdaF9KYBOYti/c4wvujmLlzmL9WFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ28O+U0D8w930hx06ckphuzpt6BMB8GA1UdIwQY
MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt
MzFiYWY2ZWVkZThhLzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh
LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATax2h4SY
5YIsj+f4gUpoLNL+U4WZ/cMy3OhQVFgj2RIagNO+QySkrX8kAzfA6hN+D7NFXKLU
xBTdLYk+E3EbiGDlvamEgNWleQ5VAHRoLJXLFofiV9xjddDHpV5s7GSojxGgk9iq
PYtOcsAckpLGLC6JOH3w7YjA0WcGIu8PlxSOryVsW8JLe+W/AFW1Y7/+X8x3HMgE
vcZxkYF7I8XyqYW3kxFJEL6AIEBQjWfDH8JP8JyFkmnAxmS6xRBoa4En4/pUqnj7
G5oPwKC7x1oMbRO66qxOaMLwtdWmBDtrubnZXvhdA0w62aI+kWRsLWP6rRhD0enT
NHrdU4mN4nywlg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:54 2026 by rpki-client