Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: /HorDogcWI+3xhLNN9sV6o3ycFqRZulaapSJryU5yz8=
Subject key identifier: 17:5F:29:4B:45:24:B2:EA:A1:6B:3A:8F:18:75:62:DD:00:E4:74:CE
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 019D37C0CFA2A114AA52DC7D97BAC19C5311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:16 +0000
Manifest this update: Sun 29 Mar 2026 04:01:16 +0000
Manifest next update: Mon 30 Mar 2026 04:01:16 +0000
Files and hashes: 1: DDF4rHCyTUZ_JMqtFhQdlljmwdA.roa (hash: Wq2lfDQVze8aM27jqQxiGGAz6kfK87E03BpeKAOD1OA=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: xcYK/Ewh6wfRRydCFCNA0vHxHKU+V10FNptldPmq8d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:cf:a2:a1:14:aa:52:dc:7d:97:ba:c1:9c:53:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: Mar 29 04:01:16 2026 GMT
Not After : Mar 30 04:01:16 2026 GMT
Subject: CN=175f294b4524b2eaa16b3a8f187562dd00e474ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:68:5a:92:0f:73:dd:1d:41:e6:1b:b4:ad:
65:42:fe:5d:5e:55:e7:f9:62:45:7c:a5:44:96:3e:
e4:6d:ed:da:bb:62:bb:fb:0e:2a:b4:4c:eb:55:08:
43:d6:51:0b:97:36:65:48:39:ba:63:99:47:64:bd:
fc:a8:50:89:e4:15:2f:10:06:0d:5d:e1:de:c9:61:
13:82:62:5f:32:be:37:61:a0:d9:49:cf:7e:f2:11:
3f:49:84:8c:e8:1a:d5:c4:fb:7d:5e:a4:0e:37:8d:
cf:c4:7b:c5:5c:00:19:0a:e2:64:69:14:93:dd:39:
63:0a:55:35:8c:4b:1c:cd:16:a1:b0:33:09:89:44:
27:b9:aa:23:72:70:e2:b2:54:01:9d:56:92:4c:5e:
ee:00:81:a2:13:7d:6b:8c:67:f3:62:b8:3d:e9:08:
35:5e:a5:a4:16:0e:15:df:b8:a1:ae:65:1d:1e:4a:
bb:7d:34:ab:f9:43:0b:d1:c0:66:9a:05:32:64:58:
8c:ae:ef:a3:d5:ef:13:df:8e:c7:be:39:bb:58:fd:
59:a1:b8:34:46:ba:b6:97:4f:9d:c2:00:f6:f2:e2:
01:f2:02:fa:68:0b:fb:d0:62:33:c7:47:93:d6:21:
bd:df:9a:6a:70:c2:96:2b:4a:75:2a:f8:03:35:90:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:29:4B:45:24:B2:EA:A1:6B:3A:8F:18:75:62:DD:00:E4:74:CE
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c7:db:c5:c7:8e:f1:64:5f:a9:3d:67:61:97:cf:70:c3:86:
3c:b6:57:2a:f6:c4:33:eb:a6:f7:6d:52:06:47:ff:91:63:db:
8d:e4:63:57:b7:bf:e8:7c:e0:05:99:7d:ae:36:89:af:ec:49:
d6:2a:f7:02:7e:80:26:0f:e8:d0:98:b6:38:fc:ea:f5:36:ee:
ad:c3:58:f5:4d:d0:76:e7:38:18:8e:fa:b4:9d:24:29:b1:5a:
d9:b9:f7:01:ea:a5:0a:9e:16:3a:83:18:7e:1b:5e:78:5c:6b:
5f:b4:bb:b0:4a:47:3e:f2:1d:97:ac:a4:9d:ee:e3:f7:98:b1:
82:6a:52:b1:16:e9:3a:38:c9:1f:b8:3d:73:6e:9a:c0:7b:c9:
2f:4c:12:32:dc:42:6f:f9:a2:26:5c:96:28:44:ea:0f:f4:ea:
15:b6:33:4f:de:b6:35:e8:f4:4f:27:a2:45:b6:97:77:9d:5f:
bd:5b:19:86:06:6e:7c:7d:1c:14:56:cf:77:35:19:6d:73:1d:
35:69:2f:b2:ad:b8:64:e4:2a:ae:52:94:a4:b8:0e:7a:e4:89:
41:2b:ba:31:37:75:94:74:98:51:cd:f3:ed:6f:5b:04:f0:11:
17:88:44:7b:f9:1c:a1:7a:a5:fa:85:91:fb:4c:22:d0:f6:87:
81:b5:e0:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wM+ioRSqUtx9l7rBnFMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMGI1ODRmNjAzNWZlNWEyODdjNTY3ZjFlMzg1NGI4ZmJj
MmEwYzIwHhcNMjYwMzI5MDQwMTE2WhcNMjYwMzMwMDQwMTE2WjAzMTEwLwYDVQQD
EygxNzVmMjk0YjQ1MjRiMmVhYTE2YjNhOGYxODc1NjJkZDAwZTQ3NGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubBoWpIPc90dQeYbtK1lQv5dXlXn
+WJFfKVElj7kbe3au2K7+w4qtEzrVQhD1lELlzZlSDm6Y5lHZL38qFCJ5BUvEAYN
XeHeyWETgmJfMr43YaDZSc9+8hE/SYSM6BrVxPt9XqQON43PxHvFXAAZCuJkaRST
3TljClU1jEsczRahsDMJiUQnuaojcnDislQBnVaSTF7uAIGiE31rjGfzYrg96Qg1
XqWkFg4V37ihrmUdHkq7fTSr+UML0cBmmgUyZFiMru+j1e8T347Hvjm7WP1Zobg0
Rrq2l0+dwgD28uIB8gL6aAv70GIzx0eT1iG935pqcMKWK0p1KvgDNZAOtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdfKUtFJLLqoWs6jxh1Yt0A5HTOMB8GA1UdIwQY
MBaAFI0LWE9gNf5aKHxWfx44VLj7wqDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zOTMxMzEtMTc0My00OGU1LWFlNTQt
YTliZjNhNzY5Mzc3LzEvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8zOTMxMzEtMTc0My00OGU1LWFlNTQtYTliZjNhNzY5Mzc3
LzEvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMfbxceO
8WRfqT1nYZfPcMOGPLZXKvbEM+um921SBkf/kWPbjeRjV7e/6HzgBZl9rjaJr+xJ
1ir3An6AJg/o0Ji2OPzq9TburcNY9U3Qduc4GI76tJ0kKbFa2bn3AeqlCp4WOoMY
fhteeFxrX7S7sEpHPvIdl6ykne7j95ixgmpSsRbpOjjJH7g9c26awHvJL0wSMtxC
b/miJlyWKETqD/TqFbYzT962Nej0TyeiRbaXd51fvVsZhgZufH0cFFbPdzUZbXMd
NWkvsq24ZOQqrlKUpLgOeuSJQSu6MTd1lHSYUc3z7W9bBPARF4hEe/kcoXql+oWR
+0wi0PaHgbXg7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client