Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: WC8Jcp0SuiRxSut+b3UPIB+JWSjfbFWJ6onLUFF4VAY=
Subject key identifier: 21:E5:B7:3D:D6:A4:A7:D1:87:44:8A:99:AE:4C:74:34:34:5B:DF:D6
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019D38668D39269E7C69AA73B62963DA7065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: Cz8RzmsrFz0iSmZXDWnC9LokfyT/qvh7Zi2t9wq4tEg=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8d:39:26:9e:7c:69:aa:73:b6:29:63:da:70:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=21e5b73dd6a4a7d187448a99ae4c7434345bdfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:41:8b:fa:7b:c6:1f:e2:c6:21:bf:30:8e:
44:07:f2:77:31:b9:fe:00:de:63:f0:b2:87:f1:6c:
b0:51:e2:55:12:f6:b6:52:e4:d5:5d:88:8d:91:97:
c8:9b:d0:30:4e:fe:8c:53:43:24:00:79:35:11:1c:
39:44:65:0b:06:26:ea:80:77:cd:61:a0:41:a3:cf:
df:d5:de:0e:79:96:0f:83:86:f3:11:e0:12:68:4b:
c3:b6:27:5f:32:9c:25:7e:65:5e:41:83:2a:e9:97:
1b:59:71:a0:e6:41:43:c6:97:f4:ab:40:94:d0:bc:
61:76:d6:6f:2c:9d:fc:db:46:64:17:7e:24:8c:36:
cc:b9:54:f3:51:9e:3e:59:f0:a5:2b:3f:27:ce:23:
00:48:da:8d:af:86:34:49:61:65:a4:c3:34:ac:e7:
f5:84:d2:dc:5f:86:3e:44:fb:19:9a:fa:b0:a7:0d:
d0:d1:f3:1e:de:bf:97:f3:2b:e6:a5:a9:45:a8:0b:
8a:5c:0b:a6:d8:a4:9d:65:4b:a5:63:d0:a3:a5:dc:
49:d4:9e:fd:4b:36:0f:8f:64:7e:ec:e7:bc:ac:ab:
14:71:01:11:ef:5c:65:ec:cc:d0:94:2f:15:1a:86:
76:bc:0d:cb:99:74:51:dc:58:24:f7:81:09:88:40:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:B7:3D:D6:A4:A7:D1:87:44:8A:99:AE:4C:74:34:34:5B:DF:D6
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c1:11:07:44:e8:27:91:07:a4:a2:dc:80:c4:fa:15:28:5b:
cc:d8:e0:33:56:07:08:fa:31:13:6b:bb:1b:e3:30:89:44:86:
01:73:71:2e:e5:0a:61:bb:54:66:df:72:86:ff:d0:a4:ab:28:
1b:72:e7:64:f1:59:69:c5:ba:ac:83:80:1f:fb:b2:a2:43:de:
17:13:5d:2b:90:03:60:f0:ec:8d:47:6e:3a:2b:f6:4b:46:ea:
ff:a6:ce:0c:76:ff:f3:3a:86:1f:f5:56:21:c6:98:af:3a:d7:
ac:a4:4e:6f:e1:a8:a0:98:6f:ac:09:4e:4a:39:92:6b:a2:e4:
dc:f7:4e:6f:4f:24:83:69:21:d7:51:80:57:b8:e7:af:ec:1d:
a4:73:06:ca:83:c9:4d:db:c0:9f:59:b8:e2:12:6f:99:d8:f5:
e2:eb:b5:e5:4d:f8:f1:26:91:f2:e8:fe:ee:a9:b3:d7:ef:2f:
11:14:67:b5:a0:59:20:f1:99:79:05:62:e0:b6:2b:3b:d0:28:
85:7e:bc:61:15:c7:39:bd:7e:00:a5:16:5f:1d:80:4d:28:6f:
bd:cc:86:e8:ed:ee:af:47:14:96:b8:45:ff:c5:c8:d3:ee:19:
c0:c6:66:16:f7:57:b6:3e:f2:f8:59:57:67:98:1c:ad:08:e6:
a7:96:48:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zo05Jp58aapztilj2nBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl
NGRlODgwHhcNMjYwMzI5MDcwMjE3WhcNMjYwMzMwMDcwMjE3WjAzMTEwLwYDVQQD
EygyMWU1YjczZGQ2YTRhN2QxODc0NDhhOTlhZTRjNzQzNDM0NWJkZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYpBi/p7xh/ixiG/MI5EB/J3Mbn+
AN5j8LKH8WywUeJVEva2UuTVXYiNkZfIm9AwTv6MU0MkAHk1ERw5RGULBibqgHfN
YaBBo8/f1d4OeZYPg4bzEeASaEvDtidfMpwlfmVeQYMq6ZcbWXGg5kFDxpf0q0CU
0LxhdtZvLJ3820ZkF34kjDbMuVTzUZ4+WfClKz8nziMASNqNr4Y0SWFlpMM0rOf1
hNLcX4Y+RPsZmvqwpw3Q0fMe3r+X8yvmpalFqAuKXAum2KSdZUulY9CjpdxJ1J79
SzYPj2R+7Oe8rKsUcQER71xl7MzQlC8VGoZ2vA3LmXRR3Fgk94EJiEBdMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHltz3WpKfRh0SKma5MdDQ0W9/WMB8GA1UdIwQY
MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt
NWU5N2Y0YTUxMmU1LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1
LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8ERB0To
J5EHpKLcgMT6FShbzNjgM1YHCPoxE2u7G+MwiUSGAXNxLuUKYbtUZt9yhv/QpKso
G3LnZPFZacW6rIOAH/uyokPeFxNdK5ADYPDsjUduOiv2S0bq/6bODHb/8zqGH/VW
IcaYrzrXrKROb+GooJhvrAlOSjmSa6Lk3PdOb08kg2kh11GAV7jnr+wdpHMGyoPJ
TdvAn1m44hJvmdj14uu15U348SaR8uj+7qmz1+8vERRntaBZIPGZeQVi4LYrO9Ao
hX68YRXHOb1+AKUWXx2ATShvvcyG6O3ur0cUlrhF/8XI0+4ZwMZmFvdXtj7y+FlX
Z5gcrQjmp5ZIgA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client