Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: 261M3fr7FoVxAUZdjN6sChC7XAQ8WI/pA6M+6Et/8bw=
Subject key identifier: 67:77:77:BA:B4:3C:29:7B:2B:1E:4A:C7:C2:3F:22:66:DE:7C:89:67
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 019CAC46EF4A420CBB3A4A5ED2DF01AE8A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 04C1
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: 08TX7zGJM_9SDvXsn_IRwc2BjrU.roa (hash: jT+EKCy6Js0nlHIQwG+OyzWgM7mgDMvpygyb2+ijALI=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: PKBxQovWBy6FVeQ/eQ8aJe6tTgQMToDKHtfJ//jUu7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ef:4a:42:0c:bb:3a:4a:5e:d2:df:01:ae:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=677777bab43c297b2b1e4ac7c23f2266de7c8967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:77:a6:f7:1f:f3:1d:b2:25:31:35:c3:4a:
d9:eb:d5:8a:d0:00:d3:bf:eb:ba:7c:06:95:8d:89:
9c:a9:d4:db:fd:7a:23:b9:5a:17:a3:84:ac:6f:6c:
85:f5:af:77:cf:70:c8:2c:11:e5:4c:c7:bb:1c:dd:
10:e3:11:fe:6d:d5:d3:09:d2:01:0f:c4:fe:29:0e:
58:a6:91:b0:6d:99:9e:2a:35:fb:ec:9c:9c:76:62:
af:fb:b5:81:5f:7d:24:0b:ef:71:b1:96:68:21:a6:
36:ca:f2:0f:01:59:7c:dc:5c:fa:e8:c4:2c:6d:63:
5c:73:32:a8:54:c9:7f:07:29:29:98:4f:e7:13:f5:
c8:f5:1a:a7:29:84:e9:b1:f3:57:60:92:52:25:f6:
f7:29:fa:cf:8e:e3:49:9a:d6:57:de:4e:05:fe:35:
0e:f3:ae:45:e1:a9:ad:a8:05:00:be:c7:f2:a4:9a:
8c:9b:1c:3d:00:65:4c:ec:bd:a4:7f:03:e9:ad:b9:
b8:5b:da:78:fa:51:e4:29:6f:db:cd:e7:1a:96:73:
82:59:b6:2c:b2:bc:04:84:93:27:04:92:24:46:34:
24:0e:f5:72:67:23:93:fa:32:a2:60:4d:d7:11:ca:
87:8e:01:66:7e:d8:c8:68:fa:f5:98:eb:79:77:ed:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:77:BA:B4:3C:29:7B:2B:1E:4A:C7:C2:3F:22:66:DE:7C:89:67
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:68:73:51:88:5d:5c:e0:68:79:93:ce:85:2d:25:0a:47:bb:
92:58:3b:20:d1:c7:89:a6:64:2b:19:1f:22:ad:3d:c5:d0:a8:
c8:3a:2b:2a:91:f2:14:71:75:7a:78:0e:96:2c:7d:d1:f1:90:
81:9f:c0:41:f8:f8:f5:3d:bd:ae:0a:4f:9b:e6:a8:45:2e:2b:
1a:88:7c:25:cd:b5:26:c6:3c:c0:c8:3b:14:a7:5c:72:b0:f1:
06:c3:ea:87:2b:20:f6:7c:e9:2b:7a:47:43:b0:e5:db:29:22:
5d:ce:e6:62:1b:27:b8:f9:9c:58:4c:cb:71:5a:66:2f:3f:32:
ad:7d:91:87:05:99:4a:73:c7:93:26:34:99:61:c9:8d:78:c1:
79:d8:a2:ba:10:46:b9:e1:d6:7e:42:8e:b3:cb:d4:2e:77:93:
f4:e5:c9:90:42:68:52:81:9e:5c:65:43:c1:7c:81:9f:86:34:
a3:8d:37:ee:90:a6:89:13:7f:d2:05:4f:e8:b4:6a:d5:ee:ae:
61:d5:4c:32:1e:31:4e:06:e9:d8:a9:ef:06:ab:6d:17:3c:55:
7b:35:56:3a:22:f0:4c:ec:a2:47:14:9b:a9:3c:0e:9d:42:df:
10:79:f3:3d:20:d9:97:87:32:bd:15:62:2d:c0:ec:b0:36:9f:
fc:eb:9d:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRu9KQgy7Okpe0t8BropeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTBiM2E5YTA1MDM5MDU1OTZjNzdmNTgwMmJlZjlmYzcz
ZDY0N2QwHhcNMjYwMzAyMDIwMDU1WhcNMjYwMzAzMDIwMDU1WjAzMTEwLwYDVQQD
Eyg2Nzc3NzdiYWI0M2MyOTdiMmIxZTRhYzdjMjNmMjI2NmRlN2M4OTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI53pvcf8x2yJTE1w0rZ69WK0ADT
v+u6fAaVjYmcqdTb/XojuVoXo4Ssb2yF9a93z3DILBHlTMe7HN0Q4xH+bdXTCdIB
D8T+KQ5YppGwbZmeKjX77JycdmKv+7WBX30kC+9xsZZoIaY2yvIPAVl83Fz66MQs
bWNcczKoVMl/BykpmE/nE/XI9RqnKYTpsfNXYJJSJfb3KfrPjuNJmtZX3k4F/jUO
865F4amtqAUAvsfypJqMmxw9AGVM7L2kfwPprbm4W9p4+lHkKW/bzecalnOCWbYs
srwEhJMnBJIkRjQkDvVyZyOT+jKiYE3XEcqHjgFmftjIaPr1mOt5d+2FWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGd3d7q0PCl7Kx5Kx8I/ImbefIlnMB8GA1UdIwQY
MBaAFI1Qs6mgUDkFWWx39YAr75/HPWR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82OGQxNDMtMTIzNy00OTEyLWE4OTIt
Y2VmMDFkODc3ZWJlLzEvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82OGQxNDMtMTIzNy00OTEyLWE4OTItY2VmMDFkODc3ZWJl
LzEvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmhzUYhd
XOBoeZPOhS0lCke7klg7INHHiaZkKxkfIq09xdCoyDorKpHyFHF1engOlix90fGQ
gZ/AQfj49T29rgpPm+aoRS4rGoh8Jc21JsY8wMg7FKdccrDxBsPqhysg9nzpK3pH
Q7Dl2ykiXc7mYhsnuPmcWEzLcVpmLz8yrX2RhwWZSnPHkyY0mWHJjXjBediiuhBG
ueHWfkKOs8vULneT9OXJkEJoUoGeXGVDwXyBn4Y0o4037pCmiRN/0gVP6LRq1e6u
YdVMMh4xTgbp2KnvBqttFzxVezVWOiLwTOyiRxSbqTwOnULfEHnzPSDZl4cyvRVi
LcDssDaf/OudCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:01 2026 by rpki-client