Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: c1hCXfSsVah+67w79sylMyxv7XEuoqYg9pxgMRMy5Tw=
Subject key identifier: 6D:A2:32:82:0D:E3:9E:F8:EE:F8:F4:18:45:C0:20:8D:57:78:AA:19
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019CAB348E39CB26887DCEF337668B4F362C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0B10
Signing time: Sun 01 Mar 2026 21:01:13 +0000
Manifest this update: Sun 01 Mar 2026 21:01:13 +0000
Manifest next update: Mon 02 Mar 2026 21:01:13 +0000
Files and hashes: 1: Gz70wja6JZyjI_mWX47Bb5tQSQc.roa (hash: iWsBF2Gi5zq+y0imf0T0eK6i4zGzIKtjjri3CGuQTR8=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: 63riQpYZvdfjYABZysr1mBYznyIItlDXxsiI7NnCMQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8e:39:cb:26:88:7d:ce:f3:37:66:8b:4f:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Mar 1 21:01:13 2026 GMT
Not After : Mar 2 21:01:13 2026 GMT
Subject: CN=6da232820de39ef8eef8f41845c0208d5778aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:3e:47:64:44:ab:cc:6e:8f:9a:d5:35:36:
1e:49:9c:ad:78:69:a0:f5:9c:d1:a1:25:cc:17:d6:
a1:06:f3:47:5b:d6:3b:ee:51:2d:6c:27:df:95:01:
ec:81:0a:db:d6:1f:a7:2b:00:1d:df:6c:43:cc:ae:
a2:c5:f8:bd:b2:6f:fe:c0:96:2b:ac:55:0e:f3:93:
fb:83:08:88:bc:a0:a8:e8:d6:a5:7d:34:a1:3a:84:
26:d3:65:30:98:e0:14:8f:88:00:51:1b:f3:3c:78:
e6:95:d9:4b:4d:5d:f5:fb:f2:27:ab:6e:d0:ed:29:
11:b5:33:56:f5:43:10:21:43:93:3b:15:98:85:c3:
80:02:df:22:71:a6:af:fd:f5:35:4a:5d:b5:0f:79:
dd:b3:6a:a0:78:cc:6f:56:e4:82:19:6d:9e:a2:27:
42:11:7c:09:4a:53:c2:6c:d0:54:ff:dd:96:2b:58:
76:65:f4:e5:a5:5e:4e:e5:d4:f6:ab:b0:d2:4d:e7:
f6:8c:b7:9c:49:aa:47:43:5a:8e:69:5e:9f:44:f4:
21:a3:38:e6:29:b9:8c:ce:a7:1a:6e:8f:d5:16:66:
4d:11:61:c8:de:aa:82:d9:eb:97:76:c4:9e:a9:84:
cd:0f:e0:1d:95:d7:c1:2e:8a:d6:22:a7:ea:47:f7:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:32:82:0D:E3:9E:F8:EE:F8:F4:18:45:C0:20:8D:57:78:AA:19
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c8:22:2a:92:ab:5c:d6:76:fc:64:e6:da:88:ef:d3:38:a9:
1a:c4:dd:83:be:af:34:10:fb:a1:a2:ab:42:26:52:84:5e:33:
c5:19:c9:15:41:fb:1b:ab:7f:9a:79:47:da:2f:9f:ce:00:14:
bc:aa:d5:a4:49:b9:17:c6:3e:ca:4a:42:6b:de:a6:a3:28:3a:
f8:46:18:ec:ab:4a:43:ce:aa:72:01:2b:ab:51:4e:4c:ba:45:
7a:94:fb:ed:c7:8c:fc:a1:d0:66:58:9a:ae:2b:e9:94:e9:7e:
f5:d3:20:94:f7:68:e2:35:56:ce:8e:cf:4e:bc:fa:4a:b5:98:
df:a8:dc:3d:f9:b2:f2:47:41:3f:51:b1:07:c3:70:b7:ab:e4:
13:19:e6:cc:90:18:e5:6c:8b:d7:4a:b7:e1:b1:f7:10:e5:fa:
74:3b:b5:4c:c0:28:fb:3f:ff:86:3f:e2:c7:19:86:74:d1:74:
12:bc:51:8e:4f:78:c4:17:c2:17:42:fb:3b:ee:1d:3d:56:df:
56:da:77:12:0e:44:76:56:c0:06:5f:79:49:fe:8a:a4:31:2b:
6b:cf:20:41:22:87:09:55:22:69:91:e5:fb:d8:c2:73:bf:1c:
a9:e3:c6:b7:b5:89:88:f1:98:97:b6:70:d6:ab:39:bc:71:1e:
b7:f4:b4:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNI45yyaIfc7zN2aLTzYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlODIyM2VkZjBhZTQyNTYwZThmMGMyY2IwNTllM2M4ZjVh
ZTRkMWEwHhcNMjYwMzAxMjEwMTEzWhcNMjYwMzAyMjEwMTEzWjAzMTEwLwYDVQQD
Eyg2ZGEyMzI4MjBkZTM5ZWY4ZWVmOGY0MTg0NWMwMjA4ZDU3NzhhYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfE+R2REq8xuj5rVNTYeSZyteGmg
9ZzRoSXMF9ahBvNHW9Y77lEtbCfflQHsgQrb1h+nKwAd32xDzK6ixfi9sm/+wJYr
rFUO85P7gwiIvKCo6NalfTShOoQm02UwmOAUj4gAURvzPHjmldlLTV31+/Inq27Q
7SkRtTNW9UMQIUOTOxWYhcOAAt8icaav/fU1Sl21D3nds2qgeMxvVuSCGW2eoidC
EXwJSlPCbNBU/92WK1h2ZfTlpV5O5dT2q7DSTef2jLecSapHQ1qOaV6fRPQhozjm
KbmMzqcabo/VFmZNEWHI3qqC2euXdsSeqYTND+AdldfBLorWIqfqR/cdiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2iMoIN45747vj0GEXAII1XeKoZMB8GA1UdIwQY
MBaAFI6CI+3wrkJWDo8MLLBZ48j1rk0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEt
ZDE2ODk1ZTBlMThlLzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEtZDE2ODk1ZTBlMThl
LzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMgiKpKr
XNZ2/GTm2ojv0zipGsTdg76vNBD7oaKrQiZShF4zxRnJFUH7G6t/mnlH2i+fzgAU
vKrVpEm5F8Y+ykpCa96moyg6+EYY7KtKQ86qcgErq1FOTLpFepT77ceM/KHQZlia
rivplOl+9dMglPdo4jVWzo7PTrz6SrWY36jcPfmy8kdBP1GxB8Nwt6vkExnmzJAY
5WyL10q34bH3EOX6dDu1TMAo+z//hj/ixxmGdNF0ErxRjk94xBfCF0L7O+4dPVbf
Vtp3Eg5EdlbABl95Sf6KpDEra88gQSKHCVUiaZHl+9jCc78cqePGt7WJiPGYl7Zw
1qs5vHEet/S0kQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:24 2026 by rpki-client