Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: BSjghZpiyn66d+pFYWBsb08TzONt5dKhudpT6heq7s4=
Subject key identifier: 79:EC:5A:6E:E9:01:5D:72:51:88:E8:51:8C:7E:C2:AC:5B:82:6C:DD
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 019CAEA3C3C95CDCF979969063BCEDE672DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0D24
Signing time: Mon 02 Mar 2026 13:01:33 +0000
Manifest this update: Mon 02 Mar 2026 13:01:33 +0000
Manifest next update: Tue 03 Mar 2026 13:01:33 +0000
Files and hashes: 1: 4N3tODFK8nz9NNMiv7CviryuDAs.roa (hash: X3aNYoDshM8q/qhUCoVbmt8vv1qoQt4+Ks1Zknci3aA=)
2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: OiJfyoDbkfAGHLhCJhSnj4c33OB542lnFCPk7mwdKbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:c3:c9:5c:dc:f9:79:96:90:63:bc:ed:e6:72:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Mar 2 13:01:33 2026 GMT
Not After : Mar 3 13:01:33 2026 GMT
Subject: CN=79ec5a6ee9015d725188e8518c7ec2ac5b826cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:5b:eb:e1:92:f8:60:78:a1:4b:62:ae:e9:0a:
e6:31:77:31:19:54:dd:62:7e:8a:ff:0f:d5:20:5c:
a5:fb:a9:f3:6d:7c:cc:93:86:d1:af:75:66:2d:5a:
dc:e7:f3:1f:df:1e:de:91:b7:d2:33:63:ea:cd:32:
26:43:70:fb:ef:93:69:e3:ba:21:80:ad:6b:db:0b:
c9:9c:5d:f0:a4:eb:22:f8:74:73:c8:13:de:c3:c6:
b1:81:a5:80:99:57:63:9f:5a:74:bc:cf:44:a9:ea:
30:0b:f2:dd:ec:9a:d5:71:86:14:97:b1:7e:b5:11:
6b:47:b7:87:22:76:15:03:64:4c:64:1c:4d:3a:df:
40:85:55:bf:31:a0:73:50:c5:d1:57:85:7d:4d:80:
04:4b:99:6e:70:56:29:ad:bf:5a:14:1c:d8:8a:0f:
9b:a6:7c:1c:84:fd:e3:01:32:ae:79:eb:b5:2d:d3:
37:81:3f:e4:21:9f:03:b1:f6:9e:51:31:f8:1d:4f:
03:20:27:89:c6:6a:c3:c4:2d:d0:88:de:fd:36:5d:
06:3e:7d:15:6e:ce:97:30:3e:29:a8:71:19:ae:21:
ff:90:64:4d:4c:b1:b6:e9:12:80:36:85:47:1e:64:
e7:6f:10:c2:70:b4:be:72:2a:7c:9e:23:d0:f2:7a:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:5A:6E:E9:01:5D:72:51:88:E8:51:8C:7E:C2:AC:5B:82:6C:DD
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:96:a5:80:ed:20:8a:0a:ec:35:0a:34:14:0d:c5:11:3e:9b:
20:e7:52:27:4c:7e:ed:c3:c9:94:45:75:e4:58:3b:36:2c:58:
df:55:73:5a:2e:20:9d:27:e6:92:ea:c3:20:b8:1e:bf:0a:4f:
ce:86:00:1d:ec:b9:b7:52:36:82:b8:a4:ba:36:eb:b5:c4:fe:
87:d2:7e:c8:3b:6d:23:c1:79:5a:40:63:7e:3e:52:d8:bf:8e:
8a:7c:ce:7e:e1:92:69:eb:86:3a:81:f0:c4:36:68:c2:63:50:
45:7c:e5:d3:f5:17:2f:ee:34:e3:f2:b0:85:2c:8d:10:3f:75:
b2:84:76:c0:dd:09:00:d0:37:03:47:99:b3:f9:ae:c5:36:d2:
c4:36:0f:08:01:68:a4:15:2c:41:d9:c8:2c:cb:f1:54:17:59:
6e:53:29:fa:f8:38:7f:8a:ff:f6:8a:8d:07:5f:d6:c9:92:08:
31:1b:fa:d2:c5:d8:b2:4b:9b:e5:89:03:dd:2f:a1:a6:ad:47:
bb:5e:a3:7a:d5:49:6e:0b:9d:cb:4d:43:d2:03:73:43:02:78:
c9:2a:6f:13:61:f8:69:bb:84:87:42:f4:c6:60:ba:83:a3:21:
e6:71:9a:e0:a3:10:8d:62:f8:d4:be:4a:6f:22:b3:5b:67:fc:
f6:d0:9b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo8PJXNz5eZaQY7zt5nLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1
ODY5MWEwHhcNMjYwMzAyMTMwMTMzWhcNMjYwMzAzMTMwMTMzWjAzMTEwLwYDVQQD
Eyg3OWVjNWE2ZWU5MDE1ZDcyNTE4OGU4NTE4YzdlYzJhYzViODI2Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Fvr4ZL4YHihS2Ku6QrmMXcxGVTd
Yn6K/w/VIFyl+6nzbXzMk4bRr3VmLVrc5/Mf3x7ekbfSM2PqzTImQ3D775Np47oh
gK1r2wvJnF3wpOsi+HRzyBPew8axgaWAmVdjn1p0vM9EqeowC/Ld7JrVcYYUl7F+
tRFrR7eHInYVA2RMZBxNOt9AhVW/MaBzUMXRV4V9TYAES5lucFYprb9aFBzYig+b
pnwchP3jATKueeu1LdM3gT/kIZ8DsfaeUTH4HU8DICeJxmrDxC3QiN79Nl0GPn0V
bs6XMD4pqHEZriH/kGRNTLG26RKANoVHHmTnbxDCcLS+cip8niPQ8nr0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnsWm7pAV1yUYjoUYx+wqxbgmzdMB8GA1UdIwQY
MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt
NzkwMjQ0NTA4ZGY0LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0
LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpalgO0g
igrsNQo0FA3FET6bIOdSJ0x+7cPJlEV15Fg7NixY31VzWi4gnSfmkurDILgevwpP
zoYAHey5t1I2grikujbrtcT+h9J+yDttI8F5WkBjfj5S2L+OinzOfuGSaeuGOoHw
xDZowmNQRXzl0/UXL+404/KwhSyNED91soR2wN0JANA3A0eZs/muxTbSxDYPCAFo
pBUsQdnILMvxVBdZblMp+vg4f4r/9oqNB1/WyZIIMRv60sXYskub5YkD3S+hpq1H
u16jetVJbgudy01D0gNzQwJ4ySpvE2H4abuEh0L0xmC6g6Mh5nGa4KMQjWL41L5K
byKzW2f89tCbeg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:55 2026 by rpki-client