
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: r6MxdXtivj4DcYHkXw8NB5ass2oEGWdc7M4Oz6IBQo4=
Subject key identifier: D4:04:BE:BB:D7:BC:26:59:88:B4:AA:29:73:11:EE:99:5D:8F:B8:3D
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 019D37C05D8E32D255D0B8885F39872D9827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 0B58
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: 51QPg8BsGwcdmhbDf1XyB8p1tcU/ep1Ykf4YEUwFio4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5d:8e:32:d2:55:d0:b8:88:5f:39:87:2d:98:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=d404bebbd7bc265988b4aa297311ee995d8fb83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:07:b6:f2:0f:1a:ff:79:30:bb:4a:d9:17:
8a:10:df:7c:bc:97:d8:2e:3c:dc:04:bc:ca:9d:06:
e4:cd:0b:6a:30:65:9e:f9:03:a8:40:63:08:f4:b6:
08:c9:00:6d:a0:26:5a:cb:9f:fd:16:3a:00:d0:89:
cf:b5:e1:28:2d:d1:f4:1f:1d:4b:36:d6:83:1e:6a:
ed:da:de:70:cc:78:3e:68:60:1d:a1:68:29:f3:81:
0c:4a:ef:63:f1:39:e7:11:1a:c7:ba:da:83:40:92:
e7:29:63:0e:f7:cc:d4:f8:8a:2b:06:ff:d1:a8:1d:
d8:5c:f7:b4:9c:ae:1c:e8:6b:2c:e6:52:1a:59:3f:
0e:d5:c1:83:63:2f:fb:e7:27:55:7e:e6:70:7f:a6:
19:f0:dc:d9:d2:e8:20:a3:c4:2c:f7:83:af:f4:25:
f3:43:6a:d4:b2:1d:b7:f6:67:22:a1:d8:9c:8e:ff:
9a:7e:8a:78:36:9a:69:6a:26:9c:5a:6d:44:a2:da:
8e:fa:d5:38:c7:04:53:e3:68:f9:9a:80:79:c2:d2:
fd:71:e2:6c:aa:7f:c5:0f:f7:53:0e:0e:0b:ae:8c:
a9:a3:72:9f:18:02:22:86:5d:39:95:18:2a:4c:04:
84:d1:19:23:d7:f1:ac:c6:ef:85:58:48:e9:35:7f:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:BE:BB:D7:BC:26:59:88:B4:AA:29:73:11:EE:99:5D:8F:B8:3D
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:af:5f:f0:66:52:d0:1a:f8:45:37:5c:78:5b:86:4a:88:51:
3d:ea:b4:1b:09:a0:b5:5c:51:50:73:49:96:cb:c9:cc:e0:8e:
4b:58:a8:2b:78:7e:7f:d8:c6:fd:8f:16:e4:61:d8:87:39:c1:
3f:3d:b9:96:c8:42:36:f2:77:60:7f:50:1e:99:d9:6d:e6:99:
f7:dd:c6:b8:4f:94:d3:c5:e3:36:39:87:32:b6:0d:08:50:97:
dc:10:9d:e2:61:b2:da:51:7a:8e:51:df:c3:d4:0d:e7:de:f1:
4d:9e:b3:28:cb:15:cd:ee:bd:18:b9:87:68:44:37:82:87:3b:
0f:70:5a:8d:6f:f3:3d:ff:cb:b5:a7:db:8f:0f:15:c6:a1:f9:
c7:f2:a0:8c:bc:ec:b4:c0:17:ba:7c:e2:97:53:ba:68:71:03:
9f:82:c1:8b:5b:e0:3b:e9:a5:2d:02:05:8c:3a:dc:cc:84:95:
34:31:ea:29:e7:37:79:cb:ea:73:73:fd:e5:72:73:81:56:6b:
e4:16:4c:61:0c:3f:ba:6a:ed:7d:af:77:c4:7c:87:53:e1:b8:
63:93:10:29:43:c9:bb:42:a7:dc:0a:9c:af:2c:d1:47:9a:48:
d9:45:f0:05:e4:4f:1e:5e:d4:f4:ad:c3:3e:65:04:d7:42:81:
34:d8:cd:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wF2OMtJV0LiIXzmHLZgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk
OWRhNWYwHhcNMjYwMzI5MDQwMDQ2WhcNMjYwMzMwMDQwMDQ2WjAzMTEwLwYDVQQD
EyhkNDA0YmViYmQ3YmMyNjU5ODhiNGFhMjk3MzExZWU5OTVkOGZiODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+AHtvIPGv95MLtK2ReKEN98vJfY
LjzcBLzKnQbkzQtqMGWe+QOoQGMI9LYIyQBtoCZay5/9FjoA0InPteEoLdH0Hx1L
NtaDHmrt2t5wzHg+aGAdoWgp84EMSu9j8TnnERrHutqDQJLnKWMO98zU+IorBv/R
qB3YXPe0nK4c6Gss5lIaWT8O1cGDYy/75ydVfuZwf6YZ8NzZ0uggo8Qs94Ov9CXz
Q2rUsh239mciodicjv+afop4NpppaiacWm1EotqO+tU4xwRT42j5moB5wtL9ceJs
qn/FD/dTDg4Lroypo3KfGAIihl05lRgqTASE0Rkj1/Gsxu+FWEjpNX+vDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQEvrvXvCZZiLSqKXMR7pldj7g9MB8GA1UdIwQY
MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt
NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj
LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAma9f8GZS
0Br4RTdceFuGSohRPeq0GwmgtVxRUHNJlsvJzOCOS1ioK3h+f9jG/Y8W5GHYhznB
Pz25lshCNvJ3YH9QHpnZbeaZ993GuE+U08XjNjmHMrYNCFCX3BCd4mGy2lF6jlHf
w9QN597xTZ6zKMsVze69GLmHaEQ3goc7D3BajW/zPf/Ltafbjw8VxqH5x/KgjLzs
tMAXunzil1O6aHEDn4LBi1vgO+mlLQIFjDrczISVNDHqKec3ecvqc3P95XJzgVZr
5BZMYQw/umrtfa93xHyHU+G4Y5MQKUPJu0Kn3AqcryzRR5pI2UXwBeRPHl7U9K3D
PmUE10KBNNjN8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:39 2026 by rpki-client