Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
File: jSO9EjEKkSMxYPAReGphEDDw-l8.mft (raw, json)
Hash identifier: c4tSb4Jo+NKRe+ph7+zSPIlDRusKzwLC4gm3qBZLp+E=
Subject key identifier: 8C:A1:2C:FA:B4:67:C4:7D:6F:FA:04:D5:19:0A:76:9C:B6:75:D4:71
Authority key identifier: 8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
Certificate issuer: /CN=8d23bd12310a91233160f011786a611030f0fa5f
Certificate serial: 019D3909A08F23998E6E63E38687E9E59B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
Manifest number: 0194
Signing time: Sun 29 Mar 2026 10:00:25 +0000
Manifest this update: Sun 29 Mar 2026 10:00:25 +0000
Manifest next update: Mon 30 Mar 2026 10:00:25 +0000
Files and hashes: 1: jSO9EjEKkSMxYPAReGphEDDw-l8.crl (hash: xcS0FVviTiaceh274TY7KZ/P5hNYQL7SN1sIZDaWRr4=)
2: qN669ymg8nK0FcenUzEimvS6bD0.roa (hash: BwVKGc9Um4MKhEVa9QsPEHNNx57h0Tvo1ZPD7iZnTWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a0:8f:23:99:8e:6e:63:e3:86:87:e9:e5:9b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d23bd12310a91233160f011786a611030f0fa5f
Validity
Not Before: Mar 29 10:00:25 2026 GMT
Not After : Mar 30 10:00:25 2026 GMT
Subject: CN=8ca12cfab467c47d6ffa04d5190a769cb675d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:e3:d4:4b:67:0a:4b:33:4b:06:1d:40:96:
7b:22:3f:09:b6:96:c1:e2:4b:c2:b5:0a:90:72:74:
19:af:6f:79:3a:e8:64:e5:a2:83:16:a4:57:a4:98:
00:da:93:ee:ab:45:c7:6c:11:1f:b7:58:c6:c4:1f:
85:e5:32:60:fc:2c:23:a2:a0:72:82:d6:a9:83:2a:
7f:06:f4:36:66:5b:19:03:f9:5d:7a:f0:ba:1c:bc:
d5:0d:d8:eb:c9:af:61:25:6e:44:50:2c:5f:5b:2e:
c1:cb:12:91:29:d4:f5:32:ef:de:63:8e:b4:64:61:
1b:e2:49:5e:43:d8:1b:4a:b3:20:d3:37:a6:1b:9a:
5d:ca:48:ef:ea:bc:1e:1a:24:f2:36:c6:d9:1d:dd:
c7:21:8f:3a:b1:83:fb:e9:01:37:8b:81:05:0f:79:
65:c4:90:a8:77:bf:c2:42:bf:a1:7c:1c:29:36:4f:
43:3e:5f:e1:65:23:8a:aa:6c:30:94:d9:2a:4f:c1:
b5:6c:ec:54:ca:20:a9:32:3d:f8:12:38:a7:c2:22:
86:4d:12:da:89:40:81:28:4d:c2:13:ac:cf:e7:5b:
0a:a4:4c:af:57:cb:45:7c:a9:9b:51:91:df:b2:52:
49:2c:50:b3:1c:ad:d5:41:ac:58:20:76:31:94:ca:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A1:2C:FA:B4:67:C4:7D:6F:FA:04:D5:19:0A:76:9C:B6:75:D4:71
X509v3 Authority Key Identifier:
keyid:8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b0:bb:52:9b:c5:c6:72:68:5d:cd:a3:04:19:70:df:8b:13:
f9:07:9c:98:c3:13:4c:98:d9:24:6f:16:ae:6f:5b:2d:a8:84:
e7:7d:88:9d:bc:8f:9e:ca:14:29:9f:5f:5d:92:77:b1:aa:d4:
7d:fd:c9:f0:d4:02:3d:18:7a:04:d6:d6:87:93:bd:77:a3:4b:
95:e3:5e:63:e7:45:d0:c7:35:ec:97:9f:c4:70:d0:12:66:d5:
bf:45:b8:2b:5f:b6:d9:59:3a:7d:9f:2f:19:96:ff:b6:2d:06:
8b:b7:df:6b:31:5f:0d:56:95:52:76:cb:e4:6a:9d:26:6d:98:
83:f9:bc:c6:c5:11:20:0a:fa:62:72:16:77:77:6a:f3:ce:f3:
f9:d1:1f:56:92:f1:d0:b0:4c:45:39:bb:ad:72:50:20:11:cd:
53:e3:7d:bb:bf:42:6f:8e:d7:d4:dd:52:32:98:61:e1:04:12:
53:80:83:de:34:13:21:ab:ec:8e:3c:bc:a3:c9:c8:d1:b9:e5:
92:7d:70:d0:7b:bf:91:dd:25:0a:d2:3e:8f:21:17:e6:c4:61:
cc:1c:40:8e:7a:24:3e:68:e8:10:d8:70:0b:cb:9d:f9:d2:5c:
c7:53:de:9e:33:b2:39:2c:df:25:b2:43:98:79:88:db:95:ae:
cb:25:f6:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CaCPI5mObmPjhofp5Zs+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjNiZDEyMzEwYTkxMjMzMTYwZjAxMTc4NmE2MTEwMzBm
MGZhNWYwHhcNMjYwMzI5MTAwMDI1WhcNMjYwMzMwMTAwMDI1WjAzMTEwLwYDVQQD
Eyg4Y2ExMmNmYWI0NjdjNDdkNmZmYTA0ZDUxOTBhNzY5Y2I2NzVkNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki3j1EtnCkszSwYdQJZ7Ij8JtpbB
4kvCtQqQcnQZr295Ouhk5aKDFqRXpJgA2pPuq0XHbBEft1jGxB+F5TJg/CwjoqBy
gtapgyp/BvQ2ZlsZA/ldevC6HLzVDdjrya9hJW5EUCxfWy7ByxKRKdT1Mu/eY460
ZGEb4kleQ9gbSrMg0zemG5pdykjv6rweGiTyNsbZHd3HIY86sYP76QE3i4EFD3ll
xJCod7/CQr+hfBwpNk9DPl/hZSOKqmwwlNkqT8G1bOxUyiCpMj34EjinwiKGTRLa
iUCBKE3CE6zP51sKpEyvV8tFfKmbUZHfslJJLFCzHK3VQaxYIHYxlMqdUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyhLPq0Z8R9b/oE1RkKdpy2ddRxMB8GA1UdIwQY
MBaAFI0jvRIxCpEjMWDwEXhqYRAw8PpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEt
NDk4YjlkNGY3NTdlLzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEtNDk4YjlkNGY3NTdl
LzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLC7UpvF
xnJoXc2jBBlw34sT+QecmMMTTJjZJG8Wrm9bLaiE532InbyPnsoUKZ9fXZJ3sarU
ff3J8NQCPRh6BNbWh5O9d6NLleNeY+dF0Mc17JefxHDQEmbVv0W4K1+22Vk6fZ8v
GZb/ti0Gi7ffazFfDVaVUnbL5GqdJm2Yg/m8xsURIAr6YnIWd3dq887z+dEfVpLx
0LBMRTm7rXJQIBHNU+N9u79Cb47X1N1SMphh4QQSU4CD3jQTIavsjjy8o8nI0bnl
kn1w0Hu/kd0lCtI+jyEX5sRhzBxAjnokPmjoENhwC8ud+dJcx1PenjOyOSzfJbJD
mHmI25WuyyX2Zw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:16 2026 by rpki-client