Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: K4ZLFxpZnIOYOUxCRwJPPjESJxpTfr1kVoBzF6V5sdY=
Subject key identifier: E4:1A:D3:47:44:59:F7:06:AE:22:4E:A4:D9:85:5D:5D:B9:D9:EF:3E
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019CAD9036E6CAD2E7581CC8483600AC84DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 1605
Signing time: Mon 02 Mar 2026 08:00:35 +0000
Manifest this update: Mon 02 Mar 2026 08:00:35 +0000
Manifest next update: Tue 03 Mar 2026 08:00:35 +0000
Files and hashes: 1: cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa (hash: 9j0sAYqHnylk8DHpPYOuCBCLe7gHNXAvxTbqjQ3el4M=)
2: lNDMKb0aTV8SXs00e18A81qWIek.roa (hash: herRhJivtwm2jHvfa8VAdymtufMvK+b5YDKOa9xoFaM=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: BZV5SZNpoz11uSXM8iPOIDb+qqsqTBdk5ue0pMac14g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:36:e6:ca:d2:e7:58:1c:c8:48:36:00:ac:84:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Mar 2 08:00:35 2026 GMT
Not After : Mar 3 08:00:35 2026 GMT
Subject: CN=e41ad3474459f706ae224ea4d9855d5db9d9ef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:4c:89:ea:ba:6b:9b:16:f2:61:71:27:56:
e4:2b:8e:b2:81:90:49:59:54:fa:30:34:9f:f3:25:
c0:c8:8a:d7:2a:b3:51:88:85:02:ee:d7:a1:bc:6c:
32:7e:72:26:d9:a3:41:3f:a6:be:c5:24:88:7b:44:
40:45:5a:20:e1:2c:c9:45:b5:87:a4:28:e8:99:30:
8d:8b:68:bb:45:fa:08:84:17:f0:e2:2e:40:d9:f9:
83:7c:34:92:c4:ff:94:20:5e:6e:1d:23:52:c8:71:
30:17:8c:e6:dc:52:48:18:54:15:bc:83:80:57:e1:
77:ef:d0:1d:17:a8:2b:09:a6:a1:62:b3:19:eb:fa:
25:e3:5a:45:1e:42:36:9a:97:9e:38:0e:f2:59:d4:
af:64:e8:45:3d:db:61:16:52:c4:54:c5:b1:8c:b8:
93:7f:be:a5:46:f3:91:d1:5c:fb:a8:79:08:ab:9c:
a0:da:cc:e0:33:ba:e9:a5:de:dc:d1:5d:d7:b3:6b:
70:99:fa:e0:bb:2e:3d:dd:f2:37:3d:48:cf:b6:e9:
5c:40:f7:66:03:df:4e:d5:37:91:9c:53:20:13:5c:
cc:3c:0a:d0:44:b7:4c:52:d8:ef:da:89:b7:88:ae:
6d:d7:ee:b4:34:f4:4c:84:9b:42:ba:0a:9a:e1:87:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:D3:47:44:59:F7:06:AE:22:4E:A4:D9:85:5D:5D:B9:D9:EF:3E
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:93:fa:0a:eb:bf:05:4e:e1:87:bb:a8:88:f5:f0:20:bd:
68:1e:37:c8:50:08:7d:88:6e:2f:09:66:0c:a3:00:4c:d6:99:
14:51:ae:91:75:52:13:97:c2:86:db:e7:2a:39:ac:91:05:b3:
87:d7:e1:a6:7a:e4:42:f2:e4:24:cc:8f:0b:3f:fd:e0:00:8a:
7a:8b:cc:97:08:62:38:60:57:59:d7:7a:ac:4f:20:c6:f3:0d:
1d:af:6f:3b:73:ea:be:74:78:b1:e0:03:6f:af:7e:b9:1f:be:
03:82:e9:2a:28:07:f5:55:cc:72:c1:e3:92:bb:33:0e:7f:66:
27:28:2c:96:bf:c6:dc:f4:7d:75:c1:f9:a6:1a:bf:12:36:59:
d7:41:62:40:09:22:03:dc:4e:3b:37:4b:c5:b3:2b:de:33:fe:
e6:5e:96:e8:79:92:ef:d1:3d:25:1c:08:ae:75:24:63:3a:57:
cd:a0:36:f4:24:6b:08:f4:f7:3e:95:a4:09:19:bd:08:bb:1a:
2b:d1:72:65:be:72:40:9d:09:18:4c:d1:1d:cf:59:07:91:7e:
2a:8b:f2:76:ac:3e:6f:8e:6e:a3:46:79:db:54:20:b3:01:63:
7f:0d:e2:26:fa:a4:e4:13:93:6c:ec:bf:49:05:c0:3b:70:98:
da:b3:b3:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkDbmytLnWBzISDYArITaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWUyZWZjZGMyMTNhYzViMWIwODc5ZDkyMmExNzhiODUw
ZjQ1MWYwHhcNMjYwMzAyMDgwMDM1WhcNMjYwMzAzMDgwMDM1WjAzMTEwLwYDVQQD
EyhlNDFhZDM0NzQ0NTlmNzA2YWUyMjRlYTRkOTg1NWQ1ZGI5ZDllZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNtMieq6a5sW8mFxJ1bkK46ygZBJ
WVT6MDSf8yXAyIrXKrNRiIUC7tehvGwyfnIm2aNBP6a+xSSIe0RARVog4SzJRbWH
pCjomTCNi2i7RfoIhBfw4i5A2fmDfDSSxP+UIF5uHSNSyHEwF4zm3FJIGFQVvIOA
V+F379AdF6grCaahYrMZ6/ol41pFHkI2mpeeOA7yWdSvZOhFPdthFlLEVMWxjLiT
f76lRvOR0Vz7qHkIq5yg2szgM7rppd7c0V3Xs2twmfrguy493fI3PUjPtulcQPdm
A99O1TeRnFMgE1zMPArQRLdMUtjv2om3iK5t1+60NPRMhJtCugqa4YcVnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQa00dEWfcGriJOpNmFXV252e8+MB8GA1UdIwQY
MBaAFKyeLvzcITrFsbCHnZIqF4uFD0UfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEt
N2M3YmYyNzE3NWM1LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEtN2M3YmYyNzE3NWM1
LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1KT+grr
vwVO4Ye7qIj18CC9aB43yFAIfYhuLwlmDKMATNaZFFGukXVSE5fChtvnKjmskQWz
h9fhpnrkQvLkJMyPCz/94ACKeovMlwhiOGBXWdd6rE8gxvMNHa9vO3PqvnR4seAD
b69+uR++A4LpKigH9VXMcsHjkrszDn9mJygslr/G3PR9dcH5phq/EjZZ10FiQAki
A9xOOzdLxbMr3jP+5l6W6HmS79E9JRwIrnUkYzpXzaA29CRrCPT3PpWkCRm9CLsa
K9FyZb5yQJ0JGEzRHc9ZB5F+Kovydqw+b45uo0Z521QgswFjfw3iJvqk5BOTbOy/
SQXAO3CY2rOzFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:42 2026 by rpki-client