Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: /BczEOcWyPKgDffofIeBOW2h0D2Oax/J0JAHr/Q0MAM=
Subject key identifier: B9:60:B5:A5:2B:B2:E6:D1:D9:74:08:D0:B7:3D:95:4E:17:36:B1:64
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019CAAFD31566AC56FDAC713F989618E09D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:45 +0000
Manifest this update: Sun 01 Mar 2026 20:00:45 +0000
Manifest next update: Mon 02 Mar 2026 20:00:45 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: oPBq4vRV7VpHFJBJW3RX1hrWiEUhx8uxYWPXD/9g9Ic=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:31:56:6a:c5:6f:da:c7:13:f9:89:61:8e:09:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Mar 1 20:00:45 2026 GMT
Not After : Mar 2 20:00:45 2026 GMT
Subject: CN=b960b5a52bb2e6d1d97408d0b73d954e1736b164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:f3:dc:dd:d6:d8:44:b2:06:32:dc:2d:d0:
20:7d:ea:d2:58:76:8a:18:5a:c2:1a:60:73:28:15:
84:1b:20:1a:d0:3f:2e:bf:c4:4b:60:85:3e:3d:20:
07:7b:bf:ef:8d:92:82:b7:e9:c8:d9:74:87:56:33:
5b:e1:23:87:a9:80:00:b1:35:0e:4a:92:d1:39:eb:
d1:9c:63:e4:8a:01:c8:46:83:a3:df:07:78:f4:c6:
57:2d:d9:08:3f:18:2f:82:ff:84:a1:97:d1:73:74:
28:37:34:73:ca:4a:5e:31:27:85:ca:c0:cc:11:96:
a9:b5:a5:1c:42:65:ef:07:75:0c:e2:3d:02:3d:78:
f4:35:e8:de:47:db:d6:e9:37:7f:d4:f2:3a:48:fc:
14:8e:fc:99:1d:7d:9f:be:27:d7:43:a8:9d:70:17:
70:08:a0:4d:74:c1:d9:95:85:b1:d9:61:b9:51:1f:
5e:ac:2d:2e:4c:a7:b2:bf:fb:d2:72:0c:51:b0:8d:
6f:ac:97:ef:06:b0:99:b0:65:28:9c:1e:cd:d4:46:
01:f1:24:c1:00:0f:d1:31:5c:7c:d7:c4:0f:6c:67:
65:0c:87:5f:27:07:14:14:16:a9:b3:93:9c:12:4f:
c8:be:fd:11:cb:a1:bf:26:50:a5:46:3b:5e:5b:29:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:B5:A5:2B:B2:E6:D1:D9:74:08:D0:B7:3D:95:4E:17:36:B1:64
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d1:69:a9:63:2c:eb:6e:6c:7b:00:5b:85:41:b6:72:d3:9c:
b9:88:39:5f:f5:5c:4d:f1:35:5e:99:f0:55:b0:b8:26:33:49:
62:e9:21:34:98:f9:e4:a4:1c:cc:ba:31:7c:39:97:0a:f5:52:
e3:c3:f3:ae:b0:10:95:eb:ce:91:b8:68:77:e6:73:c1:9d:f1:
45:0c:31:40:fa:eb:1b:f5:e9:84:7b:33:1e:79:73:f5:a3:b6:
9b:2a:fc:26:4a:88:ab:13:dd:b5:9e:68:a0:1d:18:62:9c:fd:
c0:9a:d4:fa:b3:8d:25:0d:76:f8:fa:bd:70:a1:02:9e:e8:ef:
64:06:78:0b:5f:6b:17:bd:5e:ab:f4:d0:fb:d8:93:26:05:89:
23:41:5b:df:8d:e4:50:96:3f:3a:25:b0:f6:03:d8:d3:09:3a:
7c:93:66:29:f2:8f:a4:6e:1c:3d:78:9d:e2:e7:e5:1e:ff:a4:
eb:4d:a0:b9:cb:3f:13:5d:d1:25:8e:65:2e:85:86:7e:05:47:
ee:92:06:f6:70:e1:34:d4:07:a9:ed:6f:1d:21:52:cb:87:75:
a2:c4:75:77:17:e9:d9:fe:91:1f:d4:cd:a7:01:9e:d1:0e:29:
e6:74:d9:51:eb:60:0e:a2:0e:17:aa:d9:84:7e:67:75:02:36:
6b:82:e4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/TFWasVv2scT+YlhjgnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGQyNDc5YmFkY2I0MGEyNGE0MzZiMWVkY2MzNjFjM2Zh
NjJhZmIwHhcNMjYwMzAxMjAwMDQ1WhcNMjYwMzAyMjAwMDQ1WjAzMTEwLwYDVQQD
EyhiOTYwYjVhNTJiYjJlNmQxZDk3NDA4ZDBiNzNkOTU0ZTE3MzZiMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsXz3N3W2ESyBjLcLdAgferSWHaK
GFrCGmBzKBWEGyAa0D8uv8RLYIU+PSAHe7/vjZKCt+nI2XSHVjNb4SOHqYAAsTUO
SpLROevRnGPkigHIRoOj3wd49MZXLdkIPxgvgv+EoZfRc3QoNzRzykpeMSeFysDM
EZaptaUcQmXvB3UM4j0CPXj0NejeR9vW6Td/1PI6SPwUjvyZHX2fvifXQ6idcBdw
CKBNdMHZlYWx2WG5UR9erC0uTKeyv/vScgxRsI1vrJfvBrCZsGUonB7N1EYB8STB
AA/RMVx818QPbGdlDIdfJwcUFBaps5OcEk/Ivv0Ry6G/JlClRjteWym5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlgtaUrsubR2XQI0Lc9lU4XNrFkMB8GA1UdIwQY
MBaAFCfdJHm63LQKJKQ2se3MNhw/pir7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEt
YmMyYzQ1M2MwZWM4LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEtYmMyYzQ1M2MwZWM4
LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENFpqWMs
625sewBbhUG2ctOcuYg5X/VcTfE1XpnwVbC4JjNJYukhNJj55KQczLoxfDmXCvVS
48PzrrAQlevOkbhod+ZzwZ3xRQwxQPrrG/XphHszHnlz9aO2myr8JkqIqxPdtZ5o
oB0YYpz9wJrU+rONJQ12+Pq9cKECnujvZAZ4C19rF71eq/TQ+9iTJgWJI0Fb343k
UJY/OiWw9gPY0wk6fJNmKfKPpG4cPXid4uflHv+k602gucs/E13RJY5lLoWGfgVH
7pIG9nDhNNQHqe1vHSFSy4d1osR1dxfp2f6RH9TNpwGe0Q4p5nTZUetgDqIOF6rZ
hH5ndQI2a4LkzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:07 2026 by rpki-client