Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: sVU4UphWFSp7wRetOGUSk1c3IyAguL25cOInWvVYgXw=
Subject key identifier: 94:BC:FD:5A:59:34:BF:C2:74:6D:CB:49:0F:01:BA:DF:B9:8F:40:6A
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 019CAF4866CA8BF71D1651F664F65E77CF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 0A62
Signing time: Mon 02 Mar 2026 16:01:23 +0000
Manifest this update: Mon 02 Mar 2026 16:01:23 +0000
Manifest next update: Tue 03 Mar 2026 16:01:23 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: AVLL6RHGFm4i6NrcGnOh4p7EhxhtPiga1beZbn8UWg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:66:ca:8b:f7:1d:16:51:f6:64:f6:5e:77:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Mar 2 16:01:23 2026 GMT
Not After : Mar 3 16:01:23 2026 GMT
Subject: CN=94bcfd5a5934bfc2746dcb490f01badfb98f406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:3b:d4:9c:4a:1b:bc:4c:cc:15:0c:d1:7a:
a9:7a:cf:13:48:92:f3:54:5c:7b:f3:f8:a2:e2:3a:
27:9a:ef:16:61:dc:c1:bb:c8:c8:f6:54:e2:c4:b0:
60:b9:8a:91:97:8d:71:07:1f:65:48:bb:0e:89:fb:
e5:23:8c:83:f7:8c:59:20:d3:a4:be:dd:07:78:50:
f8:44:c1:f3:45:d8:dd:3b:05:4a:5c:e1:0f:45:8c:
81:c0:83:7b:bc:8e:01:f4:ac:61:96:5e:98:90:b4:
31:b5:68:6f:35:2f:d6:1c:8a:3b:2a:7f:4a:88:84:
cf:3f:0d:c2:8e:de:dc:9c:9c:1c:be:8b:33:84:ea:
6a:05:89:be:8a:af:aa:8d:c0:e9:e6:2a:a3:07:55:
dd:5f:f6:f6:11:fb:9f:59:0e:7d:d7:91:06:be:4a:
b2:2f:48:c0:79:ff:9e:cd:83:a2:16:78:ff:fd:ad:
7f:04:e1:af:b2:1c:1a:06:58:0d:b9:ff:36:cf:f9:
70:a4:6f:45:fa:4d:81:06:21:b4:d5:f1:47:1c:23:
71:28:c9:94:0c:92:ec:68:02:53:62:67:9d:9c:65:
99:98:b7:5f:f5:fb:fc:d2:4a:a5:49:fe:a8:db:c1:
d1:fa:6a:e5:ae:2b:ff:e9:6e:69:9b:8b:9a:9e:41:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BC:FD:5A:59:34:BF:C2:74:6D:CB:49:0F:01:BA:DF:B9:8F:40:6A
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:06:8d:36:6d:93:b7:4c:0b:77:61:04:f9:ef:67:39:50:27:
98:73:59:e7:10:97:22:cc:8a:51:5f:4b:b8:cf:60:b1:aa:c5:
8d:f1:1b:45:4b:2b:9d:47:56:d1:78:f2:61:96:8e:b9:73:f3:
ca:67:08:d1:de:42:f5:a6:d4:22:11:54:98:26:aa:88:37:bc:
90:58:71:3e:6f:7f:e8:3d:c9:ea:60:d3:40:c0:17:d1:33:bb:
4f:e0:73:dc:90:4d:0d:03:b8:b9:60:b1:7b:a4:2b:e0:c3:93:
e2:64:21:e5:06:ca:14:48:1b:1f:51:b0:9f:e8:f9:a6:44:b5:
7e:97:8f:a1:fe:32:4b:b3:0f:7b:25:f1:1e:2c:53:8f:45:1b:
4b:a0:b0:70:43:ac:95:31:52:b2:61:96:b7:5a:fe:38:05:a6:
bf:f3:ff:16:da:15:09:dd:54:2e:22:f5:4f:2b:e3:03:b5:17:
2e:90:cf:f6:a5:c4:58:ff:a2:24:fb:7a:22:51:bd:5d:96:e4:
bf:62:95:b3:7d:d9:c2:de:a1:8e:d2:b5:1a:75:af:44:90:d3:
3d:15:54:a8:9b:70:08:6b:b5:1d:d7:0d:4d:57:fe:98:51:9a:
c8:52:aa:03:c3:e5:05:b5:b3:ba:71:99:25:ac:89:67:48:f2:
df:84:65:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvSGbKi/cdFlH2ZPZed89zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTdkY2M3ZTUyZjU4YjM0MmI3MGM4M2RhYTIxYTEwNmFj
NTkyOTEwHhcNMjYwMzAyMTYwMTIzWhcNMjYwMzAzMTYwMTIzWjAzMTEwLwYDVQQD
Eyg5NGJjZmQ1YTU5MzRiZmMyNzQ2ZGNiNDkwZjAxYmFkZmI5OGY0MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllk71JxKG7xMzBUM0Xqpes8TSJLz
VFx78/ii4jonmu8WYdzBu8jI9lTixLBguYqRl41xBx9lSLsOifvlI4yD94xZINOk
vt0HeFD4RMHzRdjdOwVKXOEPRYyBwIN7vI4B9Kxhll6YkLQxtWhvNS/WHIo7Kn9K
iITPPw3Cjt7cnJwcvoszhOpqBYm+iq+qjcDp5iqjB1XdX/b2EfufWQ5915EGvkqy
L0jAef+ezYOiFnj//a1/BOGvshwaBlgNuf82z/lwpG9F+k2BBiG01fFHHCNxKMmU
DJLsaAJTYmednGWZmLdf9fv80kqlSf6o28HR+mrlriv/6W5pm4uankHriwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS8/VpZNL/CdG3LSQ8But+5j0BqMB8GA1UdIwQY
MBaAFIxX3MflL1izQrcMg9qiGhBqxZKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYt
NDEzMDZjMjdkNmYwLzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYtNDEzMDZjMjdkNmYw
LzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgaNNm2T
t0wLd2EE+e9nOVAnmHNZ5xCXIsyKUV9LuM9gsarFjfEbRUsrnUdW0XjyYZaOuXPz
ymcI0d5C9abUIhFUmCaqiDe8kFhxPm9/6D3J6mDTQMAX0TO7T+Bz3JBNDQO4uWCx
e6Qr4MOT4mQh5QbKFEgbH1Gwn+j5pkS1fpePof4yS7MPeyXxHixTj0UbS6CwcEOs
lTFSsmGWt1r+OAWmv/P/FtoVCd1ULiL1TyvjA7UXLpDP9qXEWP+iJPt6IlG9XZbk
v2KVs33Zwt6hjtK1GnWvRJDTPRVUqJtwCGu1HdcNTVf+mFGayFKqA8PlBbWzunGZ
JayJZ0jy34Rl7g==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:16 2026 by rpki-client