
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier: /4Ai/5caWTFCMYCIDSThru8oW/IXyIFKGkJq820KIfo=
Subject key identifier: 34:8F:F3:D5:D1:01:CE:3E:CE:4A:AA:70:CA:F1:21:60:B1:A8:A9:E6
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 019D382DF40679ED19DA743D329A154BF715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: _o-k0bNNHBrg0HhGSoEoWC8rUrM.roa (hash: YUrV94RoNYCOFVbYKNI8ylxN9kBT9dKZA2qph96XBuk=)
2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: aTlpxZKxwMPvnwG7fJQM3wDXpZ8J73oJBtqcRXH4MI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f4:06:79:ed:19:da:74:3d:32:9a:15:4b:f7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=348ff3d5d101ce3ece4aaa70caf12160b1a8a9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:87:91:58:95:2f:18:1b:4a:48:97:c7:1b:
d4:9f:7a:03:61:4e:83:d4:9d:04:4d:76:20:33:d0:
9d:a1:c5:58:cd:83:39:45:b7:8e:63:7e:2f:a2:92:
34:ab:8f:3b:b7:8f:62:23:29:a4:0f:2f:d1:29:78:
15:ec:70:ea:44:52:71:be:b1:37:70:dd:00:5d:7f:
b2:bc:54:d9:05:99:d1:30:3f:ee:46:92:f9:ad:b9:
c4:43:3d:22:44:69:f6:06:17:c6:4a:89:76:74:46:
28:51:0f:93:74:10:b1:1c:ff:e7:e2:67:80:e9:24:
39:bf:7e:5c:27:f9:9c:fd:f4:57:16:1f:25:73:cd:
25:ee:2b:2c:8e:e4:82:2f:04:39:b9:aa:e5:4b:39:
4f:67:c6:5c:df:18:06:26:81:41:2e:1a:87:81:94:
b5:9b:4e:b4:eb:95:6b:db:b6:02:d3:0d:2a:a5:61:
6c:92:98:59:7b:d8:ce:ac:01:87:e2:b2:4e:28:73:
6f:22:3b:df:a8:06:b9:8a:31:22:68:8a:d7:b1:23:
24:62:bb:06:5b:17:c8:05:86:3a:f5:80:7f:f2:9a:
9a:73:69:31:d2:e4:49:85:6d:7f:b6:bd:88:05:1e:
3b:08:f0:08:5b:2f:d1:ba:4e:76:25:00:81:21:0e:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:F3:D5:D1:01:CE:3E:CE:4A:AA:70:CA:F1:21:60:B1:A8:A9:E6
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:34:23:a9:ff:66:74:16:79:9c:b1:92:b0:3d:fa:3a:06:19:
c5:0a:38:c7:02:68:40:e4:2a:8c:b0:97:5b:b6:a9:da:f1:1e:
d5:ce:d9:1d:e7:c6:3c:7e:1e:1d:7e:2d:69:66:39:43:f0:e4:
31:46:81:2b:af:8b:1d:54:29:31:9a:c1:f3:7e:ea:32:fa:a5:
d8:64:f8:d3:ee:49:47:22:7b:d0:9d:8e:ba:0f:87:59:7f:c3:
b6:8f:86:82:7c:e4:7e:b7:89:82:33:41:a7:50:10:76:61:99:
87:d3:ac:82:48:5a:fc:df:59:4a:08:b5:00:97:0d:23:ff:ed:
40:5a:82:7e:b7:d9:ca:45:b5:3e:ba:8e:01:e2:20:ea:f3:39:
4c:ad:40:5f:23:12:56:18:59:72:db:05:e3:ce:63:b9:01:88:
45:9a:84:36:8d:fe:14:88:95:f6:b2:85:9c:a1:10:56:7e:7a:
0c:f3:a6:b4:4b:91:a3:c6:2a:b2:a2:84:b5:71:84:a2:59:f8:
e2:63:fd:ee:b8:17:70:96:27:92:b3:05:a3:e1:88:a9:90:e1:
74:68:cc:07:57:5f:ee:3d:58:f3:c0:78:46:ec:25:a2:db:0a:
cb:a2:a1:68:c0:9a:bd:8f:a7:e7:c3:b0:59:82:91:d5:34:99:
66:25:a4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LfQGee0Z2nQ9MpoVS/cVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNWYwNjZhZjgwZDBlOWYwN2VhODdiMjRiZGFmYTU5ZDFm
NWYyNmYwHhcNMjYwMzI5MDYwMDI4WhcNMjYwMzMwMDYwMDI4WjAzMTEwLwYDVQQD
EygzNDhmZjNkNWQxMDFjZTNlY2U0YWFhNzBjYWYxMjE2MGIxYThhOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt22HkViVLxgbSkiXxxvUn3oDYU6D
1J0ETXYgM9CdocVYzYM5RbeOY34vopI0q487t49iIymkDy/RKXgV7HDqRFJxvrE3
cN0AXX+yvFTZBZnRMD/uRpL5rbnEQz0iRGn2BhfGSol2dEYoUQ+TdBCxHP/n4meA
6SQ5v35cJ/mc/fRXFh8lc80l7issjuSCLwQ5uarlSzlPZ8Zc3xgGJoFBLhqHgZS1
m06065Vr27YC0w0qpWFskphZe9jOrAGH4rJOKHNvIjvfqAa5ijEiaIrXsSMkYrsG
WxfIBYY69YB/8pqac2kx0uRJhW1/tr2IBR47CPAIWy/Ruk52JQCBIQ6txwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSP89XRAc4+zkqqcMrxIWCxqKnmMB8GA1UdIwQY
MBaAFI1fBmr4DQ6fB+qHskva+lnR9fJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMzBlNGQtYTlkOS00YjdlLTg2M2Mt
NmYzYWE4OTQzZTY4LzEvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMzBlNGQtYTlkOS00YjdlLTg2M2MtNmYzYWE4OTQzZTY4
LzEvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjQjqf9m
dBZ5nLGSsD36OgYZxQo4xwJoQOQqjLCXW7ap2vEe1c7ZHefGPH4eHX4taWY5Q/Dk
MUaBK6+LHVQpMZrB837qMvql2GT40+5JRyJ70J2Oug+HWX/Dto+GgnzkfreJgjNB
p1AQdmGZh9Osgkha/N9ZSgi1AJcNI//tQFqCfrfZykW1PrqOAeIg6vM5TK1AXyMS
VhhZctsF485juQGIRZqENo3+FIiV9rKFnKEQVn56DPOmtEuRo8YqsqKEtXGEoln4
4mP97rgXcJYnkrMFo+GIqZDhdGjMB1df7j1Y88B4RuwlotsKy6KhaMCavY+n58Ow
WYKR1TSZZiWk6g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:48 2026 by rpki-client