Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: z3NBrIRh0u0X1Ad1dOJnsMy9Bq822TkWOsv4DQMPDjs=
Subject key identifier: C4:5B:78:7D:DD:6B:15:1D:96:DE:BA:AF:FB:E2:98:67:96:A2:F2:EA
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 019CAC1025DF424D8D6C44E5302F555CACF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa (hash: 16yeZ21Za1Z/lNRNjThEGWHSFlEFLlT8Kt56uKRyMVA=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: J+o94SNezZVGagcPbB8SptXJ9r72QBvGaI0joeJvszw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:25:df:42:4d:8d:6c:44:e5:30:2f:55:5c:ac:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=c45b787ddd6b151d96debaaffbe2986796a2f2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:6b:67:ef:6c:ca:39:03:e6:b2:69:e1:30:
d1:42:4f:d6:b5:8f:d5:2f:7e:07:9d:bd:b2:a5:6f:
43:1c:cb:be:7e:8b:7b:1d:72:c2:97:8b:8a:25:a2:
4b:82:0c:f9:93:03:8a:8c:a0:12:e6:a7:d0:c0:f9:
3a:1d:25:09:a3:82:52:ac:a6:65:fd:d9:4a:a5:f7:
ea:d8:22:eb:52:1a:02:d8:a5:46:a4:6d:e7:75:e3:
56:3a:4b:b9:a1:b8:f2:16:4b:f3:3b:44:ab:25:b2:
e0:74:8a:eb:88:33:38:52:a3:db:91:8a:fb:bd:59:
19:03:69:e1:0f:66:68:83:07:23:28:86:09:46:cb:
e9:69:06:a1:24:41:68:91:74:cd:ea:f6:ec:44:6d:
7f:d6:2a:15:f8:d8:31:25:fb:de:49:97:17:d1:a3:
4c:57:a1:74:dc:01:8c:48:3e:80:eb:db:5e:99:e5:
95:b1:71:57:02:4c:2b:0b:20:a2:1e:3b:ba:ba:89:
df:d7:f1:7c:8c:f9:0a:5d:24:f1:74:46:9e:db:57:
18:c0:35:c2:6b:b8:ec:8a:1e:47:3d:6c:03:7a:c4:
84:59:d3:b4:37:04:ee:e6:f3:21:a0:74:be:2e:6f:
d3:f9:ba:81:d4:5f:c2:04:1f:b3:c1:21:ce:a5:5a:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:78:7D:DD:6B:15:1D:96:DE:BA:AF:FB:E2:98:67:96:A2:F2:EA
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d5:50:34:ed:fd:d7:e6:2a:0d:b1:0f:29:ca:d2:69:91:90:
24:b4:f0:9c:15:6e:36:50:b8:49:60:9f:33:e0:74:45:6a:05:
17:f5:52:54:83:99:bd:7e:66:cc:ca:70:07:d2:bd:ec:b4:58:
6f:6e:dc:af:56:e8:b1:8c:4b:62:11:d0:79:9d:d1:96:7c:fd:
17:e2:67:8a:ce:7f:13:3f:73:05:71:71:08:a4:58:7b:17:2b:
fe:fb:b3:31:ca:d9:e5:a0:60:f4:56:ae:cc:5d:7a:ad:11:0a:
39:17:d5:de:0e:05:3b:15:d0:67:31:14:b6:52:2e:18:80:e1:
99:f5:18:51:fe:67:2a:d2:98:d0:f4:d3:c0:77:82:95:11:45:
75:34:9b:e4:f8:6f:2d:7b:db:ee:66:12:ff:cb:34:11:0b:ac:
0b:dd:3b:e2:2b:20:88:81:7d:4c:2c:94:59:56:f1:4e:3f:0a:
c3:f5:71:ec:3c:b3:65:df:bf:89:15:ca:54:e8:0c:10:92:9a:
54:ba:ee:fe:a7:5c:85:29:57:7c:92:ab:1e:04:1e:c1:b0:6e:
30:91:50:e5:06:19:a9:4d:b4:2f:0a:e6:20:9e:21:c6:85:0b:
15:5e:a0:72:0d:0e:ff:09:de:67:2e:bd:97:96:cd:40:7f:18:
c2:4d:f8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysECXfQk2NbETlMC9VXKzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWZjZTBiOGI2MzdjMTVmMjMxYWVjZmZiNWM4MGE3NGZm
Y2NiMWQwHhcNMjYwMzAyMDEwMTA1WhcNMjYwMzAzMDEwMTA1WjAzMTEwLwYDVQQD
EyhjNDViNzg3ZGRkNmIxNTFkOTZkZWJhYWZmYmUyOTg2Nzk2YTJmMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q9rZ+9syjkD5rJp4TDRQk/WtY/V
L34Hnb2ypW9DHMu+fot7HXLCl4uKJaJLggz5kwOKjKAS5qfQwPk6HSUJo4JSrKZl
/dlKpffq2CLrUhoC2KVGpG3ndeNWOku5objyFkvzO0SrJbLgdIrriDM4UqPbkYr7
vVkZA2nhD2ZogwcjKIYJRsvpaQahJEFokXTN6vbsRG1/1ioV+NgxJfveSZcX0aNM
V6F03AGMSD6A69temeWVsXFXAkwrCyCiHju6uonf1/F8jPkKXSTxdEae21cYwDXC
a7jsih5HPWwDesSEWdO0NwTu5vMhoHS+Lm/T+bqB1F/CBB+zwSHOpVrseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRbeH3daxUdlt66r/vimGeWovLqMB8GA1UdIwQY
MBaAFKyfzguLY3wV8jGuz/tcgKdP/MsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQt
MDhiMDdlODliNDJhLzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQtMDhiMDdlODliNDJh
LzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdVQNO39
1+YqDbEPKcrSaZGQJLTwnBVuNlC4SWCfM+B0RWoFF/VSVIOZvX5mzMpwB9K97LRY
b27cr1bosYxLYhHQeZ3Rlnz9F+Jnis5/Ez9zBXFxCKRYexcr/vuzMcrZ5aBg9Fau
zF16rREKORfV3g4FOxXQZzEUtlIuGIDhmfUYUf5nKtKY0PTTwHeClRFFdTSb5Phv
LXvb7mYS/8s0EQusC9074isgiIF9TCyUWVbxTj8Kw/Vx7DyzZd+/iRXKVOgMEJKa
VLru/qdchSlXfJKrHgQewbBuMJFQ5QYZqU20LwrmIJ4hxoULFV6gcg0O/wneZy69
l5bNQH8Ywk34OA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:33 2026 by rpki-client