Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: NTzOKSKY8bxRX5zRD3RqRREpeRvrfPu2KutWYF/6KNE=
Subject key identifier: 77:0D:70:FE:5D:4E:DD:4B:BF:E9:79:09:D6:05:17:C1:A0:D6:D1:B5
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 019CAC475B2FA7AC0A0F7792AEA2E573604D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 1758
Signing time: Mon 02 Mar 2026 02:01:23 +0000
Manifest this update: Mon 02 Mar 2026 02:01:23 +0000
Manifest next update: Tue 03 Mar 2026 02:01:23 +0000
Files and hashes: 1: RCrEVHPQO5ZNEyF8KAmfbYplEFM.roa (hash: hi87IK6C5zmMGdTPjH6NsPzFrsGUyr24qNPoi0fsEN4=)
2: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: 4hGld1U7TEeqfAzPsTlLcjQSA3yq08KNHZtTUEFY8Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5b:2f:a7:ac:0a:0f:77:92:ae:a2:e5:73:60:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Mar 2 02:01:23 2026 GMT
Not After : Mar 3 02:01:23 2026 GMT
Subject: CN=770d70fe5d4edd4bbfe97909d60517c1a0d6d1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:ca:4f:84:64:79:23:ed:15:be:d2:8b:be:
35:8f:79:27:59:ed:66:26:db:6f:a3:5f:8c:66:ef:
82:0a:5c:3e:43:8e:11:49:42:e6:89:ce:0e:80:e1:
5a:3c:62:4a:08:df:23:e9:b8:45:98:ae:64:bc:75:
cc:21:b4:96:0d:a9:9e:18:3f:1f:09:54:d9:04:cd:
f2:d5:f3:49:c3:7c:b2:42:b1:cc:4f:19:f0:61:cd:
1b:36:ed:e2:9c:bf:a0:07:bf:b9:82:79:cc:b2:44:
f2:02:6c:06:88:bf:00:fc:d3:a5:95:98:a4:d1:da:
dd:b6:6a:e4:7f:1c:12:1e:9d:78:0e:8f:bd:7a:12:
22:db:e9:8a:05:ca:39:92:66:70:6c:04:5b:e5:89:
8a:05:cc:7d:61:73:3f:da:e1:f2:33:0c:40:01:23:
e3:21:9e:d5:d2:44:8d:68:8f:f8:b7:92:76:70:22:
ed:c1:7f:f6:4d:0c:3a:af:05:d8:26:b5:80:22:47:
52:33:61:d1:b1:77:1c:c6:33:07:b3:b3:2e:0c:bc:
65:14:7f:90:2a:df:3b:a1:87:b4:f2:a1:16:6a:1d:
25:6e:2a:7e:38:47:07:f3:53:b7:c4:46:a6:35:ab:
4e:5e:e0:60:a4:4a:a4:0f:d8:06:c1:d6:d5:a9:4e:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0D:70:FE:5D:4E:DD:4B:BF:E9:79:09:D6:05:17:C1:A0:D6:D1:B5
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a6:8a:f5:7c:76:77:9f:d1:a9:27:d5:88:28:c7:59:62:7c:
af:d6:e1:6d:2a:08:38:af:b3:31:02:7e:0e:24:00:ce:e7:0b:
2e:93:a2:3a:6f:75:c7:a8:34:48:8a:bc:eb:92:7d:1d:1d:35:
1b:e6:5a:ee:dc:19:ac:07:f8:e0:52:f7:10:ef:70:94:1d:84:
b9:05:b6:d6:b1:6f:a1:2d:db:d6:4a:02:7d:8d:b5:66:01:68:
d8:b2:90:9e:cd:ba:b6:a8:ef:85:5c:d0:56:04:75:1f:c0:c0:
3e:80:d9:22:f2:d1:d6:bb:45:be:82:ca:3a:58:32:c7:06:82:
66:d5:bf:cc:f4:6b:a8:26:62:3c:09:96:5c:bd:10:3b:df:1b:
7e:d4:49:57:b9:18:7e:10:d2:2c:91:15:3d:e5:3d:ec:bd:de:
6f:0f:db:bf:34:db:cb:28:a8:be:8e:e0:b1:59:44:ce:34:ef:
1e:65:66:00:6d:19:71:da:7a:3a:2f:5f:af:bf:eb:23:47:bf:
0f:7e:62:bc:5f:04:01:6b:3c:01:b8:58:76:63:23:a1:49:bf:
d8:c6:4e:1a:b6:a1:86:58:ce:31:24:0a:5f:67:b2:25:03:e0:
b1:d1:ac:7b:50:9d:3f:99:c2:7b:da:c6:a1:6d:43:af:1b:b3:
c0:cd:9a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR1svp6wKD3eSrqLlc2BNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzJlZGE1NDc4ODdhNWI0NTAzZDkwNTkyZWE1MDU2NThk
YTZlN2EwHhcNMjYwMzAyMDIwMTIzWhcNMjYwMzAzMDIwMTIzWjAzMTEwLwYDVQQD
Eyg3NzBkNzBmZTVkNGVkZDRiYmZlOTc5MDlkNjA1MTdjMWEwZDZkMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vbKT4RkeSPtFb7Si741j3knWe1m
Jttvo1+MZu+CClw+Q44RSULmic4OgOFaPGJKCN8j6bhFmK5kvHXMIbSWDameGD8f
CVTZBM3y1fNJw3yyQrHMTxnwYc0bNu3inL+gB7+5gnnMskTyAmwGiL8A/NOllZik
0drdtmrkfxwSHp14Do+9ehIi2+mKBco5kmZwbARb5YmKBcx9YXM/2uHyMwxAASPj
IZ7V0kSNaI/4t5J2cCLtwX/2TQw6rwXYJrWAIkdSM2HRsXccxjMHs7MuDLxlFH+Q
Kt87oYe08qEWah0lbip+OEcH81O3xEamNatOXuBgpEqkD9gGwdbVqU515QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcNcP5dTt1Lv+l5CdYFF8Gg1tG1MB8GA1UdIwQY
MBaAFI/C7aVHiHpbRQPZBZLqUFZY2m56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGYxODAtMWY3Ni00NmZjLWE3MjEt
MTY4MTM3MGQ5YzEwLzEvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85MGYxODAtMWY3Ni00NmZjLWE3MjEtMTY4MTM3MGQ5YzEw
LzEvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKaK9Xx2
d5/RqSfViCjHWWJ8r9bhbSoIOK+zMQJ+DiQAzucLLpOiOm91x6g0SIq865J9HR01
G+Za7twZrAf44FL3EO9wlB2EuQW21rFvoS3b1koCfY21ZgFo2LKQns26tqjvhVzQ
VgR1H8DAPoDZIvLR1rtFvoLKOlgyxwaCZtW/zPRrqCZiPAmWXL0QO98bftRJV7kY
fhDSLJEVPeU97L3ebw/bvzTbyyiovo7gsVlEzjTvHmVmAG0Zcdp6Oi9fr7/rI0e/
D35ivF8EAWs8AbhYdmMjoUm/2MZOGrahhljOMSQKX2eyJQPgsdGse1CdP5nCe9rG
oW1DrxuzwM2aHw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:44 2026 by rpki-client