Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File: JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier: 6G4byUX6uqFaWPgo+syri6MoiwVAD6lJkfixHUGjlFw=
Subject key identifier: 00:2E:4A:FB:4B:BB:0A:07:98:5C:34:A6:D9:6D:90:2A:4F:55:20:9D
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 019CAAC67D2EB72C9EFAFBE0B0B2537523FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: 3xiDzGgK4e9ceC4u7RUWp0fz_SM.roa (hash: DZHEO3sSIJCigbbB46icKw7YPH6Y87vFoZ5HjcDSncs=)
2: 9pGhFTVH5XN8vbhHpytqSGENvrk.roa (hash: LhRnX4VDOkccbXWuT427U2ER9cwZLZ0V0MGvKtu8Yyg=)
3: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: Gh/jD3kYlRbgR7GJgiOEYcjdAl7oQCVPjLC2u+MePxQ=)
4: eEZUpEtjObJ9yeYuMAQAw_0jXUU.roa (hash: nuE7s/MKLf67lp3yMJo4q3u/cNq9UefHf0q9u+Y32mI=)
5: nNax3jH-aHbv8fUxbVL4yA04BCc.roa (hash: fqwvBl3p3PjrVK5KfWPgoqVaATaBD26mauAzKvmJgv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7d:2e:b7:2c:9e:fa:fb:e0:b0:b2:53:75:23:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=002e4afb4bbb0a07985c34a6d96d902a4f55209d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:a2:aa:6e:6b:b6:24:28:d9:84:6c:21:0e:
ab:78:7c:4f:be:a3:02:eb:b9:6c:bb:13:bb:34:0c:
00:97:12:1c:45:25:f9:64:4b:09:9f:62:ad:4a:1a:
fd:c0:b5:5d:01:a1:e2:44:f4:ce:19:69:77:9a:8f:
b8:dc:4e:30:bb:2c:3f:68:cc:b3:0f:9a:aa:7f:51:
cd:d0:c3:d0:e0:22:b1:c0:33:8b:30:63:1f:02:71:
1c:83:d1:fb:7a:77:87:76:43:37:43:69:4b:e6:99:
c7:d9:15:ef:39:0d:98:a1:0b:7c:fb:c5:2c:7a:47:
97:cd:39:d4:ba:ee:d7:83:74:71:58:23:16:dc:ae:
0c:3e:e3:16:49:8a:4e:22:0b:9c:be:18:29:58:4d:
c4:f0:5c:66:39:b8:31:b2:d0:7c:d5:9a:6c:2c:ae:
b1:e1:04:10:29:ac:8a:13:51:0b:b2:2f:11:77:4b:
f0:29:78:cf:21:0c:b7:a4:41:dd:de:25:44:81:c5:
8a:04:6a:26:48:d5:b9:24:45:2e:50:8f:f9:5a:19:
18:54:46:c4:3d:3e:c0:57:50:79:4d:0d:de:b6:86:
90:d0:de:04:60:23:da:86:31:97:c8:25:78:c2:87:
d2:8c:1a:3a:b4:4f:d8:9a:68:05:43:59:fa:de:a3:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:4A:FB:4B:BB:0A:07:98:5C:34:A6:D9:6D:90:2A:4F:55:20:9D
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:2f:e5:a3:1e:16:9b:04:27:d4:6d:d7:74:24:2d:20:88:
57:98:40:5a:19:d4:38:d5:ef:b9:98:d7:1f:de:94:cb:46:cd:
5d:6a:78:2c:a6:58:92:92:bd:1a:59:a6:8e:c4:92:a3:cc:b3:
0f:e5:6c:d1:b5:c5:21:39:3d:c6:5c:97:59:00:6b:4a:fb:9d:
26:de:2b:a2:47:97:01:b3:61:62:72:90:1e:c0:6b:e1:45:3c:
b2:4e:b3:e3:1d:bf:53:99:b7:86:cb:0e:e1:90:cd:cd:19:22:
f6:d0:83:e9:41:04:a9:4b:30:48:9c:f6:e8:1d:73:01:2c:ab:
55:df:04:96:d4:85:0d:4a:bb:4b:0d:85:7f:4d:0e:b7:1c:d3:
0e:cf:1c:7a:27:ce:44:15:58:9a:5b:01:37:28:c5:3b:08:7a:
73:1e:54:79:45:de:2f:9b:c4:65:56:fd:b6:51:57:4c:e7:1a:
1b:6c:ee:f2:5c:ff:a4:72:09:23:3d:c2:f1:2d:eb:7a:8a:9d:
05:c7:49:eb:f2:68:7b:ec:29:a4:b1:8a:62:7d:bd:ba:5b:21:
e9:11:c6:84:90:c1:44:5c:58:ef:d3:91:56:1e:2b:75:5d:1c:
81:73:c8:96:8c:75:a6:b5:1e:2e:9e:c9:50:48:79:ac:f0:01:
73:35:58:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxn0utyye+vvgsLJTdSP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5MGY1ZjMxZjIzOGRmM2U4ZjNiZGZjYzA1NzUxY2My
ZjE5MmMwHhcNMjYwMzAxMTkwMTAwWhcNMjYwMzAyMTkwMTAwWjAzMTEwLwYDVQQD
EygwMDJlNGFmYjRiYmIwYTA3OTg1YzM0YTZkOTZkOTAyYTRmNTUyMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKaiqm5rtiQo2YRsIQ6reHxPvqMC
67lsuxO7NAwAlxIcRSX5ZEsJn2KtShr9wLVdAaHiRPTOGWl3mo+43E4wuyw/aMyz
D5qqf1HN0MPQ4CKxwDOLMGMfAnEcg9H7eneHdkM3Q2lL5pnH2RXvOQ2YoQt8+8Us
ekeXzTnUuu7Xg3RxWCMW3K4MPuMWSYpOIgucvhgpWE3E8FxmObgxstB81ZpsLK6x
4QQQKayKE1ELsi8Rd0vwKXjPIQy3pEHd3iVEgcWKBGomSNW5JEUuUI/5WhkYVEbE
PT7AV1B5TQ3etoaQ0N4EYCPahjGXyCV4wofSjBo6tE/YmmgFQ1n63qN7lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAuSvtLuwoHmFw0ptltkCpPVSCdMB8GA1UdIwQY
MBaAFCcCkPXzHyON8+jzvfzAV1HMLxksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAt
YjE0Y2M5MWM3NzZjLzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAtYjE0Y2M5MWM3NzZj
LzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHEv5aMe
FpsEJ9Rt13QkLSCIV5hAWhnUONXvuZjXH96Uy0bNXWp4LKZYkpK9GlmmjsSSo8yz
D+Vs0bXFITk9xlyXWQBrSvudJt4rokeXAbNhYnKQHsBr4UU8sk6z4x2/U5m3hssO
4ZDNzRki9tCD6UEEqUswSJz26B1zASyrVd8EltSFDUq7Sw2Ff00OtxzTDs8ceifO
RBVYmlsBNyjFOwh6cx5UeUXeL5vEZVb9tlFXTOcaG2zu8lz/pHIJIz3C8S3reoqd
BcdJ6/Joe+wppLGKYn29ulsh6RHGhJDBRFxY79ORVh4rdV0cgXPIlox1prUeLp7J
UEh5rPABczVYaw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:24 2026 by rpki-client