Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier: zQPJKg+qOpygH0pT0b+Xpu3pHSMELsshZKv3Mc2Pmm8=
Subject key identifier: CF:F4:5F:DC:98:02:7D:15:48:A4:29:8F:26:46:E7:EE:7D:6B:A9:C7
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial: 019CAD90ACCA1A1E2D2C69917F8F6A1B76CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 08:01:05 +0000
Manifest this update: Mon 02 Mar 2026 08:01:05 +0000
Manifest next update: Tue 03 Mar 2026 08:01:05 +0000
Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: b3w+47559J6Xxpx5pNR6uATDTsjgHf6/pcc0PGqmyII=)
2: aK-KiOW1egsjAqwNXfFKte8mrTM.roa (hash: cMN/aBHsJKW/o3mLC7qajGiwbSYm63ebF4bSsFTDBjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:ac:ca:1a:1e:2d:2c:69:91:7f:8f:6a:1b:76:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
Validity
Not Before: Mar 2 08:01:05 2026 GMT
Not After : Mar 3 08:01:05 2026 GMT
Subject: CN=cff45fdc98027d1548a4298f2646e7ee7d6ba9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:3a:5f:fc:1d:17:3b:29:74:2d:a5:cb:1e:
d6:50:89:00:db:1a:5f:aa:3c:ad:32:53:17:7d:d0:
b6:1a:08:9f:3a:93:af:c9:99:94:94:56:a0:89:a2:
a7:65:87:1b:59:24:76:0d:7c:86:bf:7d:a8:3f:0f:
ca:43:4a:2b:c4:8d:32:af:9b:74:9e:4b:a9:e6:f6:
6d:db:fa:83:78:63:62:39:ca:42:b6:46:dc:41:cb:
c3:e4:65:29:64:f8:78:68:44:9f:00:05:be:b8:ec:
6e:9e:4e:05:0d:de:f2:a1:d2:08:12:d1:5d:03:4b:
5b:c6:67:48:e3:5b:3b:56:e4:a9:91:bd:54:81:cb:
18:db:62:d0:fa:d1:19:57:19:34:4b:83:02:1b:29:
75:e9:43:72:6d:f9:26:af:ca:8f:b3:33:71:32:0d:
46:4f:a5:ee:a0:32:83:8f:8f:20:97:cc:3c:a4:cd:
27:41:70:ae:ff:9f:03:8b:f8:f8:82:10:f8:64:02:
22:40:49:41:30:f5:aa:9d:5d:98:3a:2b:07:3c:ca:
0d:f2:bc:3e:5b:e8:ea:88:20:3f:0b:49:88:b9:0e:
54:8d:e4:00:c0:c5:53:42:a8:fb:01:79:9f:0f:7c:
df:12:95:63:38:de:d2:26:5e:23:db:6b:37:63:cd:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:5F:DC:98:02:7D:15:48:A4:29:8F:26:46:E7:EE:7D:6B:A9:C7
X509v3 Authority Key Identifier:
keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0b:7d:d2:5b:58:f2:77:a5:6e:cf:e7:8c:28:e5:a4:d2:71:
e0:97:3b:e5:04:30:c1:49:ee:3a:22:f5:10:2d:0e:d1:e5:50:
25:d6:e7:4c:97:38:32:f3:75:6a:cc:e3:e0:7b:d7:b1:5e:4c:
49:b5:82:1e:85:a1:eb:68:6b:16:7f:90:b9:3a:d9:ad:0d:f8:
be:be:84:0b:39:fc:76:8b:f8:ba:b4:5a:13:86:1b:79:0e:50:
92:56:e5:c5:78:34:05:3d:cc:1b:e2:d3:e4:a8:d7:49:cf:1f:
bf:80:3c:a9:c6:83:09:02:cb:cc:eb:50:39:a5:e9:e0:2c:f1:
9d:09:93:a6:f0:c9:69:a9:70:13:8d:31:32:22:23:09:4c:3d:
98:54:58:09:15:2e:24:d8:6b:a1:a0:66:c0:f1:29:e1:88:3e:
c1:7d:0c:fc:56:60:cc:2f:9a:bb:0b:cd:6b:d8:8f:98:fd:80:
13:5b:f0:9c:79:e2:6e:02:41:d4:28:ac:f1:9b:90:ed:2f:26:
3f:6c:07:27:b0:a5:38:89:48:22:40:1d:4a:6e:be:d4:0f:4e:
a9:d8:c5:13:da:82:95:f4:59:7b:3b:5c:a3:42:c8:2a:0c:74:
37:24:06:90:fd:5d:75:4e:7e:93:fc:c4:aa:31:33:8f:f6:ba:
90:d8:0f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkKzKGh4tLGmRf49qG3bPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTYyYTMzZmQyMzQ4NzgxYWMxMjNhMTI3MjJhMDg2ZWU4
ZmJhN2QwHhcNMjYwMzAyMDgwMTA1WhcNMjYwMzAzMDgwMTA1WjAzMTEwLwYDVQQD
EyhjZmY0NWZkYzk4MDI3ZDE1NDhhNDI5OGYyNjQ2ZTdlZTdkNmJhOWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNU6X/wdFzspdC2lyx7WUIkA2xpf
qjytMlMXfdC2GgifOpOvyZmUlFagiaKnZYcbWSR2DXyGv32oPw/KQ0orxI0yr5t0
nkup5vZt2/qDeGNiOcpCtkbcQcvD5GUpZPh4aESfAAW+uOxunk4FDd7yodIIEtFd
A0tbxmdI41s7VuSpkb1UgcsY22LQ+tEZVxk0S4MCGyl16UNybfkmr8qPszNxMg1G
T6XuoDKDj48gl8w8pM0nQXCu/58Di/j4ghD4ZAIiQElBMPWqnV2YOisHPMoN8rw+
W+jqiCA/C0mIuQ5UjeQAwMVTQqj7AXmfD3zfEpVjON7SJl4j22s3Y82lnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/0X9yYAn0VSKQpjyZG5+59a6nHMB8GA1UdIwQY
MBaAFCeWKjP9I0h4GsEjoScioIbuj7p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQt
YmI2YmZmZTY2ZmYzLzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQtYmI2YmZmZTY2ZmYz
LzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQt90ltY
8nelbs/njCjlpNJx4Jc75QQwwUnuOiL1EC0O0eVQJdbnTJc4MvN1aszj4HvXsV5M
SbWCHoWh62hrFn+QuTrZrQ34vr6ECzn8dov4urRaE4YbeQ5QklblxXg0BT3MG+LT
5KjXSc8fv4A8qcaDCQLLzOtQOaXp4CzxnQmTpvDJaalwE40xMiIjCUw9mFRYCRUu
JNhroaBmwPEp4Yg+wX0M/FZgzC+auwvNa9iPmP2AE1vwnHnibgJB1Cis8ZuQ7S8m
P2wHJ7ClOIlIIkAdSm6+1A9OqdjFE9qClfRZeztco0LIKgx0NyQGkP1ddU5+k/zE
qjEzj/a6kNgP5Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:54 2026 by rpki-client