Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: HzTJofY6CJRy/3NFZ6oCS5n+tsrreo15stc4r8VQMcQ=
Subject key identifier: 03:92:4C:57:87:B7:F0:73:5C:A5:ED:1B:04:B1:E1:AE:65:50:9A:FB
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 019D39AEC54B97E505D14122941B90002078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: 9E
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: SZyhoR2s9Vt8I08ZOXS6TuUB3AvntJ8ryqKtiYIconk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c5:4b:97:e5:05:d1:41:22:94:1b:90:00:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=03924c5787b7f0735ca5ed1b04b1e1ae65509afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:1c:d0:de:8e:e5:0f:39:a8:92:25:be:5c:
d8:53:a9:93:af:2c:48:ad:4a:54:8a:93:88:cf:61:
a3:8f:35:8c:1b:db:0c:45:32:14:9c:c2:ee:58:ab:
b4:fe:f6:c9:3a:fe:df:38:f3:04:80:4d:3a:3d:85:
44:b3:25:21:fa:8a:b1:63:ea:ba:0c:08:09:11:40:
54:12:dd:ed:ae:c2:e9:2b:94:85:ca:62:19:d6:4b:
01:6b:15:a9:3d:76:0b:43:21:e2:03:36:c2:3d:59:
81:90:7f:70:58:ae:a9:5d:85:3d:14:2b:40:01:49:
61:82:da:a2:3f:78:ee:5b:1b:34:7e:58:23:7d:b9:
ed:3a:06:c3:28:14:05:fc:a5:84:e6:08:e0:63:95:
43:cf:d9:0d:2a:04:5c:ea:24:a7:fc:b4:b9:f3:2b:
22:54:3b:fb:2c:7a:3e:36:8e:58:67:d6:23:65:4f:
57:73:8f:cd:28:1f:fe:35:ec:bd:da:3c:3f:1c:dc:
7e:3e:f5:19:47:5f:46:7a:3a:6d:d4:43:77:2d:e9:
07:9e:85:a0:16:57:f1:dc:b6:0b:a4:a3:92:5c:8a:
29:b2:f0:31:ae:4f:92:8c:f4:07:ae:9c:f7:15:0e:
6a:be:ad:60:09:ea:20:f1:3e:38:b9:d2:2e:2e:8f:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:4C:57:87:B7:F0:73:5C:A5:ED:1B:04:B1:E1:AE:65:50:9A:FB
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:47:6c:b5:d4:51:33:bf:af:38:25:a5:b6:3f:b4:d8:a9:bb:
be:4c:f9:bd:6b:83:ff:f8:37:09:56:95:59:6e:06:ce:27:6c:
7b:c2:8e:a4:eb:9d:d6:e7:4c:17:5f:c4:d2:8d:14:22:80:c3:
59:77:25:08:56:03:ef:a4:a6:94:81:89:3b:0e:2d:d7:9c:49:
be:b1:48:cd:5b:48:75:f3:ed:20:53:7e:c4:19:9f:bf:50:18:
4a:d5:f5:45:bf:a7:ea:fe:39:b5:b4:2b:39:c6:81:ae:27:ba:
f1:71:57:c7:82:90:46:2c:79:07:3d:14:fd:45:30:1d:42:b2:
c8:34:27:7e:54:71:ff:eb:7b:81:7d:3e:b5:98:20:1b:c9:c1:
5d:95:3d:a9:51:7a:13:bb:72:3d:ff:da:e2:a1:3e:4b:fc:f7:
27:f9:d0:ec:60:c2:02:ce:1a:d1:98:b1:6c:7d:14:b2:0e:d2:
36:8c:15:b7:b3:68:de:d8:ab:90:4c:56:9e:e5:03:42:e7:71:
92:16:90:9c:00:25:64:27:f5:14:27:11:9c:0f:f8:ed:d0:cf:
ef:8f:7f:5e:95:e3:f5:12:68:f7:d3:82:3e:7a:e4:89:4a:7e:
1e:d9:a3:34:76:d7:7f:21:b6:93:62:c7:d8:af:d4:d4:2e:b4:
2a:45:be:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rsVLl+UF0UEilBuQACB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWI1ODA5YzZjNTRjOWYxYzRlOGNiM2JlYzQxZGEwMmMw
M2Q3NjQwHhcNMjYwMzI5MTMwMDQ4WhcNMjYwMzMwMTMwMDQ4WjAzMTEwLwYDVQQD
EygwMzkyNGM1Nzg3YjdmMDczNWNhNWVkMWIwNGIxZTFhZTY1NTA5YWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vgc0N6O5Q85qJIlvlzYU6mTryxI
rUpUipOIz2GjjzWMG9sMRTIUnMLuWKu0/vbJOv7fOPMEgE06PYVEsyUh+oqxY+q6
DAgJEUBUEt3trsLpK5SFymIZ1ksBaxWpPXYLQyHiAzbCPVmBkH9wWK6pXYU9FCtA
AUlhgtqiP3juWxs0flgjfbntOgbDKBQF/KWE5gjgY5VDz9kNKgRc6iSn/LS58ysi
VDv7LHo+No5YZ9YjZU9Xc4/NKB/+Ney92jw/HNx+PvUZR19Gejpt1EN3LekHnoWg
Flfx3LYLpKOSXIopsvAxrk+SjPQHrpz3FQ5qvq1gCeog8T44udIuLo8QiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOSTFeHt/BzXKXtGwSx4a5lUJr7MB8GA1UdIwQY
MBaAFI0bWAnGxUyfHE6Ms77EHaAsA9dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJ0WUNjYkZUSjhjVG95enZzUWRvQ3dEMTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mYzY1ZDgtZDE4My00NzM3LWFmODEt
NzM0Y2IyY2JiM2RkLzEvalJ0WUNjYkZUSjhjVG95enZzUWRvQ3dEMTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mYzY1ZDgtZDE4My00NzM3LWFmODEtNzM0Y2IyY2JiM2Rk
LzEvalJ0WUNjYkZUSjhjVG95enZzUWRvQ3dEMTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0dstdRR
M7+vOCWltj+02Km7vkz5vWuD//g3CVaVWW4Gzidse8KOpOud1udMF1/E0o0UIoDD
WXclCFYD76SmlIGJOw4t15xJvrFIzVtIdfPtIFN+xBmfv1AYStX1Rb+n6v45tbQr
OcaBrie68XFXx4KQRix5Bz0U/UUwHUKyyDQnflRx/+t7gX0+tZggG8nBXZU9qVF6
E7tyPf/a4qE+S/z3J/nQ7GDCAs4a0ZixbH0Usg7SNowVt7No3tirkExWnuUDQudx
khaQnAAlZCf1FCcRnA/47dDP749/XpXj9RJo99OCPnrkiUp+HtmjNHbXfyG2k2LH
2K/U1C60KkW++w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:37 2026 by rpki-client