Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: qhr3wwnpsNn2r51n245GXNkdgoKj43RT/n3lEciOxSc=
Subject key identifier: 48:66:B1:68:12:7F:B1:41:1F:F7:84:C5:58:A5:F3:17:D9:A0:7C:41
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 019CAA21A159D4CD709D3991477FCD83AE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 16:00:56 +0000
Manifest this update: Sun 01 Mar 2026 16:00:56 +0000
Manifest next update: Mon 02 Mar 2026 16:00:56 +0000
Files and hashes: 1: G1NkqVj8Yr6VTyyoWcdSUhUvvCw.roa (hash: CZnYGn2RTJItTzBITrNscqi0v2S9GDn0ujpdRLMbDD4=)
2: _Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa (hash: xyogZ8QKw5nxXSVIno+0JDHOn4OpmuVmDGIYgg6rJzo=)
3: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: mKO2yHCBru2RRUx9F8BpFJOUYEtR50GwWupFxGX+O54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a1:59:d4:cd:70:9d:39:91:47:7f:cd:83:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Mar 1 16:00:56 2026 GMT
Not After : Mar 2 16:00:56 2026 GMT
Subject: CN=4866b168127fb1411ff784c558a5f317d9a07c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:e2:0d:77:fc:3a:bf:fe:92:f4:5b:1c:30:
0f:77:0c:89:f8:5a:c2:13:c9:a4:8a:9c:b9:24:7e:
d4:d1:49:41:e9:7b:83:3c:97:54:65:9d:01:4e:06:
9a:09:57:11:ee:34:8f:30:27:5a:75:ca:66:47:89:
85:77:64:47:4f:0e:20:56:04:64:79:0b:ea:90:e2:
8d:db:45:ee:0f:01:c4:f9:8b:c9:34:00:be:ba:2b:
7c:9a:8e:6f:41:ca:ea:c1:2d:44:10:52:3e:38:35:
1a:a0:9c:2f:b8:fb:91:16:b8:aa:a1:ee:e4:5f:46:
af:c5:63:02:de:d3:f3:b3:21:18:2c:06:f4:20:49:
92:c4:32:5d:e6:88:3b:d2:da:17:c1:bd:db:30:87:
fe:5c:c9:d7:76:ba:ef:17:f2:aa:01:74:95:16:f2:
02:0a:59:8d:9c:b2:d4:fb:2d:4a:e2:e5:56:e2:22:
18:85:30:f7:ea:d6:96:a0:47:3a:f2:33:01:5c:13:
ba:2c:54:05:03:b2:62:6c:d1:81:4a:7c:22:ee:43:
c2:ab:dc:33:96:de:8b:e2:73:2a:7e:14:6d:e5:c4:
52:33:71:71:31:d9:0e:ce:ba:91:c0:fe:ad:0a:47:
1c:a6:f9:80:95:58:e9:b2:a2:e0:31:88:c0:a6:4d:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:B1:68:12:7F:B1:41:1F:F7:84:C5:58:A5:F3:17:D9:A0:7C:41
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1c:45:36:a3:df:f0:62:96:71:8c:5a:d5:f4:46:bb:1c:e6:
5f:28:5b:9d:3d:e2:d8:76:85:57:72:5b:1a:2c:c6:c5:ea:30:
b6:99:5f:1f:d3:cd:ed:12:7c:69:84:67:7c:f7:d4:cf:1e:70:
76:57:8c:55:04:b4:5a:e6:c9:6d:c9:dc:c0:16:d3:d1:0b:3a:
34:aa:1a:f8:99:d7:2e:50:2f:22:d3:5f:fe:bd:2c:cb:d3:b0:
a5:9d:88:ec:13:dc:4c:53:21:9c:a5:a4:c7:47:9b:cd:db:fd:
69:e7:ff:fd:54:9e:ab:84:54:49:3a:87:46:d8:cc:9a:1e:f1:
e0:04:1e:5a:09:5b:79:c2:b9:36:52:0b:10:fa:1a:f4:79:34:
22:bd:f8:9b:05:8b:d5:af:bf:79:88:14:e8:5f:ca:5d:28:04:
cf:1c:83:2b:4c:2c:88:92:93:a0:fb:73:fd:18:fc:2a:31:77:
3f:ba:7a:dc:67:8f:16:5c:4f:e9:66:a7:1a:d0:88:f8:a8:00:
1b:8c:ea:fd:78:d2:17:1c:19:bf:55:01:43:07:f5:3c:eb:16:
68:33:bb:83:c2:77:d8:bc:ba:07:9f:56:b3:ae:38:30:7c:65:
e4:1d:78:42:09:87:dd:b0:ca:8d:5c:0b:5d:43:e2:55:a2:40:
ff:97:17:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIaFZ1M1wnTmRR3/Ng646MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTc1MjI1ZjM4NmNlOTgwMTE5ZjY5ODg0ZjliZTdjNmEy
YjNiMzMwHhcNMjYwMzAxMTYwMDU2WhcNMjYwMzAyMTYwMDU2WjAzMTEwLwYDVQQD
Eyg0ODY2YjE2ODEyN2ZiMTQxMWZmNzg0YzU1OGE1ZjMxN2Q5YTA3YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHfiDXf8Or/+kvRbHDAPdwyJ+FrC
E8mkipy5JH7U0UlB6XuDPJdUZZ0BTgaaCVcR7jSPMCdadcpmR4mFd2RHTw4gVgRk
eQvqkOKN20XuDwHE+YvJNAC+uit8mo5vQcrqwS1EEFI+ODUaoJwvuPuRFriqoe7k
X0avxWMC3tPzsyEYLAb0IEmSxDJd5og70toXwb3bMIf+XMnXdrrvF/KqAXSVFvIC
ClmNnLLU+y1K4uVW4iIYhTD36taWoEc68jMBXBO6LFQFA7JibNGBSnwi7kPCq9wz
lt6L4nMqfhRt5cRSM3FxMdkOzrqRwP6tCkccpvmAlVjpsqLgMYjApk3KdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhmsWgSf7FBH/eExVil8xfZoHxBMB8GA1UdIwQY
MBaAFI8XUiXzhs6YARn2mIT5vnxqKzszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjct
NjFiNzcyZDc1MWVjLzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjctNjFiNzcyZDc1MWVj
LzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhxFNqPf
8GKWcYxa1fRGuxzmXyhbnT3i2HaFV3JbGizGxeowtplfH9PN7RJ8aYRnfPfUzx5w
dleMVQS0WubJbcncwBbT0Qs6NKoa+JnXLlAvItNf/r0sy9OwpZ2I7BPcTFMhnKWk
x0ebzdv9aef//VSeq4RUSTqHRtjMmh7x4AQeWglbecK5NlILEPoa9Hk0Ir34mwWL
1a+/eYgU6F/KXSgEzxyDK0wsiJKToPtz/Rj8KjF3P7p63GePFlxP6WanGtCI+KgA
G4zq/XjSFxwZv1UBQwf1POsWaDO7g8J32Ly6B59Ws644MHxl5B14QgmH3bDKjVwL
XUPiVaJA/5cXlw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:13 2026 by rpki-client