Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier: NjMy6n17wzReu5YRm2KtNJ5brlP0FTtnvSMvRhkosNw=
Subject key identifier: 38:BC:5C:A1:EB:5F:E9:BD:D1:D3:4E:CE:45:88:A1:14:F5:28:E4:E7
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 019CACB50B8558B8CEE0AC8D4C34E1614631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number: 0576
Signing time: Mon 02 Mar 2026 04:01:11 +0000
Manifest this update: Mon 02 Mar 2026 04:01:11 +0000
Manifest next update: Tue 03 Mar 2026 04:01:11 +0000
Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: kk29TmqLMzZH6DT6kZlOSJmkClho3o6Kbqlbyd6EzTU=)
2: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (hash: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:0b:85:58:b8:ce:e0:ac:8d:4c:34:e1:61:46:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Mar 2 04:01:11 2026 GMT
Not After : Mar 3 04:01:11 2026 GMT
Subject: CN=38bc5ca1eb5fe9bdd1d34ece4588a114f528e4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:1a:70:76:ce:06:7e:0d:73:2b:03:cf:94:
ea:75:d9:bd:a0:89:5b:b0:e3:3a:35:a6:ac:84:84:
a1:4b:e8:5d:02:95:91:da:e2:40:9b:f9:bb:bd:a7:
0b:cb:e5:0d:80:75:5c:74:84:89:04:31:bc:fd:ad:
41:c3:7a:ba:29:64:4c:46:20:9e:fd:8d:14:c7:d9:
16:b4:30:af:22:8c:95:b0:c7:b0:ac:fb:41:69:17:
53:f5:e0:98:3c:a5:59:b9:03:7f:dc:b8:81:a3:77:
29:38:16:da:35:d1:cc:e0:c1:75:b6:7f:90:68:5d:
82:5b:cf:03:5e:91:e8:d0:dc:27:e5:f7:76:ce:92:
b5:0e:11:d1:a5:c7:45:35:76:fb:6d:20:10:59:89:
a9:61:c4:ac:80:36:e1:08:b7:8f:27:25:b3:55:07:
71:d3:6c:03:f9:3b:75:ac:5e:4e:0f:a1:fd:2e:13:
ce:7f:15:af:ce:d9:53:7d:76:bc:4f:1a:34:2c:3c:
ef:e3:a5:5a:ff:cc:7a:eb:e2:e7:0b:c5:ab:97:7e:
97:ed:d8:cc:ee:ea:24:3c:43:a9:66:2e:db:b1:47:
71:ff:05:40:f3:54:7c:50:16:97:5f:c8:9b:a9:52:
00:e0:70:31:d6:d7:0b:db:7a:c8:33:37:11:24:7f:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:5C:A1:EB:5F:E9:BD:D1:D3:4E:CE:45:88:A1:14:F5:28:E4:E7
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5c:cd:15:9f:3a:f7:12:11:3f:0f:39:9e:f5:30:5e:2b:a8:
9a:00:eb:90:67:61:f8:a7:2c:b5:5d:07:c3:24:5a:17:ee:eb:
22:a3:0e:5a:ce:a9:7f:e3:86:d3:e8:a3:6e:fe:24:a4:14:81:
2c:38:cc:72:ab:8b:94:81:68:5c:00:a0:eb:a4:b8:d3:7f:90:
df:03:3e:29:33:15:83:57:88:f4:22:ee:5a:b2:2b:b5:8b:b7:
5d:15:07:a7:c9:c0:20:08:aa:3b:85:ec:12:f5:cb:d3:a5:81:
fc:4d:5a:f4:a0:d5:bf:34:42:1d:d2:da:28:cc:e5:81:90:c6:
40:35:ba:22:ee:18:ac:94:e1:6b:8d:04:81:84:97:9f:81:df:
8d:cc:ad:aa:ed:01:8f:60:97:e8:bf:0c:ce:c9:b5:b2:17:89:
44:c6:80:f3:00:cb:aa:ef:93:17:99:79:ab:d7:9b:43:10:9c:
b2:af:c7:d0:6e:f1:d6:44:6d:bc:4c:e1:19:a8:f7:93:51:56:
fb:c5:d9:3b:e2:18:9e:3a:72:de:5f:6c:9c:43:81:50:38:e4:
bc:01:7b:e8:be:4a:66:27:99:88:17:2f:81:2f:34:0e:dc:ba:
7a:84:f1:5d:c1:68:6d:05:66:dd:88:db:1e:97:08:24:56:21:
63:b4:cb:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystQuFWLjO4KyNTDThYUYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YjE1MjRlYzAxZGNmNDA1ZjQ0MTcxODI5ZWQ2N2EyOTky
YWE0MmQwHhcNMjYwMzAyMDQwMTExWhcNMjYwMzAzMDQwMTExWjAzMTEwLwYDVQQD
EygzOGJjNWNhMWViNWZlOWJkZDFkMzRlY2U0NTg4YTExNGY1MjhlNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OEacHbOBn4NcysDz5Tqddm9oIlb
sOM6NaashIShS+hdApWR2uJAm/m7vacLy+UNgHVcdISJBDG8/a1Bw3q6KWRMRiCe
/Y0Ux9kWtDCvIoyVsMewrPtBaRdT9eCYPKVZuQN/3LiBo3cpOBbaNdHM4MF1tn+Q
aF2CW88DXpHo0Nwn5fd2zpK1DhHRpcdFNXb7bSAQWYmpYcSsgDbhCLePJyWzVQdx
02wD+Tt1rF5OD6H9LhPOfxWvztlTfXa8Txo0LDzv46Va/8x66+LnC8Wrl36X7djM
7uokPEOpZi7bsUdx/wVA81R8UBaXX8ibqVIA4HAx1tcL23rIMzcRJH9qVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi8XKHrX+m90dNOzkWIoRT1KOTnMB8GA1UdIwQY
MBaAFCaxUk7AHc9AX0QXGCntZ6KZKqQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUt
NzY2YzgyNzU4MDY1LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNTY1NjMtZTYxYy00YjhhLThkNmUtNzY2YzgyNzU4MDY1
LzEvSnJGU1RzQWR6MEJmUkJjWUtlMW5vcGtxcEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVzNFZ86
9xIRPw85nvUwXiuomgDrkGdh+KcstV0HwyRaF+7rIqMOWs6pf+OG0+ijbv4kpBSB
LDjMcquLlIFoXACg66S403+Q3wM+KTMVg1eI9CLuWrIrtYu3XRUHp8nAIAiqO4Xs
EvXL06WB/E1a9KDVvzRCHdLaKMzlgZDGQDW6Iu4YrJTha40EgYSXn4Hfjcytqu0B
j2CX6L8Mzsm1sheJRMaA8wDLqu+TF5l5q9ebQxCcsq/H0G7x1kRtvEzhGaj3k1FW
+8XZO+IYnjpy3l9snEOBUDjkvAF76L5KZieZiBcvgS80Dty6eoTxXcFobQVm3Yjb
HpcIJFYhY7TL/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:42 2026 by rpki-client