Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: SYmQ9Mhmgs9UVJJ87niiJmDAHKhMbsdfPoE6ypsnREU=
Subject key identifier: 4C:A4:7B:3D:7C:36:6E:7E:38:5F:6A:4C:33:15:5C:0B:C6:F4:B2:B0
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019CAEA355956C2BBF54F88FC5D5B0EB7EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 172A
Signing time: Mon 02 Mar 2026 13:01:05 +0000
Manifest this update: Mon 02 Mar 2026 13:01:05 +0000
Manifest next update: Tue 03 Mar 2026 13:01:05 +0000
Files and hashes: 1: LdCRaHhazOeLddVRNjbt-lN1LPk.roa (hash: QrSaWYNr7PCIasXKnHQDuoKUjuH96RFSwCo7qprYbg0=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: 0dJijrVOcenI4MU5HZK+BX+ROR8wF0AoayaqMpaf4lg=)
3: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (hash: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:55:95:6c:2b:bf:54:f8:8f:c5:d5:b0:eb:7e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Mar 2 13:01:05 2026 GMT
Not After : Mar 3 13:01:05 2026 GMT
Subject: CN=4ca47b3d7c366e7e385f6a4c33155c0bc6f4b2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:99:a9:e3:74:08:de:4a:ba:db:f1:aa:c3:
d8:f1:74:44:d1:ef:1f:02:c6:ea:fb:b2:18:aa:f4:
ef:b2:fc:8b:7b:d3:5d:86:b7:6d:b3:7b:cb:9e:28:
37:6d:d8:75:08:59:35:96:d1:a8:ea:29:ee:17:ad:
7a:b4:a3:6c:87:4d:04:fb:be:4c:11:be:98:cd:e0:
a6:4e:97:09:bc:aa:e6:13:d4:b9:13:8c:99:a2:f6:
e4:d9:54:0a:ae:28:9b:8f:d0:61:4f:25:77:86:02:
7e:52:ca:82:90:b8:1e:50:ae:e5:05:72:e8:0a:97:
51:30:58:1c:8c:3c:e9:00:cb:f7:66:b1:03:c3:26:
bb:ca:8f:62:5a:7d:2c:03:59:52:8d:01:88:79:e0:
75:a4:5a:46:25:f5:ed:3a:2b:f6:e8:d7:3e:65:62:
50:55:7e:3d:c3:57:85:c8:5a:cf:03:2d:a0:d4:ed:
41:7f:c3:1d:5f:79:be:b0:d2:dd:85:c6:7c:f8:de:
e0:43:3c:c8:2a:de:5d:47:a1:cc:10:9c:aa:20:41:
5d:39:fe:d5:8c:92:7d:9e:c4:af:5c:22:85:d9:7d:
14:e1:6f:3a:66:89:2b:57:f0:b2:37:e7:33:d0:cf:
b9:cd:19:a7:62:81:11:79:d7:b9:fb:65:92:16:70:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A4:7B:3D:7C:36:6E:7E:38:5F:6A:4C:33:15:5C:0B:C6:F4:B2:B0
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:6f:b6:e2:73:5b:7b:a9:85:b7:01:1d:a1:c1:b7:7e:d9:
3b:ec:9b:b2:90:ab:a9:78:28:9a:95:55:18:cc:f7:cf:da:d8:
df:62:11:30:ab:3c:98:c1:45:da:22:a1:ed:20:4a:be:a1:b6:
ed:ea:71:bf:1d:b1:1e:4b:e9:fa:88:e7:4d:05:85:92:4c:8d:
9e:a9:3b:ed:02:bd:b7:ef:35:48:b9:19:7b:25:90:65:c6:7f:
b0:fd:67:f1:03:e4:2e:a6:72:60:40:1a:95:28:3d:40:91:22:
90:91:18:e2:5d:4d:57:d2:92:80:17:27:25:fa:28:04:fa:79:
8d:57:66:68:27:cf:fb:98:33:96:48:3f:c2:86:62:c2:9f:14:
3b:a2:3f:d5:30:7d:f1:d6:8a:02:e5:01:43:1f:70:42:89:4b:
81:ec:28:9f:f5:f6:f8:24:ac:05:da:88:2a:0b:6c:e6:4c:9c:
b2:11:77:64:bf:b1:d5:ee:26:eb:7b:a3:9e:45:19:32:7a:3a:
2b:65:10:38:ef:98:47:f3:a8:98:03:dd:ad:99:b0:8c:67:13:
61:7a:58:78:23:1c:06:22:e9:0a:56:45:7a:62:25:c1:c4:cc:
77:56:5f:70:a5:1d:94:b1:5c:06:69:59:0f:87:19:eb:29:e5:
4c:8f:df:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo1WVbCu/VPiPxdWw636oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDA2NGM2ZjgwZTA5NjdmYmU0ZTRiOGZiMjRhNDE0M2M0
ODU3YzYwHhcNMjYwMzAyMTMwMTA1WhcNMjYwMzAzMTMwMTA1WjAzMTEwLwYDVQQD
Eyg0Y2E0N2IzZDdjMzY2ZTdlMzg1ZjZhNGMzMzE1NWMwYmM2ZjRiMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqOZqeN0CN5KutvxqsPY8XRE0e8f
Asbq+7IYqvTvsvyLe9Ndhrdts3vLnig3bdh1CFk1ltGo6inuF616tKNsh00E+75M
Eb6YzeCmTpcJvKrmE9S5E4yZovbk2VQKriibj9BhTyV3hgJ+UsqCkLgeUK7lBXLo
CpdRMFgcjDzpAMv3ZrEDwya7yo9iWn0sA1lSjQGIeeB1pFpGJfXtOiv26Nc+ZWJQ
VX49w1eFyFrPAy2g1O1Bf8MdX3m+sNLdhcZ8+N7gQzzIKt5dR6HMEJyqIEFdOf7V
jJJ9nsSvXCKF2X0U4W86ZokrV/CyN+cz0M+5zRmnYoERede5+2WSFnAFawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEykez18Nm5+OF9qTDMVXAvG9LKwMB8GA1UdIwQY
MBaAFI8AZMb4Dgln++TkuPskpBQ8SFfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMt
NDAzMTRmYzNkODc0LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMtNDAzMTRmYzNkODc0
LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6ZvtuJz
W3uphbcBHaHBt37ZO+ybspCrqXgompVVGMz3z9rY32IRMKs8mMFF2iKh7SBKvqG2
7epxvx2xHkvp+ojnTQWFkkyNnqk77QK9t+81SLkZeyWQZcZ/sP1n8QPkLqZyYEAa
lSg9QJEikJEY4l1NV9KSgBcnJfooBPp5jVdmaCfP+5gzlkg/woZiwp8UO6I/1TB9
8daKAuUBQx9wQolLgewon/X2+CSsBdqIKgts5kycshF3ZL+x1e4m63ujnkUZMno6
K2UQOO+YR/OomAPdrZmwjGcTYXpYeCMcBiLpClZFemIlwcTMd1ZfcKUdlLFcBmlZ
D4cZ6ynlTI/f9Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:43 2026 by rpki-client