Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: HJ7zc1htteUa34GMXyB9xdlNbaf7cJEGuCPnyjn1+K4=
Subject key identifier: 07:35:16:06:C6:DF:89:0C:78:2A:BF:DF:B7:C0:CB:A1:DC:76:2F:DB
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 019CAC46C676924FD62565CB7C391EEFD117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 1064
Signing time: Mon 02 Mar 2026 02:00:45 +0000
Manifest this update: Mon 02 Mar 2026 02:00:45 +0000
Manifest next update: Tue 03 Mar 2026 02:00:45 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: mQrqh+CLTCbpK2amknJluRp0ptFhLt8ZHO+5VRUEzF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c6:76:92:4f:d6:25:65:cb:7c:39:1e:ef:d1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Mar 2 02:00:45 2026 GMT
Not After : Mar 3 02:00:45 2026 GMT
Subject: CN=07351606c6df890c782abfdfb7c0cba1dc762fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:44:9b:b7:aa:74:18:47:ce:da:d3:b6:d0:
5b:7e:af:a1:af:20:28:b7:02:4c:c3:f5:fa:7c:9c:
a8:93:6f:fd:bd:fa:d5:9f:92:ac:85:93:7e:70:43:
88:68:23:cc:2c:46:24:0e:e5:be:5b:ea:83:09:f1:
c4:e7:5d:10:5b:a4:a3:da:82:bf:80:a6:61:1f:24:
51:85:fc:bc:cb:e7:f1:8e:58:dc:96:37:9e:4a:14:
81:16:f2:ea:f6:e3:13:0f:b7:dd:4e:35:7e:17:51:
2c:8f:68:f2:48:20:8a:2d:e3:8d:e0:12:1b:d5:e0:
46:60:e3:d5:9b:7c:ad:e7:09:b0:0c:da:41:e0:88:
63:49:f6:41:73:f2:71:ce:5b:52:a3:81:03:18:34:
07:20:29:7c:0b:b0:da:de:ad:e7:cf:73:cb:63:ee:
89:d6:e3:7c:50:d9:41:33:35:b7:1a:39:af:d9:5a:
68:d7:16:0f:f6:60:aa:01:02:f0:b2:a1:13:ee:b3:
d2:a8:d4:ab:5f:d7:3a:5a:2f:2d:e1:18:1a:b8:ae:
b5:11:7f:d4:2a:3e:70:a2:07:fd:ca:67:63:57:7e:
b6:6d:77:c9:c3:9a:30:88:a1:49:47:ee:50:33:5c:
e1:04:5d:59:c3:d3:c4:21:50:fd:71:fd:fe:b1:51:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:35:16:06:C6:DF:89:0C:78:2A:BF:DF:B7:C0:CB:A1:DC:76:2F:DB
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:33:94:41:11:fc:cf:c1:b9:e8:f5:f9:62:18:20:56:96:58:
04:05:a6:48:f0:1a:19:8c:65:82:76:d9:18:78:79:3f:89:0c:
a4:88:3a:e0:a2:91:ab:d5:8c:57:e0:58:75:1f:51:f9:2f:fb:
c1:ee:b3:05:5d:75:ff:50:95:d6:cc:1d:3c:d7:51:95:b1:3c:
63:75:36:ee:a2:30:7a:29:47:ce:86:08:0c:54:2a:8c:1a:78:
3c:47:b1:21:41:a4:b9:0b:73:94:b8:cd:16:f3:5a:34:87:de:
bb:37:e9:79:93:6d:19:75:32:c4:45:45:9a:aa:2e:fa:86:d1:
9b:6f:fc:5d:ae:29:34:32:57:47:d6:a7:06:e2:0c:ea:d2:12:
79:e1:7b:56:8e:fd:66:92:85:14:1a:9f:e6:fd:cc:80:ad:d9:
23:28:ed:e0:fa:f7:16:5b:5a:18:81:ab:39:66:10:7c:bf:e9:
ab:3e:b7:2d:16:2c:80:7f:cb:f7:b8:52:95:31:ec:a7:7d:80:
32:94:4b:05:f5:00:c5:15:e3:61:f5:37:1f:b2:9d:a7:c8:e3:
51:32:87:43:c6:e9:87:be:a6:57:f2:4a:4f:76:d0:68:ba:92:
ab:ce:69:49:01:f3:4e:46:01:41:8f:77:2b:72:ec:8c:67:da:
13:6d:30:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRsZ2kk/WJWXLfDke79EXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTRhODQ2NjMyZTgzMzQwZTExNGQwZDM1NTkxYjNkNDIx
ODhiNzYwHhcNMjYwMzAyMDIwMDQ1WhcNMjYwMzAzMDIwMDQ1WjAzMTEwLwYDVQQD
EygwNzM1MTYwNmM2ZGY4OTBjNzgyYWJmZGZiN2MwY2JhMWRjNzYyZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oJEm7eqdBhHztrTttBbfq+hryAo
twJMw/X6fJyok2/9vfrVn5KshZN+cEOIaCPMLEYkDuW+W+qDCfHE510QW6Sj2oK/
gKZhHyRRhfy8y+fxjljcljeeShSBFvLq9uMTD7fdTjV+F1Esj2jySCCKLeON4BIb
1eBGYOPVm3yt5wmwDNpB4IhjSfZBc/JxzltSo4EDGDQHICl8C7Da3q3nz3PLY+6J
1uN8UNlBMzW3Gjmv2Vpo1xYP9mCqAQLwsqET7rPSqNSrX9c6Wi8t4RgauK61EX/U
Kj5wogf9ymdjV362bXfJw5owiKFJR+5QM1zhBF1Zw9PEIVD9cf3+sVEbzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc1FgbG34kMeCq/37fAy6Hcdi/bMB8GA1UdIwQY
MBaAFIxUqEZjLoM0DhFNDTVZGz1CGIt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2Mt
MzQ1OWJlMjY2NzMxLzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2MtMzQ1OWJlMjY2NzMx
LzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTOUQRH8
z8G56PX5YhggVpZYBAWmSPAaGYxlgnbZGHh5P4kMpIg64KKRq9WMV+BYdR9R+S/7
we6zBV11/1CV1swdPNdRlbE8Y3U27qIweilHzoYIDFQqjBp4PEexIUGkuQtzlLjN
FvNaNIfeuzfpeZNtGXUyxEVFmqou+obRm2/8Xa4pNDJXR9anBuIM6tISeeF7Vo79
ZpKFFBqf5v3MgK3ZIyjt4Pr3FltaGIGrOWYQfL/pqz63LRYsgH/L97hSlTHsp32A
MpRLBfUAxRXjYfU3H7Kdp8jjUTKHQ8bph76mV/JKT3bQaLqSq85pSQHzTkYBQY93
K3LsjGfaE20wnQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:58 2026 by rpki-client