Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: LK5SEOaj9BAwKrjtSXM74DOwUUVXh/nZbEdiepwhKnM=
Subject key identifier: BA:5D:5E:5A:F9:C8:F2:15:42:2D:DF:9B:0F:91:2B:87:BE:10:EC:F6
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 019CAA8F7A7B731FA5FDEC14EA497F97D80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 18:00:55 +0000
Manifest this update: Sun 01 Mar 2026 18:00:55 +0000
Manifest next update: Mon 02 Mar 2026 18:00:55 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: iES7BIvQENZ5d3CeUpahAPpji7Dx8mPUrt2J0Qvjb3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7a:7b:73:1f:a5:fd:ec:14:ea:49:7f:97:d8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Mar 1 18:00:55 2026 GMT
Not After : Mar 2 18:00:55 2026 GMT
Subject: CN=ba5d5e5af9c8f215422ddf9b0f912b87be10ecf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:43:ab:52:f3:60:f6:05:00:6d:c2:7a:d7:
ed:7c:45:40:6a:4c:19:9c:e4:18:47:f6:c8:a3:03:
fa:80:41:7a:93:ef:c2:ee:ce:74:a4:70:ae:20:62:
c1:61:3b:ad:69:be:97:79:0b:fa:e8:bf:5f:56:43:
c2:23:64:fe:f0:67:ec:fb:eb:82:57:5a:32:f3:4f:
0d:77:85:bc:f5:2c:c2:31:f8:63:92:f7:0f:36:91:
12:9c:d8:03:56:94:74:97:03:ff:7f:d6:59:d6:24:
96:39:9d:51:56:cf:b9:ef:29:ac:6b:03:ab:4e:09:
71:56:ae:ec:a7:fc:de:37:2b:f2:de:39:67:c9:d0:
69:97:f4:bd:6c:9c:4c:24:49:c5:6a:d4:80:e2:17:
29:26:ab:74:50:be:6f:f3:63:51:bb:e4:44:77:1a:
2e:eb:24:3d:1a:61:96:ae:d6:60:fa:89:e8:1b:39:
01:99:18:12:22:36:c1:9f:9a:0e:40:d8:96:23:d6:
ca:08:c6:18:db:3d:cd:d2:ac:0e:c2:12:f1:41:19:
e4:da:af:fe:7d:af:ef:55:de:42:5d:4e:c7:29:63:
a0:25:b7:88:ec:08:2f:2a:37:73:05:73:ae:84:f2:
3a:35:c7:a1:6b:73:a4:99:e3:cd:7a:42:e1:99:08:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5D:5E:5A:F9:C8:F2:15:42:2D:DF:9B:0F:91:2B:87:BE:10:EC:F6
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c0:18:0b:9d:90:01:26:8f:28:3a:43:9c:bd:d5:7b:b0:68:
eb:f6:8a:2e:75:8e:c5:e2:72:00:53:d1:b4:4c:5e:02:9d:30:
85:51:dd:27:5e:c1:2e:d7:e6:a0:b7:de:13:9a:1b:74:94:8f:
d8:ba:4d:37:c9:ba:ea:a5:f6:cd:42:e6:a7:b8:fb:17:e9:04:
d1:ad:c2:ad:76:77:24:c0:c8:db:d1:02:72:7f:40:56:c5:da:
4a:35:1b:97:40:47:7d:81:6f:e4:92:a6:5b:50:31:93:f8:66:
c1:48:db:0f:16:48:ef:e4:ad:8c:32:fc:c0:f0:a1:b2:04:9b:
0f:9e:47:4e:31:71:2d:3b:90:b5:f7:e0:f1:f2:45:c9:95:6b:
c7:cc:c6:31:c4:75:92:8d:1c:f7:11:4a:26:a7:f1:22:ac:c0:
b8:5f:1e:86:45:a5:d5:7e:d9:08:49:bc:34:10:d2:d8:cd:d2:
68:03:49:b7:aa:f7:a0:f6:f2:41:a8:62:f8:a9:5d:a5:38:9f:
1f:96:fa:f0:5e:1f:81:9a:25:0e:59:d3:ef:32:01:0d:7e:41:
b0:1c:55:11:ac:6b:63:81:03:13:0b:1b:a0:fd:c7:1c:53:df:
cd:1c:6c:f1:3e:21:ae:96:89:d2:c0:05:0c:c7:6f:81:7b:ce:
09:dd:09:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj3p7cx+l/ewU6kl/l9gPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZjQzMTU5MmRlY2YyODVjMzMyZDMwNjI1MzFjMGU3Y2Y2
MTAyYzAwHhcNMjYwMzAxMTgwMDU1WhcNMjYwMzAyMTgwMDU1WjAzMTEwLwYDVQQD
EyhiYTVkNWU1YWY5YzhmMjE1NDIyZGRmOWIwZjkxMmI4N2JlMTBlY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpNDq1LzYPYFAG3CetftfEVAakwZ
nOQYR/bIowP6gEF6k+/C7s50pHCuIGLBYTutab6XeQv66L9fVkPCI2T+8Gfs++uC
V1oy808Nd4W89SzCMfhjkvcPNpESnNgDVpR0lwP/f9ZZ1iSWOZ1RVs+57ymsawOr
TglxVq7sp/zeNyvy3jlnydBpl/S9bJxMJEnFatSA4hcpJqt0UL5v82NRu+REdxou
6yQ9GmGWrtZg+onoGzkBmRgSIjbBn5oOQNiWI9bKCMYY2z3N0qwOwhLxQRnk2q/+
fa/vVd5CXU7HKWOgJbeI7AgvKjdzBXOuhPI6Nceha3OkmePNekLhmQi4swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpdXlr5yPIVQi3fmw+RK4e+EOz2MB8GA1UdIwQY
MBaAFI/0MVkt7PKFwzLTBiUxwOfPYQLAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZTFmZWQtMmU4Ni00NGE5LThhNjct
NDRiNzhlNzg4ZGViLzEval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZTFmZWQtMmU4Ni00NGE5LThhNjctNDRiNzhlNzg4ZGVi
LzEval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsAYC52Q
ASaPKDpDnL3Ve7Bo6/aKLnWOxeJyAFPRtExeAp0whVHdJ17BLtfmoLfeE5obdJSP
2LpNN8m66qX2zULmp7j7F+kE0a3CrXZ3JMDI29ECcn9AVsXaSjUbl0BHfYFv5JKm
W1Axk/hmwUjbDxZI7+StjDL8wPChsgSbD55HTjFxLTuQtffg8fJFyZVrx8zGMcR1
ko0c9xFKJqfxIqzAuF8ehkWl1X7ZCEm8NBDS2M3SaANJt6r3oPbyQahi+KldpTif
H5b68F4fgZolDlnT7zIBDX5BsBxVEaxrY4EDEwsboP3HHFPfzRxs8T4hrpaJ0sAF
DMdvgXvOCd0Jag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:28 2026 by rpki-client