Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: D16ulohWg+IN9zVKRAE7IaA4IUs6PAMtwGzTBms8iHM=
Subject key identifier: EC:33:13:CB:C5:CE:E7:1E:51:2E:12:C5:42:7A:77:81:03:C9:51:2C
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019CAD22AAC3A76B0154910D38F7A5E434DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0870
Signing time: Mon 02 Mar 2026 06:00:56 +0000
Manifest this update: Mon 02 Mar 2026 06:00:56 +0000
Manifest next update: Tue 03 Mar 2026 06:00:56 +0000
Files and hashes: 1: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (hash: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ=)
2: PKNrfh3XImYcJKqE7W0yYI6OiUY.roa (hash: sziy6P9qjmgMh/Wjufdq7yg5DrB3okhv2h8JK1TFDTU=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: Gs0+wJL3lxOCEtqriIcNbkc6CosJKyqMrYieZxSXJx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:aa:c3:a7:6b:01:54:91:0d:38:f7:a5:e4:34:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Mar 2 06:00:56 2026 GMT
Not After : Mar 3 06:00:56 2026 GMT
Subject: CN=ec3313cbc5cee71e512e12c5427a778103c9512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:fb:0f:40:d7:4e:b6:41:42:2d:31:3b:40:
32:9f:9c:55:bf:64:9e:d9:2d:80:c9:15:4d:e1:a6:
8c:6f:ce:5f:e7:59:35:2c:ff:a1:c2:4c:d4:66:33:
42:5d:2c:a4:9b:78:fe:d0:91:2b:e4:bb:50:bf:bb:
db:b5:fd:9e:15:c9:9c:52:f8:f7:46:b9:2d:e1:f7:
2a:84:80:74:94:63:d9:72:7e:40:b4:ab:aa:eb:b4:
1d:42:fd:f1:92:67:1b:90:1d:ed:bd:b4:f6:a0:7a:
77:28:ce:29:04:ec:b2:5c:36:ec:9d:46:58:a0:da:
37:3f:90:a7:02:8b:f8:85:1c:5e:d3:3f:aa:de:63:
56:89:17:a0:b5:18:7b:1b:90:55:7d:17:6e:12:d2:
b8:fb:4f:b8:cc:a6:4d:d8:f5:97:c7:31:14:e1:be:
b4:fb:25:09:49:64:ed:39:da:25:25:c0:a5:99:9c:
70:fb:30:9e:54:25:d7:1d:08:e4:62:18:8f:7d:e6:
27:50:69:2c:67:29:ca:62:22:3c:93:b8:10:c4:a5:
c0:ac:8f:a3:7e:ea:c7:70:db:67:a4:8b:f4:f1:62:
f0:34:9d:9c:f9:e8:72:8f:7e:d9:1a:e4:91:fb:d2:
b0:7f:bb:cd:24:64:3e:58:c2:8c:ed:28:ed:4d:4c:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:13:CB:C5:CE:E7:1E:51:2E:12:C5:42:7A:77:81:03:C9:51:2C
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d1:ec:bd:78:06:1e:40:38:b6:d2:ee:f0:8d:fa:cf:ab:4a:
c7:ed:70:11:46:00:dd:5d:7d:99:ee:45:15:98:5e:b0:f8:53:
9d:dc:4d:3d:cc:d8:34:00:fa:ed:04:a2:33:50:e3:1d:21:4e:
d5:b1:ba:d3:19:82:a0:2e:18:31:b2:c8:fc:4d:9e:67:34:fa:
07:81:72:6b:fe:f1:f8:c8:4b:80:a7:00:df:41:17:8d:a5:ce:
8c:3d:8d:a7:b6:7d:7b:e7:1f:8d:7d:7d:91:b9:0f:6b:02:15:
7f:8a:b8:45:e3:ca:f3:ee:01:3c:2e:d9:ee:99:59:5a:f4:0c:
e2:77:bf:e8:ed:45:c7:cf:39:60:05:fb:8d:db:9c:cb:a7:1d:
33:04:32:39:96:a8:e2:11:dc:aa:3c:1c:e7:ad:ca:a1:dd:ee:
e0:94:77:9e:72:ec:13:5c:bf:c9:90:7f:c9:e2:95:a7:d0:74:
c6:72:07:cb:49:e3:df:6c:14:24:47:2e:5f:ae:e2:72:0d:f9:
fb:d9:77:62:f5:ac:23:d3:d0:f7:d7:35:bd:b4:07:07:3c:6c:
a8:8d:78:7a:cd:3a:78:e6:1d:14:af:c8:77:bd:1c:e1:ba:af:
d1:53:54:6b:8f:ef:bf:cf:8a:53:5b:95:51:ed:0c:16:0e:ff:
62:06:9b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIqrDp2sBVJENOPel5DTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjYwMzAyMDYwMDU2WhcNMjYwMzAzMDYwMDU2WjAzMTEwLwYDVQQD
EyhlYzMzMTNjYmM1Y2VlNzFlNTEyZTEyYzU0MjdhNzc4MTAzYzk1MTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujL7D0DXTrZBQi0xO0Ayn5xVv2Se
2S2AyRVN4aaMb85f51k1LP+hwkzUZjNCXSykm3j+0JEr5LtQv7vbtf2eFcmcUvj3
Rrkt4fcqhIB0lGPZcn5AtKuq67QdQv3xkmcbkB3tvbT2oHp3KM4pBOyyXDbsnUZY
oNo3P5CnAov4hRxe0z+q3mNWiRegtRh7G5BVfRduEtK4+0+4zKZN2PWXxzEU4b60
+yUJSWTtOdolJcClmZxw+zCeVCXXHQjkYhiPfeYnUGksZynKYiI8k7gQxKXArI+j
furHcNtnpIv08WLwNJ2c+ehyj37ZGuSR+9Kwf7vNJGQ+WMKM7SjtTUx+fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwzE8vFzuceUS4SxUJ6d4EDyVEsMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdHsvXgG
HkA4ttLu8I36z6tKx+1wEUYA3V19me5FFZhesPhTndxNPczYNAD67QSiM1DjHSFO
1bG60xmCoC4YMbLI/E2eZzT6B4Fya/7x+MhLgKcA30EXjaXOjD2Np7Z9e+cfjX19
kbkPawIVf4q4RePK8+4BPC7Z7plZWvQM4ne/6O1Fx885YAX7jducy6cdMwQyOZao
4hHcqjwc563Kod3u4JR3nnLsE1y/yZB/yeKVp9B0xnIHy0nj32wUJEcuX67icg35
+9l3YvWsI9PQ99c1vbQHBzxsqI14es06eOYdFK/Id70c4bqv0VNUa4/vv8+KU1uV
Ue0MFg7/Ygabbw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:37 2026 by rpki-client