Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: e0QqQ/klcMws1NNyiluZrkWMlq+vjWfPIgvTwi5HXGU=
Subject key identifier: 85:43:3D:6B:DA:1C:17:21:F5:9C:63:3E:31:94:BE:21:32:E5:92:E1
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019D38D346AC4DCBAF9D60E48B25366B223A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0D8D
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: OugBff0qbspFPCrS8dDS+UFt3cDJIw2d+6GUay92REc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:46:ac:4d:cb:af:9d:60:e4:8b:25:36:6b:22:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=85433d6bda1c1721f59c633e3194be2132e592e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:d1:09:b9:10:f8:f3:ad:18:72:be:63:d4:
0a:8d:b8:32:75:8d:ac:fc:e2:34:90:72:b3:00:90:
80:a2:20:23:a7:a0:c9:57:82:67:4d:45:37:de:e7:
55:36:d8:69:4e:0d:77:5f:e1:bf:bd:5f:3a:60:d5:
e9:39:b7:47:e5:06:b7:28:20:1d:e5:09:3b:35:c2:
c6:9b:60:22:1d:2c:f8:21:91:28:53:55:b5:8a:9e:
d1:9b:43:eb:9d:50:4c:53:7a:d5:48:b7:9d:07:ae:
9f:11:dd:eb:3a:17:71:2d:9c:eb:63:fd:88:4e:c9:
aa:4d:c7:3c:79:35:de:fd:b9:66:42:fd:f1:9a:2f:
26:f7:ed:11:6b:bb:54:f8:4d:3b:3c:4b:1a:79:e4:
3c:bc:d7:2c:37:da:38:84:8b:9d:4e:e8:ac:38:49:
b8:83:04:6a:59:c1:90:31:ad:28:84:85:be:ab:93:
a4:e8:d9:e9:ba:4c:e9:cb:70:46:25:01:f1:ce:22:
cc:59:5a:8a:7e:bb:32:53:14:a5:dd:4c:27:b5:b4:
99:08:f5:6e:eb:11:06:8e:2a:d9:f1:5f:9b:06:ef:
25:32:da:a3:32:0e:23:ee:72:ec:53:32:53:74:1d:
8c:37:57:45:4b:db:d0:02:b7:3b:62:ef:e0:28:6c:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:43:3D:6B:DA:1C:17:21:F5:9C:63:3E:31:94:BE:21:32:E5:92:E1
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5e:87:86:d7:ee:98:2e:52:57:a0:3b:12:32:6a:99:32:ec:
0c:fd:77:e9:be:40:9a:99:e4:1d:23:3c:d4:c6:b2:02:8b:b7:
82:57:90:03:c3:87:75:c0:b9:fa:2a:83:dc:b2:c0:cb:53:55:
df:80:83:3f:f0:d1:28:5c:4f:1f:d6:2c:b2:21:5a:05:ad:6f:
66:ab:0a:33:04:cc:00:dc:00:17:f3:a0:9a:fe:3e:ff:2c:c0:
d9:31:39:fd:59:f0:8a:aa:f0:0e:58:f8:cf:d4:51:aa:9d:6a:
e8:1c:46:15:fe:13:cc:09:3b:6c:c1:4c:76:49:1c:29:44:32:
9a:57:32:30:50:5d:75:de:4c:a6:28:3e:6e:4b:b8:5e:38:18:
31:62:e3:24:46:f5:38:c1:8b:e5:38:9a:86:fb:eb:c5:29:4b:
68:ee:08:1b:b5:5f:30:15:6d:3d:fc:72:0a:7b:29:07:2c:76:
e1:54:fc:b0:11:7f:6b:91:3c:7c:99:0c:4b:77:64:e5:90:6f:
d3:11:62:07:dc:f0:02:c1:47:a0:ce:81:da:0e:f7:86:4e:f6:
df:19:a3:31:86:43:3f:f5:64:a3:7c:39:9b:0a:30:1d:f2:87:
1c:a3:eb:a2:7b:1e:dc:9d:9a:ea:6f:b4:d2:b6:2d:d4:15:42:
99:97:29:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400asTcuvnWDkiyU2ayI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5
NjdjNjYwHhcNMjYwMzI5MDkwMTAzWhcNMjYwMzMwMDkwMTAzWjAzMTEwLwYDVQQD
Eyg4NTQzM2Q2YmRhMWMxNzIxZjU5YzYzM2UzMTk0YmUyMTMyZTU5MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb7RCbkQ+POtGHK+Y9QKjbgydY2s
/OI0kHKzAJCAoiAjp6DJV4JnTUU33udVNthpTg13X+G/vV86YNXpObdH5Qa3KCAd
5Qk7NcLGm2AiHSz4IZEoU1W1ip7Rm0PrnVBMU3rVSLedB66fEd3rOhdxLZzrY/2I
TsmqTcc8eTXe/blmQv3xmi8m9+0Ra7tU+E07PEsaeeQ8vNcsN9o4hIudTuisOEm4
gwRqWcGQMa0ohIW+q5Ok6Nnpukzpy3BGJQHxziLMWVqKfrsyUxSl3UwntbSZCPVu
6xEGjirZ8V+bBu8lMtqjMg4j7nLsUzJTdB2MN1dFS9vQArc7Yu/gKGz67wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVDPWvaHBch9ZxjPjGUviEy5ZLhMB8GA1UdIwQY
MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt
Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj
LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV6Hhtfu
mC5SV6A7EjJqmTLsDP136b5AmpnkHSM81MayAou3gleQA8OHdcC5+iqD3LLAy1NV
34CDP/DRKFxPH9YssiFaBa1vZqsKMwTMANwAF/Ogmv4+/yzA2TE5/VnwiqrwDlj4
z9RRqp1q6BxGFf4TzAk7bMFMdkkcKUQymlcyMFBddd5Mpig+bku4XjgYMWLjJEb1
OMGL5TiahvvrxSlLaO4IG7VfMBVtPfxyCnspByx24VT8sBF/a5E8fJkMS3dk5ZBv
0xFiB9zwAsFHoM6B2g73hk723xmjMYZDP/Vko3w5mwowHfKHHKPronse3J2a6m+0
0rYt1BVCmZcpHg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:37 2026 by rpki-client