Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: R216L9uvZiM13U2dZ5wWUNoZuIVe0YA/I8miX6QZw+U=
Subject key identifier: 5A:95:B4:35:2B:BA:2C:FD:83:62:9E:1A:39:54:68:F1:EF:A9:62:47
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 019D39AF55E2D9518D56F1F66E48AC464F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: B-FM8iiMdf_W9iFsj3WoMzoIEmw.roa (hash: IsI9YCn1EFbOUlMghQO6Nnu6k5OuvkaZPwWNPHZmrsY=)
2: KAMejuRA6SeFAjQoLQXU7zLjWr8.roa (hash: LnxIlTyZE7AtMc2QM8/mi8gslLYiHvYgSbLU2cG39As=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: 8XNOn8cYO79Sn0GGcOXlx/p+adv2eO5FF8Y1GnOARto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:55:e2:d9:51:8d:56:f1:f6:6e:48:ac:46:4f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=5a95b4352bba2cfd83629e1a395468f1efa96247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:cc:ff:71:71:7c:63:fb:17:bf:b6:05:e7:
9a:b0:29:89:4a:43:c0:71:34:fe:71:87:5d:8d:07:
5d:b3:b9:e4:4c:64:d5:3c:74:c1:0b:e4:28:15:d9:
40:21:a1:cb:ed:db:7e:2f:89:e5:84:4e:70:9d:1c:
89:12:44:88:6d:31:37:a2:62:9a:8f:15:7b:b3:6c:
3f:2e:bf:e4:7e:86:53:ad:a2:d8:8f:a4:2d:01:90:
8f:ac:4c:bd:c2:5b:5b:25:d3:53:40:cd:51:9c:0d:
f2:fc:61:2e:61:a3:53:88:62:14:a3:6d:26:a9:bf:
a9:37:53:15:ef:df:67:59:3f:d9:38:66:0b:f9:99:
61:2a:e2:a6:b7:06:c3:41:07:b8:f5:54:9d:e3:37:
41:93:2f:69:75:ae:58:1d:56:b4:af:1f:43:6c:86:
bd:05:78:12:ed:1e:e5:c9:87:92:c9:d0:e0:55:99:
f9:0c:1f:b9:e9:9f:7e:f8:af:a4:3a:3c:21:57:5c:
8f:76:d0:e8:e1:d7:1b:a2:9a:43:e1:4f:e2:a3:aa:
21:2d:c2:81:9e:42:1b:66:14:29:45:e3:74:54:46:
4d:9e:7b:ee:85:58:9e:b8:7a:83:5c:30:e5:2b:4c:
36:5a:ed:5d:99:9f:05:0c:42:e2:8a:dd:06:a4:a2:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:B4:35:2B:BA:2C:FD:83:62:9E:1A:39:54:68:F1:EF:A9:62:47
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:95:de:0f:33:c7:5b:76:b0:a3:08:77:5f:06:1b:03:f6:0c:
eb:73:dd:7f:27:32:f1:8f:68:76:13:fb:ca:dc:8e:46:af:be:
a4:e7:9e:99:ae:8f:7a:4c:38:c5:59:82:c2:d1:f0:c4:6c:3b:
e9:f4:bb:4e:be:1b:66:b1:28:75:2f:ac:07:5c:88:6a:ec:78:
1f:9a:4c:0e:d7:7c:c9:c0:2d:2f:01:a3:d6:d8:69:af:c8:e8:
a2:bd:4d:97:a2:5a:c9:c4:92:ef:5a:85:6e:38:29:12:64:92:
56:99:48:26:8a:3e:cd:74:ee:7b:59:8b:55:a1:1b:f3:eb:bc:
37:b4:93:b5:22:4b:06:3e:bf:73:20:df:b5:22:95:99:d7:b0:
28:59:6b:09:a8:5a:31:f5:9d:ba:20:e9:d3:2c:7b:11:59:f8:
33:e4:d1:f4:ac:88:f8:7f:24:53:f7:5a:e4:4b:bd:43:c7:aa:
df:1e:ec:69:45:51:c7:66:08:8f:5d:25:97:27:a6:19:24:5f:
54:58:18:ca:18:fd:e8:83:b5:45:4e:a2:35:aa:b4:46:1e:90:
e5:97:bd:c6:51:58:41:df:00:e3:62:d0:b9:fc:3c:39:71:a3:
19:eb:9f:b0:68:f9:65:1a:cc:5f:55:ff:25:3f:95:df:79:b7:
0a:da:62:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r1Xi2VGNVvH2bkisRk+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWNjN2YzYjIxOGM0OTJkODhkYmViYzljZGNiOWEyZDJk
MzBlZDEwHhcNMjYwMzI5MTMwMTI1WhcNMjYwMzMwMTMwMTI1WjAzMTEwLwYDVQQD
Eyg1YTk1YjQzNTJiYmEyY2ZkODM2MjllMWEzOTU0NjhmMWVmYTk2MjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN/M/3FxfGP7F7+2BeeasCmJSkPA
cTT+cYddjQdds7nkTGTVPHTBC+QoFdlAIaHL7dt+L4nlhE5wnRyJEkSIbTE3omKa
jxV7s2w/Lr/kfoZTraLYj6QtAZCPrEy9wltbJdNTQM1RnA3y/GEuYaNTiGIUo20m
qb+pN1MV799nWT/ZOGYL+ZlhKuKmtwbDQQe49VSd4zdBky9pda5YHVa0rx9DbIa9
BXgS7R7lyYeSydDgVZn5DB+56Z9++K+kOjwhV1yPdtDo4dcboppD4U/io6ohLcKB
nkIbZhQpReN0VEZNnnvuhVieuHqDXDDlK0w2Wu1dmZ8FDELiit0GpKKzPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqVtDUruiz9g2KeGjlUaPHvqWJHMB8GA1UdIwQY
MBaAFI6sx/OyGMSS2I2+vJzcuaLS0w7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAt
Nzc1ZGE2YWEzMTIzLzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAtNzc1ZGE2YWEzMTIz
LzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpXeDzPH
W3awowh3XwYbA/YM63Pdfycy8Y9odhP7ytyORq++pOeema6Pekw4xVmCwtHwxGw7
6fS7Tr4bZrEodS+sB1yIaux4H5pMDtd8ycAtLwGj1thpr8joor1Nl6JaycSS71qF
bjgpEmSSVplIJoo+zXTue1mLVaEb8+u8N7STtSJLBj6/cyDftSKVmdewKFlrCaha
MfWduiDp0yx7EVn4M+TR9KyI+H8kU/da5Eu9Q8eq3x7saUVRx2YIj10llyemGSRf
VFgYyhj96IO1RU6iNaq0Rh6Q5Ze9xlFYQd8A42LQufw8OXGjGeufsGj5ZRrMX1X/
JT+V33m3CtpiHA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:24 2026 by rpki-client