Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: WQ/fU8rT1lPAuzJMdWE3TrA+WDchxmG63hFQVzyzqBs=
Subject key identifier: 1A:56:80:D4:77:C8:30:7F:9F:27:30:E7:43:FA:46:9E:38:BB:39:57
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 019CAD22415D9728155E20F1BF722CDA3F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0F1E
Signing time: Mon 02 Mar 2026 06:00:29 +0000
Manifest this update: Mon 02 Mar 2026 06:00:29 +0000
Manifest next update: Tue 03 Mar 2026 06:00:29 +0000
Files and hashes: 1: Brthxz7priRlJYXJ_EOaKSwdKP4.roa (hash: E8F9SE2VrkKt66H0FbYQUbq5xRyURkLNcY48oGiYLYc=)
2: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: dd915HCY1RUg5wbhXefk1A8QYirrGcTx2PWqioLYCJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:41:5d:97:28:15:5e:20:f1:bf:72:2c:da:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Mar 2 06:00:29 2026 GMT
Not After : Mar 3 06:00:29 2026 GMT
Subject: CN=1a5680d477c8307f9f2730e743fa469e38bb3957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:e8:99:a0:95:98:dd:d9:12:7e:27:41:a3:
4c:80:66:cd:f6:6b:74:37:5b:75:94:07:d0:de:e9:
82:eb:2f:10:50:48:e4:6e:6b:88:85:51:d5:c0:f3:
11:9e:d6:c9:ab:ac:23:69:a1:9c:13:fc:33:b3:22:
20:0e:f6:42:ac:75:1d:61:8c:c2:53:63:ab:1f:61:
14:a3:74:a5:59:92:55:7b:21:5f:e9:e9:ee:59:ef:
f4:c8:4b:76:0e:27:22:47:05:26:f0:6c:61:d3:06:
ad:4f:1a:d3:f8:28:bd:f6:92:45:dc:0a:c6:2f:ff:
5a:fc:1a:6e:40:db:a5:09:7c:19:28:bb:88:7b:8d:
5f:be:c6:c3:ad:91:c6:66:0c:a3:f8:b8:1c:69:ee:
a3:e3:41:15:7e:6b:37:c4:08:e1:13:bc:f7:0c:a1:
1e:98:53:bb:01:55:ac:fa:12:20:ac:79:00:f5:f8:
81:7e:57:a1:f8:56:cc:9d:57:a4:01:be:ec:4a:c0:
11:e0:36:81:d8:73:70:b9:42:13:fb:22:65:95:c7:
6b:8d:4e:2e:1a:23:55:86:93:17:d2:fb:0f:55:38:
2c:8a:d0:78:09:ef:ef:35:f7:8c:36:5c:47:27:4b:
a3:57:ff:f7:9a:00:b0:88:24:10:cb:ac:3a:55:b5:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:80:D4:77:C8:30:7F:9F:27:30:E7:43:FA:46:9E:38:BB:39:57
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d6:52:cb:4c:7c:78:90:ab:4a:91:ab:31:e2:5d:14:4f:46:
6f:4e:44:fe:14:ab:e7:58:c6:d9:73:b5:9e:25:66:91:f2:f5:
d7:de:5b:98:f7:8f:21:4f:2a:e7:a0:55:99:f9:8b:8f:fe:db:
ed:07:fe:62:3c:5a:5a:66:a5:d8:7e:d5:ef:77:7b:55:a2:75:
2b:7a:a1:88:8e:55:66:1b:47:9a:fb:02:f0:4c:02:c4:41:93:
72:ad:0f:2a:5f:ae:80:30:4f:a0:33:56:ef:66:fe:ec:4f:89:
84:74:59:20:88:98:8a:40:2a:cb:03:9f:75:d4:4e:45:42:17:
c0:65:c7:11:20:34:2a:26:75:6b:2c:df:cb:62:9e:17:a0:d6:
5c:8d:3d:52:38:1e:56:1e:26:9f:83:15:65:c1:ff:cd:ac:3a:
86:2c:7b:13:dc:c1:2e:35:01:43:05:7d:82:a9:4d:23:8f:1b:
fb:c3:eb:a9:c4:bf:2f:27:c8:a6:8d:0f:60:66:c5:7b:95:87:
84:12:88:9f:61:a0:4b:3c:75:02:c0:b8:e6:78:8f:d1:8a:3b:
15:59:50:7b:5c:6e:aa:9f:9f:08:cb:a1:08:5e:f9:68:1d:a7:
74:c8:25:b5:de:95:69:5a:81:f8:b6:d3:d6:11:d6:ef:29:b9:
17:c1:b7:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIkFdlygVXiDxv3Is2j8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl
MWNjOTUwHhcNMjYwMzAyMDYwMDI5WhcNMjYwMzAzMDYwMDI5WjAzMTEwLwYDVQQD
EygxYTU2ODBkNDc3YzgzMDdmOWYyNzMwZTc0M2ZhNDY5ZTM4YmIzOTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5nomaCVmN3ZEn4nQaNMgGbN9mt0
N1t1lAfQ3umC6y8QUEjkbmuIhVHVwPMRntbJq6wjaaGcE/wzsyIgDvZCrHUdYYzC
U2OrH2EUo3SlWZJVeyFf6enuWe/0yEt2DiciRwUm8Gxh0watTxrT+Ci99pJF3ArG
L/9a/BpuQNulCXwZKLuIe41fvsbDrZHGZgyj+Lgcae6j40EVfms3xAjhE7z3DKEe
mFO7AVWs+hIgrHkA9fiBfleh+FbMnVekAb7sSsAR4DaB2HNwuUIT+yJllcdrjU4u
GiNVhpMX0vsPVTgsitB4Ce/vNfeMNlxHJ0ujV//3mgCwiCQQy6w6VbU/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpWgNR3yDB/nycw50P6Rp44uzlXMB8GA1UdIwQY
MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt
MDkxMTVkNTkyZTZmLzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm
LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdZSy0x8
eJCrSpGrMeJdFE9Gb05E/hSr51jG2XO1niVmkfL1195bmPePIU8q56BVmfmLj/7b
7Qf+YjxaWmal2H7V73d7VaJ1K3qhiI5VZhtHmvsC8EwCxEGTcq0PKl+ugDBPoDNW
72b+7E+JhHRZIIiYikAqywOfddRORUIXwGXHESA0KiZ1ayzfy2KeF6DWXI09Ujge
Vh4mn4MVZcH/zaw6hix7E9zBLjUBQwV9gqlNI48b+8PrqcS/LyfIpo0PYGbFe5WH
hBKIn2GgSzx1AsC45niP0Yo7FVlQe1xuqp+fCMuhCF75aB2ndMgltd6VaVqB+LbT
1hHW7ym5F8G3Wg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:18 2026 by rpki-client