Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json)
Hash identifier: Lm1zZntbRf3ft3EFTjxoCrMoaRrYnax88vVfX+FMXkc=
Subject key identifier: D1:35:06:43:B3:D6:D1:1F:1E:14:04:25:71:E8:F8:55:53:26:B1:06
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 019CAD5A6739D6AF32E8459B915E5EBB311E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
Manifest number: 08CE
Signing time: Mon 02 Mar 2026 07:01:48 +0000
Manifest this update: Mon 02 Mar 2026 07:01:48 +0000
Manifest next update: Tue 03 Mar 2026 07:01:48 +0000
Files and hashes: 1: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: INpsWwzq5xhi9+J1I94sWhX61hrJpTkGKl1yIRj4Q5Q=)
2: ZvSntlMRiI0KhwgM99Sp3FJTmvs.roa (hash: 0fCY8nksAFxmuBH0voIaK/wx1tefrnct7WFNbFomHtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:67:39:d6:af:32:e8:45:9b:91:5e:5e:bb:31:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: Mar 2 07:01:48 2026 GMT
Not After : Mar 3 07:01:48 2026 GMT
Subject: CN=d1350643b3d6d11f1e14042571e8f8555326b106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:d9:7d:51:e1:1c:d1:50:46:4d:88:45:38:
55:aa:6f:ea:e8:16:4e:6c:99:8a:40:77:03:25:85:
ee:d1:f1:e6:f8:a0:20:e0:c5:99:fd:d1:c1:a1:19:
0f:0d:c9:7f:ed:3d:0c:86:95:2b:dd:97:4a:7a:0a:
1f:45:2a:f2:86:63:c9:f1:5a:7a:98:12:ff:fd:65:
05:f9:cc:e9:db:ab:6b:b6:0a:96:31:53:0a:09:c0:
ca:89:08:7e:57:6f:6c:d1:94:1e:a9:43:59:78:43:
f6:ec:18:b7:1d:2a:46:9b:67:1d:69:a6:85:6f:7c:
c9:b8:15:cb:af:f6:85:dd:c6:db:6c:d0:42:a0:f8:
d9:89:5c:f5:c5:f2:8e:34:79:8f:44:9e:10:fa:b8:
39:7b:fd:eb:52:e9:e6:f5:92:a3:fb:b4:5c:98:8f:
0b:48:c9:4e:29:86:4b:6f:9a:0a:b5:9d:bf:37:9c:
8a:b4:a2:6f:dd:ba:d8:b1:be:7c:1d:3e:5c:d4:d9:
a4:c3:14:7b:4d:ba:81:62:17:34:2d:41:3e:6b:f0:
b8:3c:3c:f1:64:dc:82:29:a4:f5:05:24:09:be:5d:
4e:a5:6f:2d:f3:ac:ea:4f:fb:d9:c8:6f:9c:d9:b4:
11:ec:f4:6e:0a:e2:3f:9c:aa:bc:f9:d2:fb:b6:c0:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:06:43:B3:D6:D1:1F:1E:14:04:25:71:E8:F8:55:53:26:B1:06
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ee:e7:58:fb:53:99:ed:5f:42:ee:47:a5:3a:eb:00:a4:8d:
d3:59:0c:c1:32:72:ab:5f:eb:ac:18:62:2d:b0:7b:5b:f1:7a:
ae:ea:17:2e:d9:16:ab:1f:f4:bb:d7:f9:18:00:67:7e:78:0c:
fc:ff:37:cf:60:26:c5:09:e6:c0:32:19:79:b9:8a:40:cd:d0:
51:da:05:fc:51:ec:5f:2e:af:31:77:f2:09:90:77:5a:b6:00:
fb:91:a1:bc:cf:65:bd:31:96:cc:08:68:47:02:1f:d2:e4:57:
44:41:b7:d8:2b:4f:82:df:66:bd:86:8f:54:48:ad:c7:9f:d5:
c1:77:d8:fd:21:a9:8f:14:e3:f4:c0:4d:72:d0:11:57:46:e0:
38:5e:6e:61:83:72:ec:7a:1e:a7:6a:b3:d9:ce:cd:19:b2:69:
09:0a:4b:19:99:05:fb:9e:fe:a5:03:4c:67:07:ba:a5:2b:13:
6b:e7:b6:6a:29:e0:24:01:fa:bb:21:16:24:b7:fd:ba:09:4b:
ec:e8:d5:c4:f1:44:b9:f9:d5:a1:0c:61:4b:96:a3:0d:97:1e:
6f:66:83:a4:e6:0a:aa:58:6f:33:15:7e:27:f1:26:6b:3c:d7:
91:7c:62:3a:b6:86:27:03:7b:a9:4c:ac:5d:d8:07:92:3b:52:
96:67:b5:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWmc51q8y6EWbkV5euzEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzVmMzY0MTNlN2FmNDcyODEzZmUzYTcxNGUyZWNkYWEy
MWYyZTgwHhcNMjYwMzAyMDcwMTQ4WhcNMjYwMzAzMDcwMTQ4WjAzMTEwLwYDVQQD
EyhkMTM1MDY0M2IzZDZkMTFmMWUxNDA0MjU3MWU4Zjg1NTUzMjZiMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb3ZfVHhHNFQRk2IRThVqm/q6BZO
bJmKQHcDJYXu0fHm+KAg4MWZ/dHBoRkPDcl/7T0MhpUr3ZdKegofRSryhmPJ8Vp6
mBL//WUF+czp26trtgqWMVMKCcDKiQh+V29s0ZQeqUNZeEP27Bi3HSpGm2cdaaaF
b3zJuBXLr/aF3cbbbNBCoPjZiVz1xfKONHmPRJ4Q+rg5e/3rUunm9ZKj+7RcmI8L
SMlOKYZLb5oKtZ2/N5yKtKJv3brYsb58HT5c1NmkwxR7TbqBYhc0LUE+a/C4PDzx
ZNyCKaT1BSQJvl1OpW8t86zqT/vZyG+c2bQR7PRuCuI/nKq8+dL7tsAc5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE1BkOz1tEfHhQEJXHo+FVTJrEGMB8GA1UdIwQY
MBaAFCfF82QT569HKBP+OnFOLs2qIfLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMt
NzkxMzI5NDZiNjk5LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMtNzkxMzI5NDZiNjk5
LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyu7nWPtT
me1fQu5HpTrrAKSN01kMwTJyq1/rrBhiLbB7W/F6ruoXLtkWqx/0u9f5GABnfngM
/P83z2AmxQnmwDIZebmKQM3QUdoF/FHsXy6vMXfyCZB3WrYA+5GhvM9lvTGWzAho
RwIf0uRXREG32CtPgt9mvYaPVEitx5/VwXfY/SGpjxTj9MBNctARV0bgOF5uYYNy
7Hoep2qz2c7NGbJpCQpLGZkF+57+pQNMZwe6pSsTa+e2aingJAH6uyEWJLf9uglL
7OjVxPFEufnVoQxhS5ajDZceb2aDpOYKqlhvMxV+J/EmazzXkXxiOraGJwN7qUys
XdgHkjtSlme1fA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:01 2026 by rpki-client