Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: k5Ohw3LRzf+s+tJ+zFvbGbwBAKIoGGW9ptqkmoIUcdE=
Subject key identifier: 69:B0:CB:1D:10:5E:11:D3:6A:AE:84:71:A6:78:20:A3:89:60:8F:02
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 019CABA2503C6934A75D344CE0BF01566493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0CBE
Signing time: Sun 01 Mar 2026 23:01:07 +0000
Manifest this update: Sun 01 Mar 2026 23:01:07 +0000
Manifest next update: Mon 02 Mar 2026 23:01:07 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: h8+kMxEHwDwTUnjw0vJwMg9fO9Gq6W6SLdD91cVrtNQ=)
2: uIfxedIoPtI6sFt6tLFbdFhBmow.roa (hash: Q+T15udJmpOitf8fa/5KOsL5hhkwGZ8F5qC5MKVKRFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:50:3c:69:34:a7:5d:34:4c:e0:bf:01:56:64:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Mar 1 23:01:07 2026 GMT
Not After : Mar 2 23:01:07 2026 GMT
Subject: CN=69b0cb1d105e11d36aae8471a67820a389608f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:a2:14:d8:21:b6:95:b2:b2:2c:96:81:e1:
21:e9:44:e7:ea:c8:df:fb:d7:97:9f:30:e1:8f:82:
c7:43:c6:78:92:30:48:7b:62:b7:d8:15:b6:10:7d:
20:71:69:6f:8a:2b:00:40:08:2a:b6:34:32:20:9f:
36:ac:37:4e:98:71:05:9f:34:19:96:9b:56:e9:e0:
cd:3c:fe:fc:b8:63:b8:30:25:95:6f:ca:b3:7a:cb:
2c:66:c6:77:3f:25:45:f8:c8:48:16:eb:21:8c:b9:
93:1f:ad:54:83:e1:ce:d2:d7:6d:6a:d9:66:d2:ba:
87:de:d9:aa:73:51:e5:ff:71:5d:cd:c1:3e:4e:63:
12:5b:9f:86:2f:93:45:00:d7:81:76:71:b5:3c:38:
bc:84:ec:6b:05:8f:1e:b4:bf:0c:77:cc:f8:8f:d9:
b1:c9:83:12:5b:e7:bf:89:18:0c:41:b1:55:34:41:
70:0c:a3:56:e6:0a:df:b2:2b:40:72:19:00:b4:1d:
1e:0d:16:ab:a9:50:23:2f:af:d0:7d:4d:1d:e5:af:
8c:b6:c6:69:c3:a4:e3:3e:eb:1f:df:34:9f:69:aa:
e2:7a:6d:30:e9:d3:42:67:1f:3c:8b:29:01:71:b0:
f2:97:db:2d:56:14:9d:4f:c5:9f:36:8c:fb:f1:ce:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:CB:1D:10:5E:11:D3:6A:AE:84:71:A6:78:20:A3:89:60:8F:02
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:12:08:54:ab:4d:16:72:db:56:0d:c9:dc:dc:66:99:d5:d5:
cb:55:aa:49:10:a5:0c:58:fb:4f:68:5f:9c:d9:d0:c4:c6:48:
37:62:85:bd:2d:5e:2c:60:d9:e4:8e:ab:ed:7f:87:95:b3:b7:
e9:74:30:bb:e7:dd:28:ef:fb:bd:20:d1:a8:bb:8f:e2:30:a0:
d6:33:be:fc:52:7e:9f:95:6c:52:4b:16:42:ff:cf:f5:85:2d:
86:2d:66:fa:5a:61:ea:33:48:bc:d3:19:aa:a2:f1:1e:a6:e8:
fe:ac:ee:3f:a9:f3:48:ee:0a:ae:d2:16:42:3f:21:15:91:89:
16:75:7c:d3:94:f7:99:59:35:52:c1:04:bd:6d:e1:f3:4c:ed:
5c:b0:76:f0:cf:20:67:36:68:d9:a6:a4:a9:74:e8:98:76:83:
5c:a4:10:31:c6:93:1d:0a:e7:bf:38:29:97:9f:08:d5:3e:9a:
a7:ba:85:48:8a:a4:97:1e:8b:d8:9c:39:bf:f0:08:2c:80:a8:
69:70:0b:d3:15:21:73:76:0c:f6:3c:a2:b0:9c:7c:07:24:d7:
a8:ab:fa:00:36:af:4f:8c:7a:da:5a:41:ef:d7:10:d0:2b:42:
c3:7b:0d:34:33:e1:ce:60:ba:d6:bb:dc:bc:57:36:4f:37:fd:
29:04:d0:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrolA8aTSnXTRM4L8BVmSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTRmYzgxZTUxNTMzODZjYjQyYzE3MzMzMDUwZGE4MzFh
ZGE5ZTUwHhcNMjYwMzAxMjMwMTA3WhcNMjYwMzAyMjMwMTA3WjAzMTEwLwYDVQQD
Eyg2OWIwY2IxZDEwNWUxMWQzNmFhZTg0NzFhNjc4MjBhMzg5NjA4ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWeiFNghtpWysiyWgeEh6UTn6sjf
+9eXnzDhj4LHQ8Z4kjBIe2K32BW2EH0gcWlviisAQAgqtjQyIJ82rDdOmHEFnzQZ
lptW6eDNPP78uGO4MCWVb8qzesssZsZ3PyVF+MhIFushjLmTH61Ug+HO0tdtatlm
0rqH3tmqc1Hl/3FdzcE+TmMSW5+GL5NFANeBdnG1PDi8hOxrBY8etL8Md8z4j9mx
yYMSW+e/iRgMQbFVNEFwDKNW5grfsitAchkAtB0eDRarqVAjL6/QfU0d5a+MtsZp
w6TjPusf3zSfaariem0w6dNCZx88iykBcbDyl9stVhSdT8WfNoz78c4zJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmwyx0QXhHTaq6EcaZ4IKOJYI8CMB8GA1UdIwQY
MBaAFI9U/IHlFTOGy0LBczMFDagxranlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQt
NDU3OTQ5MjRjYjUzLzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQtNDU3OTQ5MjRjYjUz
LzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBIIVKtN
FnLbVg3J3NxmmdXVy1WqSRClDFj7T2hfnNnQxMZIN2KFvS1eLGDZ5I6r7X+HlbO3
6XQwu+fdKO/7vSDRqLuP4jCg1jO+/FJ+n5VsUksWQv/P9YUthi1m+lph6jNIvNMZ
qqLxHqbo/qzuP6nzSO4KrtIWQj8hFZGJFnV805T3mVk1UsEEvW3h80ztXLB28M8g
ZzZo2aakqXTomHaDXKQQMcaTHQrnvzgpl58I1T6ap7qFSIqklx6L2Jw5v/AILICo
aXAL0xUhc3YM9jyisJx8ByTXqKv6ADavT4x62lpB79cQ0CtCw3sNNDPhzmC61rvc
vFc2Tzf9KQTQEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:09 2026 by rpki-client