Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: 5qpKCzQcNsbcTvxq/NRRN8Nn3gnAnkDHAgvA0OhYAeM=
Subject key identifier: 4C:A8:99:0C:37:7F:9A:98:FB:EE:16:3C:25:AD:84:99:EF:7C:53:82
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019CAAC6257C9A6F7035537BEE2D75FCD550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 1592
Signing time: Sun 01 Mar 2026 19:00:38 +0000
Manifest this update: Sun 01 Mar 2026 19:00:38 +0000
Manifest next update: Mon 02 Mar 2026 19:00:38 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: CdLBwdYWi1A8GCl7OEWw1/XhNP6SqZQRhImBYKTtINQ=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:25:7c:9a:6f:70:35:53:7b:ee:2d:75:fc:d5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Mar 1 19:00:38 2026 GMT
Not After : Mar 2 19:00:38 2026 GMT
Subject: CN=4ca8990c377f9a98fbee163c25ad8499ef7c5382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:e3:cd:2c:f9:75:7c:f3:18:32:41:21:de:
38:4f:7e:df:e4:2f:11:60:6c:52:08:48:06:ac:57:
61:c7:7b:f2:e6:94:8d:d0:0f:03:da:51:01:dd:fd:
04:77:9b:a1:fe:ad:16:6d:f3:ac:a6:ee:b3:27:f3:
bd:bc:b5:30:99:fd:ae:3e:0e:51:e9:29:78:47:95:
94:a6:89:5d:16:78:8b:d0:f4:ea:8d:77:3e:21:13:
45:3d:13:f6:6e:b1:7e:40:09:24:e9:c3:ee:15:b8:
a1:da:50:47:0b:c9:98:22:f5:b4:f1:95:3d:28:b5:
55:1a:7b:2c:84:18:f2:37:6e:61:cc:0a:6a:89:e8:
4f:1f:87:9a:2d:83:e7:f9:6a:fa:ff:e0:37:6c:27:
4c:36:ab:0f:2e:a7:c4:cb:da:24:6a:c5:2f:8b:cb:
7f:86:e4:ec:d1:4d:d8:df:73:63:e7:7f:b6:17:5f:
ca:67:b4:26:a1:16:b9:e2:05:3b:ca:7c:9d:fa:49:
e8:c8:bb:ad:41:99:f4:55:eb:5b:d3:f5:da:dc:eb:
80:27:98:d5:f3:d7:70:42:42:34:32:f9:ee:bc:59:
b8:90:6a:5e:17:56:9b:f2:fc:aa:26:7d:f5:9c:a3:
9d:6d:72:51:10:dc:0f:59:dd:81:9d:21:34:f6:cb:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:99:0C:37:7F:9A:98:FB:EE:16:3C:25:AD:84:99:EF:7C:53:82
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cf:83:81:01:3b:42:45:80:0e:36:57:64:6d:d6:a6:61:f5:
d9:1d:38:25:82:1e:85:ff:93:d2:fb:69:56:cd:b7:7b:5c:ee:
09:ef:73:4d:81:96:04:75:83:d4:38:c8:ea:9d:37:06:f6:df:
b0:c3:13:99:a4:a7:24:2d:17:4d:ae:e9:64:5d:f3:ee:da:e2:
c3:4f:d2:b9:25:0f:d3:3c:ec:3d:b0:2f:3d:e0:17:3f:7e:09:
98:b4:90:cd:61:23:5e:66:62:04:98:4b:17:bc:2b:28:cb:a4:
54:3c:e3:54:ac:82:f7:91:a6:61:d4:32:af:0c:84:28:7d:db:
fc:11:70:b5:20:73:fb:34:a5:66:5c:d1:98:47:44:db:ea:87:
b1:1a:24:5c:1b:50:dc:40:6c:e9:ed:01:69:4a:2b:de:10:93:
3f:bd:e0:d7:1d:a5:6f:e7:50:f3:cb:f5:c5:54:7c:cb:b6:58:
87:20:fc:33:12:4f:80:f0:29:c6:0f:80:61:99:0e:c6:45:ea:
fe:43:04:82:c8:2d:06:84:5a:95:ea:ed:64:34:76:8b:1e:0d:
1c:eb:d6:6e:53:27:0f:00:fb:c4:4c:84:3d:1c:71:b7:f3:1f:
95:96:8d:f8:8f:82:72:44:46:06:6a:57:4c:97:67:80:1c:7c:
98:c6:77:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxiV8mm9wNVN77i11/NVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4
ZTk0OTAwHhcNMjYwMzAxMTkwMDM4WhcNMjYwMzAyMTkwMDM4WjAzMTEwLwYDVQQD
Eyg0Y2E4OTkwYzM3N2Y5YTk4ZmJlZTE2M2MyNWFkODQ5OWVmN2M1MzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVbjzSz5dXzzGDJBId44T37f5C8R
YGxSCEgGrFdhx3vy5pSN0A8D2lEB3f0Ed5uh/q0WbfOspu6zJ/O9vLUwmf2uPg5R
6Sl4R5WUpoldFniL0PTqjXc+IRNFPRP2brF+QAkk6cPuFbih2lBHC8mYIvW08ZU9
KLVVGnsshBjyN25hzApqiehPH4eaLYPn+Wr6/+A3bCdMNqsPLqfEy9okasUvi8t/
huTs0U3Y33Nj53+2F1/KZ7QmoRa54gU7ynyd+knoyLutQZn0Vetb0/Xa3OuAJ5jV
89dwQkI0MvnuvFm4kGpeF1ab8vyqJn31nKOdbXJRENwPWd2BnSE09suPCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyomQw3f5qY++4WPCWthJnvfFOCMB8GA1UdIwQY
MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt
YjEwYTIyZDBhNDc2LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2
LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIM+DgQE7
QkWADjZXZG3WpmH12R04JYIehf+T0vtpVs23e1zuCe9zTYGWBHWD1DjI6p03Bvbf
sMMTmaSnJC0XTa7pZF3z7triw0/SuSUP0zzsPbAvPeAXP34JmLSQzWEjXmZiBJhL
F7wrKMukVDzjVKyC95GmYdQyrwyEKH3b/BFwtSBz+zSlZlzRmEdE2+qHsRokXBtQ
3EBs6e0BaUor3hCTP73g1x2lb+dQ88v1xVR8y7ZYhyD8MxJPgPApxg+AYZkOxkXq
/kMEgsgtBoRalertZDR2ix4NHOvWblMnDwD7xEyEPRxxt/MflZaN+I+CckRGBmpX
TJdngBx8mMZ3Cw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:18 2026 by rpki-client