Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier: cLn8O7Ag1JDihOasfyiup1ImM0nFc8MT0LmBbI6+fr4=
Subject key identifier: 1E:E4:0B:3B:3C:8F:3F:9A:17:E7:86:CF:69:35:0E:FC:D8:D3:F8:AA
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019CACB4C335BD61BE0931C2779C8DD82D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 04:00:53 +0000
Manifest this update: Mon 02 Mar 2026 04:00:53 +0000
Manifest next update: Tue 03 Mar 2026 04:00:53 +0000
Files and hashes: 1: gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa (hash: XbNVPIMyzYNGS/m6xHDz4/G85Dxs4nrc/Ehwb2bG/rs=)
2: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: 8sBPrB1TUy2RWHfOdIUk50MzskDjiIbn+2qUFayQSSI=)
3: kNR-gUHIBkAVG5LDVgVJxvEY3q8.roa (hash: d0VW7tyS0/KepNZdJ2Fz8K2kUTPgtIVFBZK37jfxU0M=)
4: kUXgXHjZh6Dhv7swtP0uScwOUOU.roa (hash: quIM8+yqzd47fNHZBFQKX0gUs534hYfsNXJItcjTlM4=)
5: v9YovKS0rkxgh-imaNT6dS4t8wE.roa (hash: +gjCRrqjahMp/Uxvqf8OR5Yjihz0o/VceeWEOtR4+ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c3:35:bd:61:be:09:31:c2:77:9c:8d:d8:2d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Mar 2 04:00:53 2026 GMT
Not After : Mar 3 04:00:53 2026 GMT
Subject: CN=1ee40b3b3c8f3f9a17e786cf69350efcd8d3f8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:7f:63:68:e3:d1:a1:71:e6:f6:90:ce:d2:
f4:6f:e5:c5:ae:9f:e2:33:b1:53:57:78:0f:35:c2:
5c:98:5b:d6:78:14:71:01:71:38:f5:a6:b1:63:a0:
55:c3:0b:38:3a:70:d2:f0:2e:13:88:c4:06:58:44:
1b:77:12:d9:dc:df:69:91:ca:73:11:79:43:29:b7:
24:f9:d7:6a:0f:87:09:7a:fd:ab:27:64:19:8e:99:
47:c5:55:8a:98:90:95:4e:d7:28:ee:26:2e:ad:aa:
5c:25:5b:e0:4a:e5:a7:b1:af:e1:d7:92:29:ec:37:
66:89:0d:85:ce:35:a2:b2:06:8e:ae:4c:5f:58:35:
e7:6f:12:94:5c:55:9a:36:2d:e2:ba:68:e3:e3:c8:
d4:64:85:fd:c6:a8:bd:a2:65:21:4b:dc:d5:98:31:
32:00:a2:e9:37:a3:8b:54:08:85:99:b3:40:20:03:
bc:f6:ed:5d:d4:6f:e4:ac:65:dd:7f:99:3a:d2:74:
99:2b:3f:e3:28:eb:a9:28:dd:bf:1b:86:b0:b5:51:
19:d1:a8:d4:af:ab:bb:8f:4c:af:8c:c1:4f:db:66:
ed:f0:0e:83:cc:50:92:fb:cd:d4:24:da:9e:8d:80:
c5:2d:9a:f2:6c:b4:d0:58:9d:26:7c:e0:21:9e:4b:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:0B:3B:3C:8F:3F:9A:17:E7:86:CF:69:35:0E:FC:D8:D3:F8:AA
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ab:c1:a8:57:27:82:05:77:e8:69:9a:49:c3:58:19:af:64:
ac:d5:26:d0:09:8f:f0:ec:2f:3b:a4:70:35:0e:4c:cf:32:4d:
78:7a:f8:72:61:69:28:4c:6c:3b:53:24:95:75:e7:c6:b3:5b:
71:8a:6e:cd:9d:04:fc:ba:5d:6c:ed:34:4c:0b:ca:52:6a:98:
b5:7a:9c:31:32:0e:08:c5:e3:ac:5b:ed:f1:62:01:26:3d:90:
ec:26:ac:d9:19:fd:63:9b:e4:d3:8a:84:e2:b6:15:aa:6b:a7:
d8:97:f2:93:0e:36:3d:e7:d6:55:0e:47:0a:c1:6c:35:c0:6a:
39:37:33:e3:78:a3:58:0f:6c:d9:65:92:cb:e5:c1:f6:84:df:
fc:1e:7d:df:d1:ee:9b:69:7a:36:12:6a:20:32:c6:42:18:30:
22:d4:87:72:07:23:fc:31:6d:6b:fb:c1:ef:85:06:ab:1f:11:
4f:8e:ce:2c:f4:33:ef:65:16:1e:d5:2e:ac:c3:84:3f:1a:ec:
5a:2f:f1:d5:2d:03:46:a6:7d:99:95:58:30:ec:cc:b0:37:63:
1e:7b:b8:03:2a:71:78:a7:d8:a8:c4:6c:61:92:6b:f9:a3:97:
cf:48:99:80:5e:42:4d:a3:d4:5b:9d:96:72:da:50:8c:92:b5:
10:ea:d6:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystMM1vWG+CTHCd5yN2C2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx
ZTI5YzQwHhcNMjYwMzAyMDQwMDUzWhcNMjYwMzAzMDQwMDUzWjAzMTEwLwYDVQQD
EygxZWU0MGIzYjNjOGYzZjlhMTdlNzg2Y2Y2OTM1MGVmY2Q4ZDNmOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtZ/Y2jj0aFx5vaQztL0b+XFrp/i
M7FTV3gPNcJcmFvWeBRxAXE49aaxY6BVwws4OnDS8C4TiMQGWEQbdxLZ3N9pkcpz
EXlDKbck+ddqD4cJev2rJ2QZjplHxVWKmJCVTtco7iYurapcJVvgSuWnsa/h15Ip
7DdmiQ2FzjWisgaOrkxfWDXnbxKUXFWaNi3iumjj48jUZIX9xqi9omUhS9zVmDEy
AKLpN6OLVAiFmbNAIAO89u1d1G/krGXdf5k60nSZKz/jKOupKN2/G4awtVEZ0ajU
r6u7j0yvjMFP22bt8A6DzFCS+83UJNqejYDFLZrybLTQWJ0mfOAhnkubtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7kCzs8jz+aF+eGz2k1DvzY0/iqMB8GA1UdIwQY
MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt
Mzg2YzFmOGIwNjQwLzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw
LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFavBqFcn
ggV36GmaScNYGa9krNUm0AmP8OwvO6RwNQ5MzzJNeHr4cmFpKExsO1MklXXnxrNb
cYpuzZ0E/LpdbO00TAvKUmqYtXqcMTIOCMXjrFvt8WIBJj2Q7Cas2Rn9Y5vk04qE
4rYVqmun2Jfykw42PefWVQ5HCsFsNcBqOTcz43ijWA9s2WWSy+XB9oTf/B5939Hu
m2l6NhJqIDLGQhgwItSHcgcj/DFta/vB74UGqx8RT47OLPQz72UWHtUurMOEPxrs
Wi/x1S0DRqZ9mZVYMOzMsDdjHnu4AypxeKfYqMRsYZJr+aOXz0iZgF5CTaPUW52W
ctpQjJK1EOrWFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:54 2026 by rpki-client