Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier: zC6AfBJjO4HRLI8aTLTHHpuNzjhnxhQKpTJJSXlFjHY=
Subject key identifier: B8:99:22:A2:71:1F:2A:1E:16:FF:81:1D:0B:94:AC:57:3E:2D:01:C5
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial: 019CAE354A7ACBC8F3F196F4AB633E253148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number: 1418
Signing time: Mon 02 Mar 2026 11:00:53 +0000
Manifest this update: Mon 02 Mar 2026 11:00:53 +0000
Manifest next update: Tue 03 Mar 2026 11:00:53 +0000
Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: beCfhfBjJpi9gBgcsd9eIUHRs2zOnduAbr/B70AHtjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:4a:7a:cb:c8:f3:f1:96:f4:ab:63:3e:25:31:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Validity
Not Before: Mar 2 11:00:53 2026 GMT
Not After : Mar 3 11:00:53 2026 GMT
Subject: CN=b89922a2711f2a1e16ff811d0b94ac573e2d01c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:a4:48:fe:22:0d:e6:b0:15:ec:7a:e0:3c:
de:b4:89:e5:f2:5f:d3:b1:9c:2a:82:d0:d3:13:e0:
25:4b:f1:d1:91:05:b5:d3:d0:b3:d5:24:c6:05:3a:
27:f8:49:a4:45:02:90:40:df:d9:05:47:35:bd:74:
88:a5:3b:10:25:56:50:f1:b3:49:6e:1d:0e:32:91:
ab:d2:9d:57:4a:cf:5c:80:c7:6d:eb:16:2f:44:5d:
b2:b2:df:a9:db:f3:70:08:d7:36:7f:40:d6:c5:d2:
b6:41:a9:c0:5d:f3:61:76:c0:b8:34:cb:4a:66:e7:
09:4c:85:0c:d4:9d:8f:7c:3f:f6:ed:e9:43:88:85:
ed:bf:e4:26:40:f3:2c:21:06:f6:a1:c9:15:e8:03:
85:0d:69:9e:62:7d:ac:65:e6:dc:6f:aa:d2:6d:40:
17:23:eb:89:f5:3d:ff:f7:5f:95:ee:c5:8f:10:c2:
c2:45:0d:4d:22:57:4d:5e:d7:cf:a2:fd:40:73:79:
70:3a:76:7d:e2:c6:3b:04:e5:cc:bc:5a:d1:0a:d7:
7b:28:dc:4b:17:e9:d7:38:e1:a1:ff:79:97:7c:f8:
3c:b1:7f:48:89:a4:e9:ce:2b:54:a0:1e:e3:86:81:
c6:0f:be:f7:56:06:21:bb:75:42:a1:4e:e1:1e:a5:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:99:22:A2:71:1F:2A:1E:16:FF:81:1D:0B:94:AC:57:3E:2D:01:C5
X509v3 Authority Key Identifier:
keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:64:78:d4:d0:ab:e4:b6:b7:d4:07:70:24:09:6c:7e:40:
68:5a:22:1b:0f:92:54:5f:2d:64:47:b3:8c:3f:68:77:5c:98:
a4:c5:31:48:68:51:5d:74:5b:5c:d2:7d:9d:42:eb:3d:dd:d2:
8e:f5:a0:78:43:24:3b:2a:41:53:2a:b2:b6:54:f8:62:df:8d:
78:c8:59:5b:bc:a2:5b:43:e2:66:21:68:05:44:27:7d:5b:e0:
c2:9b:de:25:53:3c:15:55:11:55:a9:38:1b:9e:d0:b9:6d:86:
17:f8:dc:ec:6b:c3:0a:5e:07:3d:2a:ce:8b:b0:4f:b6:ff:b4:
cd:ab:70:a1:64:62:ba:9d:81:ae:4d:f1:d9:9b:a6:7e:3b:6c:
f1:97:eb:ea:50:23:54:ba:eb:72:9d:01:65:6f:02:a7:3b:06:
fa:25:25:63:eb:5e:7e:29:85:f6:e0:db:b0:4b:e8:1f:07:45:
12:f7:3d:e0:14:ae:f9:13:f8:7c:c3:37:76:f6:3a:bb:da:89:
c1:c4:51:92:6d:9e:9c:a8:8d:dd:6b:01:d0:df:cc:ce:c7:0d:
e3:9b:58:29:a6:c1:6b:65:55:37:40:83:9e:f1:2a:53:7a:98:
2e:80:13:dc:c8:e4:01:e2:32:28:a1:58:81:c2:d2:cd:a7:15:
21:94:14:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNUp6y8jz8Zb0q2M+JTFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm
NmViYjYwHhcNMjYwMzAyMTEwMDUzWhcNMjYwMzAzMTEwMDUzWjAzMTEwLwYDVQQD
EyhiODk5MjJhMjcxMWYyYTFlMTZmZjgxMWQwYjk0YWM1NzNlMmQwMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDWkSP4iDeawFex64DzetInl8l/T
sZwqgtDTE+AlS/HRkQW109Cz1STGBTon+EmkRQKQQN/ZBUc1vXSIpTsQJVZQ8bNJ
bh0OMpGr0p1XSs9cgMdt6xYvRF2yst+p2/NwCNc2f0DWxdK2QanAXfNhdsC4NMtK
ZucJTIUM1J2PfD/27elDiIXtv+QmQPMsIQb2ockV6AOFDWmeYn2sZebcb6rSbUAX
I+uJ9T3/91+V7sWPEMLCRQ1NIldNXtfPov1Ac3lwOnZ94sY7BOXMvFrRCtd7KNxL
F+nXOOGh/3mXfPg8sX9IiaTpzitUoB7jhoHGD773VgYhu3VCoU7hHqUZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiZIqJxHyoeFv+BHQuUrFc+LQHFMB8GA1UdIwQY
MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt
YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2
LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfH5keNTQ
q+S2t9QHcCQJbH5AaFoiGw+SVF8tZEezjD9od1yYpMUxSGhRXXRbXNJ9nULrPd3S
jvWgeEMkOypBUyqytlT4Yt+NeMhZW7yiW0PiZiFoBUQnfVvgwpveJVM8FVURVak4
G57QuW2GF/jc7GvDCl4HPSrOi7BPtv+0zatwoWRiup2Brk3x2Zumfjts8Zfr6lAj
VLrrcp0BZW8CpzsG+iUlY+tefimF9uDbsEvoHwdFEvc94BSu+RP4fMM3dvY6u9qJ
wcRRkm2enKiN3WsB0N/MzscN45tYKabBa2VVN0CDnvEqU3qYLoAT3MjkAeIyKKFY
gcLSzacVIZQUnQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:46 2026 by rpki-client