Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File: Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier: /TsGGlzTvxoCJFzeEayE9DSfW8m2lUzg0lNeiSOTJeE=
Subject key identifier: A9:80:23:3A:08:1B:80:0D:3C:9C:EE:BE:19:70:D9:0E:DD:51:ED:F2
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer: /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial: 019CA97D150309CCBA8FA420DFFD9D0C1826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number: 0BEA
Signing time: Sun 01 Mar 2026 13:01:12 +0000
Manifest this update: Sun 01 Mar 2026 13:01:12 +0000
Manifest next update: Mon 02 Mar 2026 13:01:12 +0000
Files and hashes: 1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: crIxSDXNshxCSF7HINpCZUAjt7NLFruWPMA4RHDsF6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:15:03:09:cc:ba:8f:a4:20:df:fd:9d:0c:18:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Validity
Not Before: Mar 1 13:01:12 2026 GMT
Not After : Mar 2 13:01:12 2026 GMT
Subject: CN=a980233a081b800d3c9ceebe1970d90edd51edf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:4e:70:05:c6:cd:bc:89:9f:9b:d5:1c:2c:
af:62:a6:72:bd:8f:e7:66:fe:6e:87:00:ed:d9:ad:
6f:ab:40:aa:d8:4c:e2:04:3a:00:c8:69:e3:09:e2:
3f:aa:4e:7d:88:f9:1d:f0:fe:47:27:19:8d:2a:dd:
15:4e:e1:fd:00:ab:bd:eb:fc:4f:1d:b9:1d:a1:48:
22:c2:9c:c2:3f:9e:d4:81:bb:48:16:6b:9c:ad:92:
a7:c5:2e:04:af:93:18:b0:30:d4:a2:0a:a7:e5:ff:
db:de:d6:c3:16:12:e5:60:73:db:d6:20:46:6f:2f:
e9:42:b1:59:67:98:8f:cf:e4:1e:72:25:a3:93:28:
7d:70:f4:27:c8:f0:d4:cd:84:a1:83:aa:21:42:4e:
9d:4f:9e:35:3d:a1:7a:a8:a4:20:6d:d3:86:e4:b9:
e1:cd:2e:22:b1:b9:10:69:13:79:8e:f4:d8:27:1c:
7a:ed:74:41:56:a6:e3:2f:9c:d6:fc:b2:f4:d4:b3:
cd:65:75:6d:a2:8d:40:df:d8:46:32:aa:0c:7e:4b:
1a:e7:8e:f1:31:bf:2a:e1:7f:82:0d:54:fb:c8:cf:
0e:4a:16:9b:99:d9:a0:0b:87:13:a3:af:1a:ab:ba:
3b:fa:ae:3c:a8:86:4f:37:7d:6c:3f:fa:7f:fe:dc:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:80:23:3A:08:1B:80:0D:3C:9C:EE:BE:19:70:D9:0E:DD:51:ED:F2
X509v3 Authority Key Identifier:
keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:68:ac:c9:64:cc:8a:76:02:07:0e:d5:29:b3:42:d3:e9:
51:87:f9:6a:bd:88:b2:45:ca:43:a4:07:00:a5:e9:b9:dc:1f:
34:46:71:fd:86:a0:7d:62:7c:8e:81:22:d9:0c:46:3e:51:f2:
d9:a2:c4:9f:11:56:60:25:58:9f:2e:fe:83:63:2a:7c:0d:99:
a2:b8:3a:b6:5d:bf:e2:40:d5:70:f7:d2:e3:5d:17:e9:25:68:
35:9b:d0:f4:56:3b:e0:6b:bd:0c:4c:6e:1b:24:ed:19:a0:a2:
3e:9e:44:f2:06:fa:63:94:be:b5:80:79:0d:f3:de:79:cb:a3:
66:a6:c5:8f:46:e3:44:17:32:c0:0b:d6:3b:4f:d2:1b:6b:f5:
53:e0:c8:14:05:42:f8:97:c3:cb:bf:87:8e:5a:19:75:0e:8b:
4d:47:6c:1a:90:53:77:b2:d7:67:62:94:e2:c7:19:06:8a:96:
bf:ca:91:26:02:bb:f1:d9:1a:e2:c4:50:10:2a:e6:08:5a:c2:
0b:30:b2:a8:a8:90:1b:02:28:9e:f3:8c:f0:a6:df:13:03:0b:
ca:fa:6a:fc:83:9d:3b:6b:b3:12:02:6a:42:b0:8e:c4:53:13:
f0:57:12:4a:f7:42:aa:23:52:17:5f:a3:cc:e2:40:94:5a:fd:
cc:b2:05:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfRUDCcy6j6Qg3/2dDBgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGUzNmEyNjZhMWY1ZGY5NWI5NmE2YjU4ZGExMWMyMzU0
ZGI1NWQwHhcNMjYwMzAxMTMwMTEyWhcNMjYwMzAyMTMwMTEyWjAzMTEwLwYDVQQD
EyhhOTgwMjMzYTA4MWI4MDBkM2M5Y2VlYmUxOTcwZDkwZWRkNTFlZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMVOcAXGzbyJn5vVHCyvYqZyvY/n
Zv5uhwDt2a1vq0Cq2EziBDoAyGnjCeI/qk59iPkd8P5HJxmNKt0VTuH9AKu96/xP
HbkdoUgiwpzCP57UgbtIFmucrZKnxS4Er5MYsDDUogqn5f/b3tbDFhLlYHPb1iBG
by/pQrFZZ5iPz+QeciWjkyh9cPQnyPDUzYShg6ohQk6dT541PaF6qKQgbdOG5Lnh
zS4isbkQaRN5jvTYJxx67XRBVqbjL5zW/LL01LPNZXVtoo1A39hGMqoMfksa547x
Mb8q4X+CDVT7yM8OShabmdmgC4cTo68aq7o7+q48qIZPN31sP/p//tySxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmAIzoIG4ANPJzuvhlw2Q7dUe3yMB8GA1UdIwQY
MBaAFCaONqJmofXflblqa1jaEcI1TbVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMzFmMjQtNGNmMC00OGVmLWE5Nzgt
ZTJjNmIwZDZlZDk2LzEvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mMzFmMjQtNGNmMC00OGVmLWE5NzgtZTJjNmIwZDZlZDk2
LzEvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZRorMlk
zIp2AgcO1SmzQtPpUYf5ar2IskXKQ6QHAKXpudwfNEZx/YagfWJ8joEi2QxGPlHy
2aLEnxFWYCVYny7+g2MqfA2Zorg6tl2/4kDVcPfS410X6SVoNZvQ9FY74Gu9DExu
GyTtGaCiPp5E8gb6Y5S+tYB5DfPeecujZqbFj0bjRBcywAvWO0/SG2v1U+DIFAVC
+JfDy7+HjloZdQ6LTUdsGpBTd7LXZ2KU4scZBoqWv8qRJgK78dka4sRQECrmCFrC
CzCyqKiQGwIonvOM8KbfEwMLyvpq/IOdO2uzEgJqQrCOxFMT8FcSSvdCqiNSF1+j
zOJAlFr9zLIF5A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:26 2026 by rpki-client