Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: oozXxox2MBuRRYkUCbQf3HNm6Mls5EXDZuPUVRielwI=
Subject key identifier: F9:89:85:1D:D1:E7:4E:8E:6B:B7:37:54:0E:1B:49:96:27:5E:A0:C4
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 019CAE6BD1DEBC66D6D67151F220E3257E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: 02AD
Signing time: Mon 02 Mar 2026 12:00:27 +0000
Manifest this update: Mon 02 Mar 2026 12:00:27 +0000
Manifest next update: Tue 03 Mar 2026 12:00:27 +0000
Files and hashes: 1: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: Wd/I+U5B3O+XLjBy4tdLuLQ1IljQI81KbsZkY5lEZZc=)
2: TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (hash: EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:d1:de:bc:66:d6:d6:71:51:f2:20:e3:25:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Mar 2 12:00:27 2026 GMT
Not After : Mar 3 12:00:27 2026 GMT
Subject: CN=f989851dd1e74e8e6bb737540e1b4996275ea0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:9f:13:1f:a0:f1:95:71:b1:c7:f9:57:82:
06:d0:aa:85:9b:60:f3:97:3e:f5:ff:37:c3:d0:fa:
ae:93:03:dd:d3:12:9c:84:39:5a:94:d2:2d:82:e8:
c7:e7:e2:1a:88:c3:42:d7:22:19:f6:27:43:86:a6:
bf:92:27:0b:25:6f:4e:6f:54:5d:52:ec:54:1f:e2:
d6:af:9b:06:6c:58:e4:19:55:de:f7:88:47:fb:98:
77:c0:04:d3:b7:b5:f2:7c:8a:d4:1d:b9:50:a5:9e:
ef:ea:b0:66:c2:78:68:85:8b:f5:3a:7b:14:d2:fb:
80:a6:ef:af:99:8b:e4:98:c0:bc:95:ae:d0:08:ae:
86:1f:47:c7:90:06:db:3c:32:bf:67:88:ab:ed:d9:
b0:c1:fb:07:09:00:8b:e7:5c:54:6f:b4:39:f4:77:
47:4a:bd:20:66:6c:5c:a9:92:6f:f2:e0:d7:7c:48:
89:3b:27:c7:53:f4:2c:b0:16:33:35:0a:fc:2c:ba:
12:70:38:39:e9:1e:7b:11:40:25:13:96:9f:ba:9b:
a6:9d:d8:16:33:13:77:d2:37:b9:8e:9a:24:e2:44:
80:d8:f0:4d:3f:43:a3:9a:a0:45:7d:e5:35:fe:92:
50:f1:73:b2:a0:70:77:e8:54:2c:d8:67:28:73:be:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:89:85:1D:D1:E7:4E:8E:6B:B7:37:54:0E:1B:49:96:27:5E:A0:C4
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8b:45:0c:4c:0e:be:76:40:fb:ca:dc:bd:44:3e:08:37:a1:
81:14:3c:f0:3d:94:9c:f6:da:b4:1f:d2:23:bf:38:29:dc:2a:
0d:4c:5b:3c:20:a8:a0:17:89:1d:20:95:43:f8:f8:26:cb:db:
72:29:90:98:40:41:15:29:11:ef:4b:3a:9b:b6:d9:17:c3:2d:
f1:15:7e:0c:c3:97:07:58:57:f9:c9:6d:47:a2:16:c6:c8:32:
6d:72:07:56:bb:08:f0:39:10:4e:5d:fc:27:dc:40:63:39:2e:
c8:0d:76:71:cf:ad:ab:5f:4e:a8:24:46:e0:c0:93:17:52:ed:
52:1e:9e:da:44:38:f3:d7:9c:e6:f4:0c:0b:43:b8:de:f9:8f:
40:03:7d:43:a4:c7:ce:fa:15:d3:26:e3:8f:7c:3b:e1:19:69:
ab:f0:c1:f2:03:a9:75:d0:ec:60:0e:e4:98:68:f0:42:63:21:
d7:18:88:14:ac:a0:f2:dd:8f:ee:b0:cc:79:10:1a:fa:f1:2b:
4b:35:7c:7b:ba:58:6d:7e:7d:1a:98:5b:6d:a2:22:71:b4:aa:
1a:92:65:a6:60:16:b2:ef:2a:76:7d:47:85:a2:c2:ee:a0:28:
f8:61:7b:42:dc:83:a5:03:7d:c7:d7:5f:44:0d:1d:62:cb:55:
b1:fa:e2:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyua9HevGbW1nFR8iDjJX43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NTBmM2Q3ZWQ4MjU2MTdlMjZiZTA5YWVjY2M2MmRkYTRl
YTMxNGYwHhcNMjYwMzAyMTIwMDI3WhcNMjYwMzAzMTIwMDI3WjAzMTEwLwYDVQQD
EyhmOTg5ODUxZGQxZTc0ZThlNmJiNzM3NTQwZTFiNDk5NjI3NWVhMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6SfEx+g8ZVxscf5V4IG0KqFm2Dz
lz71/zfD0PqukwPd0xKchDlalNItgujH5+IaiMNC1yIZ9idDhqa/kicLJW9Ob1Rd
UuxUH+LWr5sGbFjkGVXe94hH+5h3wATTt7XyfIrUHblQpZ7v6rBmwnhohYv1OnsU
0vuApu+vmYvkmMC8la7QCK6GH0fHkAbbPDK/Z4ir7dmwwfsHCQCL51xUb7Q59HdH
Sr0gZmxcqZJv8uDXfEiJOyfHU/QssBYzNQr8LLoScDg56R57EUAlE5afupumndgW
MxN30je5jpok4kSA2PBNP0OjmqBFfeU1/pJQ8XOyoHB36FQs2Gcoc748qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmJhR3R506Oa7c3VA4bSZYnXqDEMB8GA1UdIwQY
MBaAFCdQ89ftglYX4mvgmuzMYt2k6jFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMt
MjQzMWU2YmE2MzExLzEvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84NTdhMmYtMzI4OC00NjdlLWIwNDMtMjQzMWU2YmE2MzEx
LzEvSjFEejEtMkNWaGZpYS1DYTdNeGkzYVRxTVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsItFDEwO
vnZA+8rcvUQ+CDehgRQ88D2UnPbatB/SI784KdwqDUxbPCCooBeJHSCVQ/j4Jsvb
cimQmEBBFSkR70s6m7bZF8Mt8RV+DMOXB1hX+cltR6IWxsgybXIHVrsI8DkQTl38
J9xAYzkuyA12cc+tq19OqCRG4MCTF1LtUh6e2kQ489ec5vQMC0O43vmPQAN9Q6TH
zvoV0ybjj3w74Rlpq/DB8gOpddDsYA7kmGjwQmMh1xiIFKyg8t2P7rDMeRAa+vEr
SzV8e7pYbX59GphbbaIicbSqGpJlpmAWsu8qdn1HhaLC7qAo+GF7QtyDpQN9x9df
RA0dYstVsfriog==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:54 2026 by rpki-client