Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: SyIGisGtyWzdn1B/gLe3sLrfnzfWhN4O99Sckk80F/k=
Subject key identifier: A8:97:E5:D7:49:C2:19:A6:E8:5B:A2:1F:A0:7A:5E:9F:AD:7B:BC:5D
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 019D371B8BEF0E69287CFFB7B951EE4AD824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 1341
Signing time: Sun 29 Mar 2026 01:00:45 +0000
Manifest this update: Sun 29 Mar 2026 01:00:45 +0000
Manifest next update: Mon 30 Mar 2026 01:00:45 +0000
Files and hashes: 1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: s1XkCUZEVxHJOnUZf/WHn3V5bS8MAOxO7n4C1QZNvGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8b:ef:0e:69:28:7c:ff:b7:b9:51:ee:4a:d8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Mar 29 01:00:45 2026 GMT
Not After : Mar 30 01:00:45 2026 GMT
Subject: CN=a897e5d749c219a6e85ba21fa07a5e9fad7bbc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:58:48:7e:88:fd:12:8e:b0:c5:23:c9:3d:
33:fd:cd:5a:5d:e8:a7:f4:5f:a4:67:d1:84:14:b8:
28:15:47:72:14:87:4c:91:36:c1:56:09:80:c8:bd:
a3:f0:47:d0:ec:c0:6d:1b:37:22:24:27:6b:95:18:
db:f6:fc:ba:7e:23:1a:05:af:9f:49:ef:50:3c:f8:
15:02:75:c6:71:21:2d:be:8c:f1:00:d9:03:04:55:
37:84:dc:88:8e:39:17:5e:bf:0e:02:5e:c1:31:07:
f1:3c:85:83:e9:40:8a:b1:3b:16:05:4d:76:45:3f:
46:02:43:94:f6:09:4c:5d:e6:ef:16:23:6e:41:96:
97:25:9e:88:9f:b4:7a:53:b6:7e:d3:e5:d0:b2:45:
8a:37:84:98:be:ed:de:3f:ad:7b:47:b2:50:0a:19:
fb:e9:ae:f4:38:35:69:e3:34:3c:03:d8:85:17:8c:
98:0f:8d:4b:ed:70:b6:24:a1:9f:76:56:1b:2c:8e:
c2:fc:7f:cb:24:ee:ad:42:07:96:de:1f:17:a0:e0:
34:fa:65:e4:94:5f:35:9d:f1:6e:44:9a:66:c6:02:
1b:b7:95:07:13:f4:56:a3:96:61:6b:fb:41:64:b3:
0a:38:12:25:ac:cb:d3:58:2e:5a:df:81:ca:b6:42:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:97:E5:D7:49:C2:19:A6:E8:5B:A2:1F:A0:7A:5E:9F:AD:7B:BC:5D
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3a:32:03:7c:a8:44:2c:8b:b9:a5:6e:0d:9c:f8:72:ba:b8:
ec:9c:f4:f2:63:5f:e4:18:ba:d8:fb:ab:de:75:d2:17:86:a2:
09:03:ff:14:24:e0:8a:d4:ab:1d:24:fc:79:6f:40:04:f8:5f:
d6:76:f1:af:44:73:8a:1d:e5:e9:7b:19:6a:1f:e5:ca:4e:b0:
e3:24:88:9a:c6:22:98:86:0d:c2:fb:71:3f:51:36:e5:d5:a8:
51:1a:20:23:0f:b8:b5:33:36:91:7b:d0:66:8c:00:45:ba:eb:
03:f7:0d:f2:be:f5:a6:e7:db:e7:96:93:f1:03:be:07:0e:31:
07:8e:06:c5:c8:66:e1:39:72:64:b3:35:33:7c:bb:92:3e:a7:
0c:25:d5:81:db:8f:28:68:d6:7b:4b:35:9c:61:1f:03:05:37:
98:87:61:e0:62:c3:a2:9a:2e:31:a9:94:e2:d4:47:87:ee:f7:
da:d8:db:48:31:bc:28:af:52:be:12:48:52:65:ea:4f:40:2c:
70:93:25:aa:ea:06:45:40:ef:5a:ec:6f:fb:e2:bd:3f:8e:5e:
cb:a8:0c:e8:6d:06:d0:10:a8:62:5c:00:83:e2:e5:22:52:ef:
9f:99:d7:8a:ce:d5:e9:a6:30:16:dc:9f:c7:4e:69:b1:d5:5f:
b9:9d:45:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G4vvDmkofP+3uVHuStgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj
ZTlkMjkwHhcNMjYwMzI5MDEwMDQ1WhcNMjYwMzMwMDEwMDQ1WjAzMTEwLwYDVQQD
EyhhODk3ZTVkNzQ5YzIxOWE2ZTg1YmEyMWZhMDdhNWU5ZmFkN2JiYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKhYSH6I/RKOsMUjyT0z/c1aXein
9F+kZ9GEFLgoFUdyFIdMkTbBVgmAyL2j8EfQ7MBtGzciJCdrlRjb9vy6fiMaBa+f
Se9QPPgVAnXGcSEtvozxANkDBFU3hNyIjjkXXr8OAl7BMQfxPIWD6UCKsTsWBU12
RT9GAkOU9glMXebvFiNuQZaXJZ6In7R6U7Z+0+XQskWKN4SYvu3eP617R7JQChn7
6a70ODVp4zQ8A9iFF4yYD41L7XC2JKGfdlYbLI7C/H/LJO6tQgeW3h8XoOA0+mXk
lF81nfFuRJpmxgIbt5UHE/RWo5Zha/tBZLMKOBIlrMvTWC5a34HKtkJa4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiX5ddJwhmm6FuiH6B6Xp+te7xdMB8GA1UdIwQY
MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct
ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh
LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDoyA3yo
RCyLuaVuDZz4crq47Jz08mNf5Bi62Pur3nXSF4aiCQP/FCTgitSrHST8eW9ABPhf
1nbxr0Rzih3l6XsZah/lyk6w4ySImsYimIYNwvtxP1E25dWoURogIw+4tTM2kXvQ
ZowARbrrA/cN8r71pufb55aT8QO+Bw4xB44Gxchm4TlyZLM1M3y7kj6nDCXVgduP
KGjWe0s1nGEfAwU3mIdh4GLDopouMamU4tRHh+732tjbSDG8KK9SvhJIUmXqT0As
cJMlquoGRUDvWuxv++K9P45ey6gM6G0G0BCoYlwAg+LlIlLvn5nXis7V6aYwFtyf
x05psdVfuZ1FSA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:58 2026 by rpki-client