Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: oNgLVxrDjS6LfUIicBTvGpyb+PzTbZ0xRpS7iO7UdEQ=
Subject key identifier: 65:15:F9:7E:67:BA:3A:E6:46:FF:D4:F5:E2:1D:4F:79:5B:82:62:35
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019CABD9C5E88130F40D8B34BA6061139633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 1556
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: RXn30h9BpJvoZDBG_VhKAWNPT5w.roa (hash: e20aIXT8+TI5fnLf21yjBd8FPloZZbocy7TNGbWjDGk=)
2: eiBAjPlDdAEJJvNoTH-1fALVwBg.roa (hash: tHK9gw0NecINRkXtDNFXNpkwOaFhBnt8zEFuvT1+in8=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: qf0vCs70q4A6hl1MpuufRfH1TqWCyu60X5w3kCX/HTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c5:e8:81:30:f4:0d:8b:34:ba:60:61:13:96:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=6515f97e67ba3ae646ffd4f5e21d4f795b826235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:58:86:f4:31:61:70:1f:e9:77:bb:1a:e8:
c8:53:51:bf:85:87:19:29:06:c4:ae:93:2c:b5:c3:
2b:8c:fc:8f:c9:05:15:b9:7b:bf:fd:ca:51:7a:87:
1f:21:51:08:ec:c8:83:b7:63:67:b2:a0:7b:37:ea:
79:c5:d5:ec:12:bb:83:57:94:31:27:9b:71:62:e8:
fb:5a:0c:80:c2:c8:dc:34:45:1c:7b:0e:50:6e:2c:
6b:3c:a2:45:ac:e1:a9:f8:cf:c1:86:8a:4c:2c:70:
21:d2:69:f4:25:a7:de:61:86:fc:ea:c8:64:be:7b:
b9:92:46:e8:6a:37:ca:12:34:33:1a:d3:f0:fd:14:
02:89:0c:53:69:cc:6b:20:21:98:7a:11:5f:c8:39:
97:9a:cf:74:a9:5a:c6:3d:49:cd:0e:8f:04:0f:1e:
c2:f1:cf:5c:0d:4c:14:9e:c9:07:98:da:80:7d:66:
82:22:a2:62:31:6f:37:8a:ff:14:be:3f:74:95:a6:
ff:10:2c:6a:a8:48:d1:75:9c:61:61:2e:bc:eb:08:
ee:c0:44:7a:a6:d0:e6:73:e1:b9:4e:d3:6d:1e:d6:
bf:b9:f6:1f:0a:2c:2c:ff:16:9d:6a:1c:31:32:73:
c8:40:89:89:c9:65:6d:1b:55:f4:1e:dc:70:1f:b6:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:F9:7E:67:BA:3A:E6:46:FF:D4:F5:E2:1D:4F:79:5B:82:62:35
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:af:d1:5f:56:2b:72:d7:dc:fe:43:3f:ba:93:bc:63:cf:cb:
e8:f4:34:99:bf:e5:dc:e3:99:0e:72:ed:c2:d8:87:5b:6a:8f:
13:72:74:dc:b9:55:98:fd:20:85:d0:6c:a7:e2:75:97:31:51:
96:be:d4:6b:c1:5e:af:82:fa:06:be:0b:87:53:ea:e6:2e:51:
f9:16:c4:b4:ff:b7:bd:38:e9:0b:7c:dd:23:7c:b1:13:57:7b:
aa:6d:54:e6:c4:f9:70:00:b4:ac:8d:20:44:d9:35:c4:dc:62:
a0:cf:a0:05:36:ac:ad:2a:4a:5c:cb:0b:49:19:98:dd:cd:f6:
4f:f2:7d:ca:09:5b:56:a2:65:85:47:f5:2e:bc:53:44:31:37:
7b:65:d8:6d:b4:44:fd:21:bc:42:3c:d7:a7:07:fb:70:01:3d:
a5:4c:ae:11:52:e1:3a:c8:08:a3:d7:ee:af:f8:4d:8c:75:13:
4e:e3:ec:bc:35:05:32:2c:4c:ff:ba:f8:bb:44:bd:96:60:b2:
24:b4:e4:98:d8:92:50:62:93:24:b7:e4:e9:9e:46:4c:b5:8a:
e3:ca:d3:c5:5d:c0:b8:dd:b8:ff:bf:2a:ce:9e:ca:15:ec:af:
61:f9:5c:7a:98:50:f4:9d:00:2a:cc:91:c4:6b:d7:50:cb:5a:
37:ac:89:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cXogTD0DYs0umBhE5YzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3
MDBjN2MwHhcNMjYwMzAyMDAwMTQxWhcNMjYwMzAzMDAwMTQxWjAzMTEwLwYDVQQD
Eyg2NTE1Zjk3ZTY3YmEzYWU2NDZmZmQ0ZjVlMjFkNGY3OTViODI2MjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBJYhvQxYXAf6Xe7GujIU1G/hYcZ
KQbErpMstcMrjPyPyQUVuXu//cpReocfIVEI7MiDt2NnsqB7N+p5xdXsEruDV5Qx
J5txYuj7WgyAwsjcNEUcew5QbixrPKJFrOGp+M/BhopMLHAh0mn0JafeYYb86shk
vnu5kkboajfKEjQzGtPw/RQCiQxTacxrICGYehFfyDmXms90qVrGPUnNDo8EDx7C
8c9cDUwUnskHmNqAfWaCIqJiMW83iv8Uvj90lab/ECxqqEjRdZxhYS686wjuwER6
ptDmc+G5TtNtHta/ufYfCiws/xadahwxMnPIQImJyWVtG1X0HtxwH7ZrfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUV+X5nujrmRv/U9eIdT3lbgmI1MB8GA1UdIwQY
MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt
ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm
LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVa/RX1Yr
ctfc/kM/upO8Y8/L6PQ0mb/l3OOZDnLtwtiHW2qPE3J03LlVmP0ghdBsp+J1lzFR
lr7Ua8Fer4L6Br4Lh1Pq5i5R+RbEtP+3vTjpC3zdI3yxE1d7qm1U5sT5cAC0rI0g
RNk1xNxioM+gBTasrSpKXMsLSRmY3c32T/J9yglbVqJlhUf1LrxTRDE3e2XYbbRE
/SG8QjzXpwf7cAE9pUyuEVLhOsgIo9fur/hNjHUTTuPsvDUFMixM/7r4u0S9lmCy
JLTkmNiSUGKTJLfk6Z5GTLWK48rTxV3AuN24/78qzp7KFeyvYflcephQ9J0AKsyR
xGvXUMtaN6yJqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:16 2026 by rpki-client