Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: uljqrdgG8VgLhvxy/Cvug2mm93aQLNjR9OgX421A920=
Subject key identifier: 65:41:B0:FC:92:AA:D8:E3:6E:D2:15:71:A0:4B:F9:B6:A9:2F:00:78
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 019CAAC689043E7E1A4EE3870DF86DAF9C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 1177
Signing time: Sun 01 Mar 2026 19:01:03 +0000
Manifest this update: Sun 01 Mar 2026 19:01:03 +0000
Manifest next update: Mon 02 Mar 2026 19:01:03 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: VMMr9IheUdqkilucuULsgk7s570YnlHLJ/eS67yBR1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:89:04:3e:7e:1a:4e:e3:87:0d:f8:6d:af:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Mar 1 19:01:03 2026 GMT
Not After : Mar 2 19:01:03 2026 GMT
Subject: CN=6541b0fc92aad8e36ed21571a04bf9b6a92f0078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:39:e6:aa:6c:14:d5:55:95:16:c7:c0:8c:
ba:45:63:3b:e8:1b:ef:aa:33:51:4f:42:05:e4:01:
4b:76:c1:7f:c5:19:ac:6d:02:29:36:fd:68:06:ed:
77:69:60:c8:61:d5:7d:bb:cd:9a:e5:56:15:07:42:
3a:2e:1e:44:ef:d1:2e:cc:35:6b:7c:19:d9:fa:72:
e1:b6:aa:ca:74:3c:e0:a7:b9:93:d3:63:f4:df:5a:
32:f3:f1:06:23:1b:73:5a:44:2e:dc:8f:55:86:36:
5c:ac:55:a2:75:1e:fe:5d:77:af:18:a9:c4:86:4c:
ac:0e:84:06:41:c4:e5:94:9d:3d:fa:8a:8e:24:7d:
2c:8d:8d:69:ef:1f:86:a7:17:39:4c:8d:14:da:94:
7e:9e:44:9e:90:39:ba:d6:4e:ba:37:49:11:b1:37:
7a:ef:f3:f3:ca:b7:b3:6d:ea:54:08:2a:59:f9:c0:
28:60:e4:32:d2:af:0c:42:2d:c0:58:01:dc:f6:9f:
07:44:22:7b:14:0d:3c:6d:e7:4b:80:ab:4b:61:f9:
bc:73:a4:53:e3:a1:41:c5:00:27:52:06:5b:cc:78:
ab:e2:73:53:c2:f9:81:b3:68:b6:bd:45:e1:cd:7e:
75:ba:bb:7b:19:1f:1d:38:bc:90:1d:01:9d:b4:61:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:B0:FC:92:AA:D8:E3:6E:D2:15:71:A0:4B:F9:B6:A9:2F:00:78
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:98:62:3c:ce:98:2e:6c:cf:40:2c:ed:ab:72:2f:a0:43:ba:
c7:fd:12:68:33:4c:28:77:8a:6d:34:ee:91:b8:75:12:dd:66:
1e:20:2e:ee:a4:3d:c6:09:c8:26:c8:c1:61:34:2a:ed:b6:a8:
ee:3f:e0:f2:96:31:a9:3a:c1:34:fa:cc:9f:af:d0:f1:13:47:
f3:17:bc:4d:a4:17:42:de:b7:cd:9f:3b:78:54:fa:13:29:cb:
0f:ad:b4:34:77:78:54:32:b5:6a:42:9d:1c:4f:76:26:c9:35:
27:f9:3b:d3:72:97:6f:62:09:73:49:90:af:6d:be:dc:ac:f8:
32:9b:c4:eb:76:c2:47:4d:0d:15:8c:d7:b0:53:89:c0:1f:64:
bd:e3:74:44:24:d2:94:c8:22:cc:5b:e4:6a:25:b3:87:30:67:
6d:3a:c7:da:18:10:10:3e:52:a2:ba:a0:d4:18:bf:15:34:42:
98:51:14:54:e7:b1:40:3d:e9:8f:dc:7f:e4:86:c7:27:c3:ec:
3f:c6:f7:db:cb:63:f4:4e:bb:0a:09:b8:99:15:bd:ae:08:f8:
a3:0b:62:fa:e9:32:c1:07:fb:c4:25:87:36:a3:75:32:16:54:
51:d6:5c:c8:12:be:d3:f6:40:db:06:82:25:92:17:d4:8a:ed:
97:3f:50:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxokEPn4aTuOHDfhtr5yeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmU0ZTkwOWJlYjZjMmExZDJkNjY4MmIwOWM2ODJhMjQx
YzRiYzYwHhcNMjYwMzAxMTkwMTAzWhcNMjYwMzAyMTkwMTAzWjAzMTEwLwYDVQQD
Eyg2NTQxYjBmYzkyYWFkOGUzNmVkMjE1NzFhMDRiZjliNmE5MmYwMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAM55qpsFNVVlRbHwIy6RWM76Bvv
qjNRT0IF5AFLdsF/xRmsbQIpNv1oBu13aWDIYdV9u82a5VYVB0I6Lh5E79EuzDVr
fBnZ+nLhtqrKdDzgp7mT02P031oy8/EGIxtzWkQu3I9VhjZcrFWidR7+XXevGKnE
hkysDoQGQcTllJ09+oqOJH0sjY1p7x+Gpxc5TI0U2pR+nkSekDm61k66N0kRsTd6
7/PzyrezbepUCCpZ+cAoYOQy0q8MQi3AWAHc9p8HRCJ7FA08bedLgKtLYfm8c6RT
46FBxQAnUgZbzHir4nNTwvmBs2i2vUXhzX51urt7GR8dOLyQHQGdtGGwuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVBsPySqtjjbtIVcaBL+bapLwB4MB8GA1UdIwQY
MBaAFCW+TpCb62wqHS1mgrCcaCokHEvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yOWNiN2ItZWQ5ZS00MjA1LTg4OGEt
NzUzZGZjZGFhNmJmLzEvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yOWNiN2ItZWQ5ZS00MjA1LTg4OGEtNzUzZGZjZGFhNmJm
LzEvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJhiPM6Y
LmzPQCztq3IvoEO6x/0SaDNMKHeKbTTukbh1Et1mHiAu7qQ9xgnIJsjBYTQq7bao
7j/g8pYxqTrBNPrMn6/Q8RNH8xe8TaQXQt63zZ87eFT6EynLD620NHd4VDK1akKd
HE92Jsk1J/k703KXb2IJc0mQr22+3Kz4MpvE63bCR00NFYzXsFOJwB9kveN0RCTS
lMgizFvkaiWzhzBnbTrH2hgQED5Sorqg1Bi/FTRCmFEUVOexQD3pj9x/5IbHJ8Ps
P8b328tj9E67Cgm4mRW9rgj4owti+ukywQf7xCWHNqN1MhZUUdZcyBK+0/ZA2waC
JZIX1Irtlz9Qzw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:34 2026 by rpki-client