Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: XmGda632Kux8Yh2f86e80bn29IYFnC28zlarVa9/vrg=
Subject key identifier: 14:67:A4:83:24:0B:04:5F:86:42:CE:07:46:05:50:D2:ED:C8:18:5E
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 019D39AF4CEF82196EB6C55E480973F3776E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0D6C
Signing time: Sun 29 Mar 2026 13:01:22 +0000
Manifest this update: Sun 29 Mar 2026 13:01:22 +0000
Manifest next update: Mon 30 Mar 2026 13:01:22 +0000
Files and hashes: 1: 4N3tODFK8nz9NNMiv7CviryuDAs.roa (hash: X3aNYoDshM8q/qhUCoVbmt8vv1qoQt4+Ks1Zknci3aA=)
2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: a74Fu0UFoCJW1JpDWdQLXAVGL/AtzyXBxwYOMCdXcyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:4c:ef:82:19:6e:b6:c5:5e:48:09:73:f3:77:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Mar 29 13:01:22 2026 GMT
Not After : Mar 30 13:01:22 2026 GMT
Subject: CN=1467a483240b045f8642ce07460550d2edc8185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:de:4f:ac:56:39:89:8b:88:d4:5b:f2:96:
ee:b7:b3:51:82:dd:9a:77:8c:7b:7c:b4:bc:3f:bd:
71:23:12:48:7e:cb:37:9f:b9:18:95:75:ac:e1:6c:
06:4c:ec:fa:62:4f:a6:a2:6b:5a:d1:28:3d:88:25:
9d:bc:8c:50:7a:32:ad:07:20:5b:f2:f8:95:76:0c:
33:29:a3:df:6f:4b:a2:d7:a8:1c:11:1e:e7:f7:b3:
15:c8:b4:a7:3a:3a:ad:e1:72:4f:dd:c9:0e:d9:50:
9a:28:3d:0f:1a:38:4f:73:d2:2f:93:e0:17:37:9e:
bf:3e:3e:5b:a9:da:0d:d6:08:89:fa:08:e4:e8:c8:
d4:4d:18:4e:b3:40:90:34:9b:d9:64:2a:41:91:f2:
99:72:5f:1a:a8:fc:6c:d6:6b:11:dd:c7:dc:bc:a5:
da:a4:12:0c:14:de:24:aa:da:0e:d9:d2:97:02:b1:
c6:77:71:80:31:c6:84:77:9e:02:fc:58:ef:8a:12:
e9:c1:8c:c7:06:e2:73:9d:d1:09:84:92:50:c8:f5:
0f:94:02:d3:04:6d:05:e7:1b:c6:59:17:0c:68:03:
76:53:9c:1a:2a:59:c2:47:74:1b:e8:bb:69:5b:cd:
3e:de:3a:a8:90:36:3c:3d:a0:4d:85:e1:13:22:f3:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:67:A4:83:24:0B:04:5F:86:42:CE:07:46:05:50:D2:ED:C8:18:5E
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:78:da:05:63:c5:ee:d5:82:b0:a0:fa:28:a2:4c:51:cb:f5:
8e:04:eb:eb:04:dd:a0:2e:ae:d6:f7:67:53:5c:8d:4c:b2:e9:
33:86:a0:88:c8:03:f1:0e:a0:72:9f:96:b1:74:9c:cf:9e:67:
5e:fe:6c:27:2f:7a:49:f8:1d:9a:6f:09:a0:6b:00:46:cb:0f:
18:a4:d3:86:c3:06:85:d6:f1:84:cb:29:fd:28:04:c2:97:e3:
08:e3:11:fe:e4:a0:ec:b3:76:ae:1b:6d:f8:63:6b:bd:0b:c6:
c3:1e:80:5c:2e:16:ef:9d:12:47:a8:fb:fa:33:82:48:65:b3:
ca:21:3d:12:03:33:7e:59:24:9c:32:77:09:4c:21:e4:27:8c:
00:8c:7a:05:af:c1:00:68:c5:64:5d:e4:a8:da:d4:4d:a8:bc:
13:71:0a:3a:9f:57:3e:b8:ee:0b:53:a4:14:4e:da:4d:d2:30:
93:07:8f:1c:06:0f:9d:dc:36:9f:fd:9d:b6:90:16:26:f1:ce:
a2:af:a3:b4:c4:fb:4f:97:41:cb:7b:ab:ed:c5:40:6b:d4:ff:
32:30:f2:61:79:00:00:59:b5:6c:08:8c:13:b9:b1:0e:52:f0:
d0:33:6b:df:e3:d5:0f:24:98:36:06:a9:0b:52:ff:8e:cb:67:
92:6f:e5:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r0zvghlutsVeSAlz83duMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1
ODY5MWEwHhcNMjYwMzI5MTMwMTIyWhcNMjYwMzMwMTMwMTIyWjAzMTEwLwYDVQQD
EygxNDY3YTQ4MzI0MGIwNDVmODY0MmNlMDc0NjA1NTBkMmVkYzgxODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzXeT6xWOYmLiNRb8pbut7NRgt2a
d4x7fLS8P71xIxJIfss3n7kYlXWs4WwGTOz6Yk+momta0Sg9iCWdvIxQejKtByBb
8viVdgwzKaPfb0ui16gcER7n97MVyLSnOjqt4XJP3ckO2VCaKD0PGjhPc9Ivk+AX
N56/Pj5bqdoN1giJ+gjk6MjUTRhOs0CQNJvZZCpBkfKZcl8aqPxs1msR3cfcvKXa
pBIMFN4kqtoO2dKXArHGd3GAMcaEd54C/FjvihLpwYzHBuJzndEJhJJQyPUPlALT
BG0F5xvGWRcMaAN2U5waKlnCR3Qb6LtpW80+3jqokDY8PaBNheETIvNVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRnpIMkCwRfhkLOB0YFUNLtyBheMB8GA1UdIwQY
MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt
NzkwMjQ0NTA4ZGY0LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0
LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXjaBWPF
7tWCsKD6KKJMUcv1jgTr6wTdoC6u1vdnU1yNTLLpM4agiMgD8Q6gcp+WsXScz55n
Xv5sJy96Sfgdmm8JoGsARssPGKTThsMGhdbxhMsp/SgEwpfjCOMR/uSg7LN2rhtt
+GNrvQvGwx6AXC4W750SR6j7+jOCSGWzyiE9EgMzflkknDJ3CUwh5CeMAIx6Ba/B
AGjFZF3kqNrUTai8E3EKOp9XPrjuC1OkFE7aTdIwkwePHAYPndw2n/2dtpAWJvHO
oq+jtMT7T5dBy3ur7cVAa9T/MjDyYXkAAFm1bAiME7mxDlLw0DNr3+PVDySYNgap
C1L/jstnkm/lew==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:47 2026 by rpki-client