Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: rE6lwGwHGfNe8JisFOnvrhugHMC4Q79R22tOsU6hT0w=
Subject key identifier: F5:39:3C:F9:50:31:7D:2A:3D:55:A5:EF:32:43:32:A4:54:6A:B7:1B
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 019CA9EB05143C012FDA7768BAFC289DE244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 15:01:17 +0000
Manifest this update: Sun 01 Mar 2026 15:01:17 +0000
Manifest next update: Mon 02 Mar 2026 15:01:17 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: YyjaxhiWkn+u44RsFXPcM6Z68u9M4FIvv3TMlU5orWw=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:05:14:3c:01:2f:da:77:68:ba:fc:28:9d:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Mar 1 15:01:17 2026 GMT
Not After : Mar 2 15:01:17 2026 GMT
Subject: CN=f5393cf950317d2a3d55a5ef324332a4546ab71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:06:26:8a:30:b2:07:96:0f:dc:11:40:3d:09:
2c:ab:d3:d5:94:53:3d:37:a6:28:7a:4f:90:b0:f1:
10:84:19:3a:0c:72:93:ae:70:cc:3f:16:0a:6d:28:
b1:a1:4b:15:b5:01:66:c7:eb:19:96:82:1e:84:d9:
4d:d8:b4:c7:5d:9f:2c:0b:bc:3e:98:43:0a:7e:96:
32:bb:4d:e7:40:c6:82:89:de:7d:63:fd:db:f8:5d:
34:d4:7c:8f:82:2c:18:37:02:8a:e0:27:92:20:7d:
9f:46:5f:2d:6e:45:72:2d:f6:9c:c3:4d:a4:bf:53:
46:a7:b5:f7:42:32:e6:19:2c:6c:9f:c9:b0:61:b2:
c7:29:ff:b7:3e:51:7d:69:da:0d:0e:4a:f9:60:cc:
d1:a9:5b:95:3a:16:76:2e:a4:81:2e:55:21:4e:37:
85:84:c0:2d:3a:23:6b:6d:83:b0:26:04:c7:94:9f:
6e:0b:10:5d:de:01:7b:25:43:fa:f6:4f:d5:c4:91:
de:9b:45:26:e7:bb:3e:23:ec:ca:6f:02:08:18:38:
91:69:e2:7e:f5:98:03:b1:d4:00:09:fa:a3:e2:52:
61:9e:88:a7:56:7d:d1:07:e4:08:91:9c:75:de:3f:
70:79:e4:e4:80:5a:8d:83:6f:05:85:4f:b1:b9:e2:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:3C:F9:50:31:7D:2A:3D:55:A5:EF:32:43:32:A4:54:6A:B7:1B
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:eb:1b:6b:d2:e4:8b:d3:69:48:21:d4:d3:43:4f:d5:7e:8c:
b0:71:35:9f:9f:e6:49:9a:d3:ca:2d:26:18:c9:87:20:f8:3c:
9d:51:2d:f7:77:80:0f:ee:e9:ba:f2:83:8e:f2:9e:3e:8e:f5:
c8:d0:c7:69:cb:7c:38:9c:b0:10:20:dc:66:4b:6f:09:47:de:
4e:b4:50:7e:fa:ad:f5:e0:73:42:4b:64:43:f8:b7:71:fd:65:
98:21:d7:eb:26:34:f5:16:1f:d4:bf:a9:dc:e2:b4:2a:79:9c:
b1:20:6e:89:27:41:a5:4b:fd:b0:a9:3d:43:87:dc:ce:e9:ce:
fc:c1:e3:c3:8f:6b:5e:ce:16:4f:28:c5:dd:f0:b2:1e:f7:24:
a9:64:36:1c:57:b7:24:76:9e:79:16:88:1e:2a:db:87:bd:68:
82:9b:9e:a3:91:09:e7:09:fb:a2:a3:6b:00:71:46:e9:2d:b8:
6d:2e:d6:55:80:5c:2b:be:0c:a8:6a:74:5a:0a:41:30:2d:e8:
93:dc:57:9c:bc:72:93:d1:71:2c:5d:46:ca:3a:e8:3d:14:84:
c7:cd:21:14:ed:75:58:03:71:18:9f:81:f6:3d:9e:bb:9d:4b:
fa:1e:cc:68:31:a4:78:51:f4:1a:dd:ed:19:55:f4:a1:c2:88:
ab:3e:f7:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6wUUPAEv2ndouvwoneJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTBmN2JiYmU0MDMxYTI0ZWYxYjlkYjE5NmFhYjA2NDJl
ODRhMDYwHhcNMjYwMzAxMTUwMTE3WhcNMjYwMzAyMTUwMTE3WjAzMTEwLwYDVQQD
EyhmNTM5M2NmOTUwMzE3ZDJhM2Q1NWE1ZWYzMjQzMzJhNDU0NmFiNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQYmijCyB5YP3BFAPQksq9PVlFM9
N6Yoek+QsPEQhBk6DHKTrnDMPxYKbSixoUsVtQFmx+sZloIehNlN2LTHXZ8sC7w+
mEMKfpYyu03nQMaCid59Y/3b+F001HyPgiwYNwKK4CeSIH2fRl8tbkVyLfacw02k
v1NGp7X3QjLmGSxsn8mwYbLHKf+3PlF9adoNDkr5YMzRqVuVOhZ2LqSBLlUhTjeF
hMAtOiNrbYOwJgTHlJ9uCxBd3gF7JUP69k/VxJHem0Um57s+I+zKbwIIGDiRaeJ+
9ZgDsdQACfqj4lJhnoinVn3RB+QIkZx13j9weeTkgFqNg28FhU+xueKxSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU5PPlQMX0qPVWl7zJDMqRUarcbMB8GA1UdIwQY
MBaAFCfg97u+QDGiTvG52xlqqwZC6EoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYt
MzQ2YTNlYzE4NjhjLzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYtMzQ2YTNlYzE4Njhj
LzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOsba9Lk
i9NpSCHU00NP1X6MsHE1n5/mSZrTyi0mGMmHIPg8nVEt93eAD+7puvKDjvKePo71
yNDHact8OJywECDcZktvCUfeTrRQfvqt9eBzQktkQ/i3cf1lmCHX6yY09RYf1L+p
3OK0KnmcsSBuiSdBpUv9sKk9Q4fczunO/MHjw49rXs4WTyjF3fCyHvckqWQ2HFe3
JHaeeRaIHirbh71ogpueo5EJ5wn7oqNrAHFG6S24bS7WVYBcK74MqGp0WgpBMC3o
k9xXnLxyk9FxLF1GyjroPRSEx80hFO11WANxGJ+B9j2eu51L+h7MaDGkeFH0Gt3t
GVX0ocKIqz73pw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:29 2026 by rpki-client