Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: HawMu9gCVLBNOOFuAUANsd/DGZ67bj2r5iIKP3jm0tA=
Subject key identifier: FD:E1:B0:30:B7:DF:FC:4A:0A:48:0E:E3:DF:E7:3A:BA:FA:2D:B4:38
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 019CA9B37E01105C7C483BC223D85D4149EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 176D
Signing time: Sun 01 Mar 2026 14:00:38 +0000
Manifest this update: Sun 01 Mar 2026 14:00:38 +0000
Manifest next update: Mon 02 Mar 2026 14:00:38 +0000
Files and hashes: 1: 5SPOOAFTV5wB0v8bOqbqxdbSbOQ.roa (hash: mgFPEV4LAu92g1S2eIdHABLNocI2JnL7lnfnPbZr274=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: LFszFIJPdw/rOjmuK34F5S+GLle+gOJ/uXEs2/idMyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:7e:01:10:5c:7c:48:3b:c2:23:d8:5d:41:49:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Mar 1 14:00:38 2026 GMT
Not After : Mar 2 14:00:38 2026 GMT
Subject: CN=fde1b030b7dffc4a0a480ee3dfe73abafa2db438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:17:52:6c:09:49:7f:6f:73:93:73:42:40:
b7:d8:be:03:a2:ad:f1:ad:be:4b:ff:03:01:ed:c5:
89:d2:b0:b1:f8:bf:df:11:46:f1:50:21:2a:2b:36:
89:09:37:ed:18:3e:d9:d3:d3:59:da:7f:85:b1:48:
19:51:f5:e8:95:41:e0:5e:66:ae:00:4e:9d:90:53:
db:dc:7a:57:be:28:30:49:ba:5d:a5:6e:6a:19:5c:
76:0c:a8:c1:38:05:89:bf:e4:14:1b:9d:96:0b:02:
63:41:be:b1:4a:82:ec:03:9d:34:ec:d5:c4:ba:e8:
0a:53:0e:1e:5a:f5:32:57:7f:ce:8a:ff:95:ba:d7:
a2:4d:b5:62:6e:db:d3:e9:e6:c7:59:d2:7e:b7:83:
43:85:b1:f9:a3:10:b1:10:4c:6e:8d:dd:14:6a:84:
4c:a0:8f:70:6d:79:01:77:99:cf:4d:92:15:72:17:
44:44:8b:75:bf:13:39:69:69:b1:37:d6:9d:83:ac:
94:ca:34:9c:14:52:e4:e0:7e:9b:1c:72:15:b6:80:
23:3c:e6:ab:1e:f3:f2:99:86:02:69:67:84:51:e0:
23:3d:df:95:b9:f6:29:c8:48:c9:33:23:bd:c2:51:
73:33:9f:d3:76:9e:be:38:f6:b7:65:f6:a1:5a:21:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E1:B0:30:B7:DF:FC:4A:0A:48:0E:E3:DF:E7:3A:BA:FA:2D:B4:38
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:72:f4:2b:89:5d:08:f9:2f:1d:32:93:c1:55:44:d2:c6:b9:
9a:1e:63:49:a7:75:4d:66:d4:24:72:ff:48:49:03:82:5a:15:
f0:44:04:03:f3:36:b9:11:ae:64:09:3f:89:05:fd:2f:d4:20:
f9:71:4f:16:d9:34:24:f7:79:79:51:8e:2d:b9:d3:72:b9:09:
2f:2b:b8:b6:27:98:2a:00:6b:c3:39:51:d5:b7:e8:74:1d:91:
1c:4d:d4:d1:d6:cf:6c:3e:d8:9d:b5:c5:07:94:d8:bf:28:65:
15:36:fd:c5:59:90:7e:3f:c0:fa:8e:9f:82:fe:43:61:ac:d7:
59:57:45:ab:fa:9b:f8:7a:c9:1e:17:7c:62:71:8f:04:af:03:
bc:05:6d:80:2a:36:6e:7e:e8:50:52:80:a4:8a:cc:28:8d:43:
5a:fe:1f:a4:db:5c:0f:54:24:7a:e2:2f:a9:8b:64:2a:52:9c:
9b:ef:d2:0c:de:11:40:b4:9a:00:bf:76:f0:83:b0:b0:42:9a:
db:56:c4:81:cd:fb:20:ec:66:db:f3:35:5c:2f:26:2f:69:76:
94:c7:3b:21:7d:90:79:a4:a6:7f:5a:a8:44:1e:8f:45:5c:4d:
17:75:5a:c8:f7:bd:0a:09:20:a8:7d:dc:f1:90:05:f5:f9:cf:
44:8c:1b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps34BEFx8SDvCI9hdQUnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGY1MDFiYmY5ZTEzY2RkMmViODk5ZDk3MTIxZjY2OWFh
MjkxMzUwHhcNMjYwMzAxMTQwMDM4WhcNMjYwMzAyMTQwMDM4WjAzMTEwLwYDVQQD
EyhmZGUxYjAzMGI3ZGZmYzRhMGE0ODBlZTNkZmU3M2FiYWZhMmRiNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj4XUmwJSX9vc5NzQkC32L4Doq3x
rb5L/wMB7cWJ0rCx+L/fEUbxUCEqKzaJCTftGD7Z09NZ2n+FsUgZUfXolUHgXmau
AE6dkFPb3HpXvigwSbpdpW5qGVx2DKjBOAWJv+QUG52WCwJjQb6xSoLsA5007NXE
uugKUw4eWvUyV3/Oiv+VuteiTbVibtvT6ebHWdJ+t4NDhbH5oxCxEExujd0UaoRM
oI9wbXkBd5nPTZIVchdERIt1vxM5aWmxN9adg6yUyjScFFLk4H6bHHIVtoAjPOar
HvPymYYCaWeEUeAjPd+VufYpyEjJMyO9wlFzM5/Tdp6+OPa3ZfahWiFDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3hsDC33/xKCkgO49/nOrr6LbQ4MB8GA1UdIwQY
MBaAFCaPUBu/nhPN0uuJnZcSH2aaopE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGIt
Y2EwYzc3MmI3MjlmLzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGItY2EwYzc3MmI3Mjlm
LzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnL0K4ld
CPkvHTKTwVVE0sa5mh5jSad1TWbUJHL/SEkDgloV8EQEA/M2uRGuZAk/iQX9L9Qg
+XFPFtk0JPd5eVGOLbnTcrkJLyu4tieYKgBrwzlR1bfodB2RHE3U0dbPbD7YnbXF
B5TYvyhlFTb9xVmQfj/A+o6fgv5DYazXWVdFq/qb+HrJHhd8YnGPBK8DvAVtgCo2
bn7oUFKApIrMKI1DWv4fpNtcD1QkeuIvqYtkKlKcm+/SDN4RQLSaAL928IOwsEKa
21bEgc37IOxm2/M1XC8mL2l2lMc7IX2QeaSmf1qoRB6PRVxNF3VayPe9CgkgqH3c
8ZAF9fnPRIwbBQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:37 2026 by rpki-client