Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: Ca4Wb6uZ06fePHsNmofuj8VzsnHCZaH+3mLkaEtInXA=
Subject key identifier: 86:DE:42:50:8F:35:31:FD:1C:80:D9:A7:48:D8:3B:F2:3C:86:82:19
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 019CABA20936523534E4F671B536284C1183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: VndZi1ag43yUYbp1p18VZaT1S-Q.roa (hash: YUCC1yTTSNVtoC4MDdJQsWo/Nb81JBpWk0EnfDrruB8=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: KrmyxKkjvxrbL8QNM0g322lvFDD0u+Zpx78XDOD02Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:09:36:52:35:34:e4:f6:71:b5:36:28:4c:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=86de42508f3531fd1c80d9a748d83bf23c868219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:15:43:46:d3:86:6a:af:dc:75:a8:c4:d9:
21:7c:9e:ea:ab:0d:8c:49:84:7e:8b:6a:d9:02:ef:
6f:6f:43:d5:7e:a2:08:87:d5:a4:ff:a7:ac:8e:52:
28:c0:39:c7:6d:ee:c7:65:ec:00:0f:a6:38:c2:28:
6f:0a:e3:37:d4:28:0e:16:9a:b9:63:b0:ce:8e:25:
ba:f1:c0:a7:c4:0a:ba:7c:fb:5a:7a:65:b5:0a:31:
8f:e8:db:81:27:4e:d1:1a:1f:8f:28:0e:0a:de:f4:
5c:dd:46:f6:bb:64:6e:4d:5a:de:72:16:58:99:6c:
34:b2:cb:45:36:80:ce:04:11:60:b1:ef:2d:6c:93:
3c:a4:d6:dc:95:ad:53:d9:c8:0b:9e:11:ab:3b:e9:
31:cd:c5:f9:9f:07:c4:f0:14:cb:4a:f6:f1:79:59:
16:25:f2:7e:c8:fe:06:31:72:8b:0f:2f:66:2f:44:
59:3a:91:a1:5e:88:8c:ba:e6:9b:ef:19:39:e0:80:
44:d3:b6:dd:bf:3f:2e:9a:3c:d7:87:73:86:2b:7a:
02:6b:fe:63:d2:b3:e7:b3:0d:14:82:82:64:26:10:
f4:97:b7:e0:b8:78:5f:d8:40:a6:f1:4a:9f:6d:2c:
55:5d:7e:fc:fb:a5:cf:c1:d4:f0:56:1d:12:91:c8:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:42:50:8F:35:31:FD:1C:80:D9:A7:48:D8:3B:F2:3C:86:82:19
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e4:35:a9:dd:9c:f8:9e:86:d6:0d:5a:1b:6e:0a:4f:74:c9:
2a:20:38:84:2f:7b:0c:6b:ff:16:40:99:0b:65:d1:cb:42:fc:
45:b9:52:5d:29:6d:51:23:84:3d:35:1b:b9:2a:bc:b6:d0:73:
b4:d6:6f:aa:ae:02:a2:a8:ea:19:10:3d:8e:c2:e6:04:56:93:
ba:2a:de:7f:ab:ac:44:9a:1e:7b:3e:0c:ff:77:b2:23:44:82:
e0:df:a2:7d:d3:89:06:85:77:34:60:e8:11:b5:1c:17:1b:b4:
47:89:d9:60:cb:2c:41:44:07:87:82:39:9f:7d:61:05:54:ae:
64:c1:6a:eb:44:88:e3:50:85:fe:73:f9:3b:69:10:c9:5e:39:
24:45:0b:19:8b:f7:e9:7c:66:be:31:65:20:91:43:58:13:7a:
b8:0d:30:1b:43:a5:33:49:47:4d:89:15:6d:c6:2e:36:64:b5:
36:26:08:2b:48:c2:3e:bc:29:14:29:a7:9c:5b:22:8e:6e:a9:
68:07:a8:f2:2f:c3:fc:dd:74:b4:cf:fa:04:f4:73:bf:ef:5e:
7f:57:6e:19:1e:5e:62:27:d1:96:af:c8:bb:ad:cd:a1:46:be:
19:70:54:7c:18:1b:b5:28:9d:63:6a:83:33:6b:7c:3e:5e:bd:
7e:9d:99:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrogk2UjU05PZxtTYoTBGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzFmN2QwNTMwNjgyZTFiNjhlM2JmZTVhODc0NGVlNTFh
ZDMzNWQwHhcNMjYwMzAxMjMwMDQ4WhcNMjYwMzAyMjMwMDQ4WjAzMTEwLwYDVQQD
Eyg4NmRlNDI1MDhmMzUzMWZkMWM4MGQ5YTc0OGQ4M2JmMjNjODY4MjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwEVQ0bThmqv3HWoxNkhfJ7qqw2M
SYR+i2rZAu9vb0PVfqIIh9Wk/6esjlIowDnHbe7HZewAD6Y4wihvCuM31CgOFpq5
Y7DOjiW68cCnxAq6fPtaemW1CjGP6NuBJ07RGh+PKA4K3vRc3Ub2u2RuTVrechZY
mWw0sstFNoDOBBFgse8tbJM8pNbcla1T2cgLnhGrO+kxzcX5nwfE8BTLSvbxeVkW
JfJ+yP4GMXKLDy9mL0RZOpGhXoiMuuab7xk54IBE07bdvz8umjzXh3OGK3oCa/5j
0rPnsw0UgoJkJhD0l7fguHhf2ECm8UqfbSxVXX78+6XPwdTwVh0SkcjWYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbeQlCPNTH9HIDZp0jYO/I8hoIZMB8GA1UdIwQY
MBaAFI7B99BTBoLhto47/lqHRO5RrTNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMt
YWVlNjk4YWY2OGI3LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMtYWVlNjk4YWY2OGI3
LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquQ1qd2c
+J6G1g1aG24KT3TJKiA4hC97DGv/FkCZC2XRy0L8RblSXSltUSOEPTUbuSq8ttBz
tNZvqq4CoqjqGRA9jsLmBFaTuiref6usRJoeez4M/3eyI0SC4N+ifdOJBoV3NGDo
EbUcFxu0R4nZYMssQUQHh4I5n31hBVSuZMFq60SI41CF/nP5O2kQyV45JEULGYv3
6XxmvjFlIJFDWBN6uA0wG0OlM0lHTYkVbcYuNmS1NiYIK0jCPrwpFCmnnFsijm6p
aAeo8i/D/N10tM/6BPRzv+9ef1duGR5eYifRlq/Iu63NoUa+GXBUfBgbtSidY2qD
M2t8Pl69fp2ZwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:13 2026 by rpki-client