Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: hvLRVPnjUzA3ni6hguv01/zNEGkHfT5YiisM9yGwu+M=
Subject key identifier: F4:19:8B:A9:90:65:D4:9E:24:75:6D:81:F3:FA:00:97:DB:8F:F8:94
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 019CAA58CCFC66B3803A3431144871F8B0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 11DB
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: EDI4hBfvhmhntt7hYvBIEgLQOJA.roa (hash: 2bxpLwvyVSXEk8/vuBLJpeiNYeHTrUFQCELrB9BRYW4=)
2: Fqol7Ql1lTnQ1pbIdCZcxbCF39k.roa (hash: +R5PirogobghNFmFq7p4/kohSnTc74mKrNVHXJGdCQg=)
3: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: RFq2YMjvZuKZtGy9E737aGz08kSFqVPW6s6uyLQjKwc=)
4: tbK1AbVereS_NngI45L11SaPIkg.roa (hash: pGphgE8cOkuzyKQJOlm5N3l9aQFRIzUTSTIpMJ4LzH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cc:fc:66:b3:80:3a:34:31:14:48:71:f8:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=f4198ba99065d49e24756d81f3fa0097db8ff894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:95:26:f1:5b:95:5d:65:10:19:68:70:00:8e:
f8:d7:6d:20:8b:b4:5f:d3:cf:17:c6:1f:07:f4:65:
89:70:98:4d:5f:4a:1b:4b:05:16:0b:bb:cc:8d:36:
66:e9:32:19:55:84:70:b9:59:80:ea:db:02:d9:ff:
83:fb:a3:cf:0d:59:b2:ee:bb:0d:e8:d9:9b:84:7f:
7b:5f:e1:de:6f:18:90:5d:d5:ba:70:e9:37:90:ff:
46:d8:62:f6:96:2e:3f:97:32:0a:1a:4a:ad:7f:4e:
ae:9e:9f:b0:f6:5e:33:42:36:df:3f:1d:c6:dd:e8:
12:69:ad:b7:a6:7d:e6:40:ef:ca:04:6f:71:6b:09:
93:dd:73:6a:10:3b:24:2e:bd:88:96:e8:6e:5b:f8:
a1:43:a9:a0:3a:64:18:56:ef:c4:8b:b7:4a:0a:eb:
3b:e1:f2:7a:e1:a4:8c:c5:42:99:35:fc:86:bc:85:
35:22:d9:f6:68:92:e5:90:5b:cc:e1:fd:6d:29:f0:
fa:3c:3a:71:13:bf:c8:0b:aa:8a:9f:25:a9:0c:82:
f0:3c:7f:54:d6:9a:b9:32:0d:29:c8:ac:f0:93:b2:
80:01:cb:b6:91:9e:8f:73:61:fa:c3:8c:ef:26:83:
80:df:7a:85:d1:b4:97:5f:76:de:e6:e8:11:3f:52:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:8B:A9:90:65:D4:9E:24:75:6D:81:F3:FA:00:97:DB:8F:F8:94
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:39:e6:db:a3:93:75:a8:94:55:c4:4b:9c:c7:d5:40:82:c0:
df:ec:74:ad:92:72:44:31:13:0c:13:e2:a6:47:74:3f:b3:9f:
fe:4b:91:09:12:42:fd:cc:ca:4f:6b:ae:fd:3e:22:a0:77:0c:
7c:1f:0a:b3:cd:12:1c:a4:77:8f:4c:3f:05:75:98:12:01:d9:
93:48:63:92:c2:72:9f:2b:31:3a:ba:0a:fb:16:ae:07:10:d8:
a9:a6:05:b4:9b:e0:49:94:30:b5:0b:95:9c:d5:3f:f7:d6:43:
1d:cd:f6:f2:d5:de:d0:80:75:99:74:90:4c:fc:9a:0e:80:c7:
44:d5:ed:38:c7:01:31:08:1f:17:9f:17:a3:c2:f2:d1:3b:ab:
db:b9:80:91:a4:c4:6c:4e:bb:58:e4:b0:5e:01:40:42:ff:17:
e8:0a:1b:01:cf:c3:e4:f6:06:ad:a9:0a:f1:2b:1f:e2:47:61:
d8:6b:dc:08:3e:8f:fa:97:01:aa:9d:d0:7f:a4:f1:ba:53:4f:
af:ea:8c:80:d3:6a:c7:51:a7:89:4c:ff:44:9d:55:14:8e:13:
73:cd:dd:13:89:bd:a4:1a:e2:16:6a:0f:08:0a:62:fe:6d:3a:
3e:4f:23:e1:2e:e5:c3:6d:81:d4:c3:23:89:55:6e:92:7f:1e:
4f:71:1d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWMz8ZrOAOjQxFEhx+LDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjM0MWI0MzNlMWY4ZmNiNzk2MzIyZDJmZDkyNjQwOTM5
NmU3YWQwHhcNMjYwMzAxMTcwMTEyWhcNMjYwMzAyMTcwMTEyWjAzMTEwLwYDVQQD
EyhmNDE5OGJhOTkwNjVkNDllMjQ3NTZkODFmM2ZhMDA5N2RiOGZmODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Um8VuVXWUQGWhwAI74120gi7Rf
088Xxh8H9GWJcJhNX0obSwUWC7vMjTZm6TIZVYRwuVmA6tsC2f+D+6PPDVmy7rsN
6NmbhH97X+HebxiQXdW6cOk3kP9G2GL2li4/lzIKGkqtf06unp+w9l4zQjbfPx3G
3egSaa23pn3mQO/KBG9xawmT3XNqEDskLr2IluhuW/ihQ6mgOmQYVu/Ei7dKCus7
4fJ64aSMxUKZNfyGvIU1Itn2aJLlkFvM4f1tKfD6PDpxE7/IC6qKnyWpDILwPH9U
1pq5Mg0pyKzwk7KAAcu2kZ6Pc2H6w4zvJoOA33qF0bSXX3be5ugRP1IwGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQZi6mQZdSeJHVtgfP6AJfbj/iUMB8GA1UdIwQY
MBaAFCYjQbQz4fj8t5YyLS/ZJkCTluetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTct
OTgyODJjODlmNTE2LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTctOTgyODJjODlmNTE2
LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjnm26OT
daiUVcRLnMfVQILA3+x0rZJyRDETDBPipkd0P7Of/kuRCRJC/czKT2uu/T4ioHcM
fB8Ks80SHKR3j0w/BXWYEgHZk0hjksJynysxOroK+xauBxDYqaYFtJvgSZQwtQuV
nNU/99ZDHc328tXe0IB1mXSQTPyaDoDHRNXtOMcBMQgfF58Xo8Ly0Tur27mAkaTE
bE67WOSwXgFAQv8X6AobAc/D5PYGrakK8Ssf4kdh2GvcCD6P+pcBqp3Qf6TxulNP
r+qMgNNqx1GniUz/RJ1VFI4Tc83dE4m9pBriFmoPCApi/m06Pk8j4S7lw22B1MMj
iVVukn8eT3EdLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:45 2026 by rpki-client