Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: +OaLO1Mv6gvmoPAV/O0AWVX50RDtQQttXqv2SP9XDIo=
Subject key identifier: 00:EE:E9:4B:34:1C:A0:4D:71:C8:DE:45:29:52:97:CD:83:8C:28:EC
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 019D3AC1D6B9AC0FDE68C4BA43C571DD0467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 0763
Signing time: Sun 29 Mar 2026 18:01:15 +0000
Manifest this update: Sun 29 Mar 2026 18:01:15 +0000
Manifest next update: Mon 30 Mar 2026 18:01:15 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: JAlcivkO4sRZI6sAcoqPODDnQKIyYXqSPHkq8OpuJQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:d6:b9:ac:0f:de:68:c4:ba:43:c5:71:dd:04:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Mar 29 18:01:15 2026 GMT
Not After : Mar 30 18:01:15 2026 GMT
Subject: CN=00eee94b341ca04d71c8de45295297cd838c28ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:57:cd:06:cb:5a:c6:15:55:44:40:ec:ed:
6c:da:bd:0b:6c:e6:79:0e:a5:24:58:ef:95:54:9d:
7f:56:bd:34:57:b0:05:8a:03:b7:84:a9:c2:af:80:
e3:0c:46:41:6f:0f:93:d4:8e:23:2d:28:d3:3d:8c:
98:c8:d0:7a:98:5b:2d:3c:ee:3b:58:30:61:05:ba:
a0:ab:96:d6:1b:16:7b:87:28:f8:bb:ad:56:e6:2f:
76:cb:a1:3b:58:81:30:aa:f7:a8:22:02:bf:02:44:
42:9a:04:e0:11:ac:78:d6:02:00:4f:c3:2e:a6:55:
d8:6c:45:20:61:4b:64:5f:82:18:e3:7a:5d:1b:78:
4b:e5:89:03:f4:ff:bf:e5:ad:cd:ad:50:f2:34:c5:
87:7c:34:e7:a6:26:be:fb:79:73:b3:f1:dd:85:6f:
37:f3:88:5d:9e:9d:9c:6c:9c:1b:39:ad:f3:94:7f:
be:96:ac:61:0b:1e:e9:2f:89:49:d1:4b:a4:14:5b:
c1:d9:01:74:a7:ea:2f:f7:03:3e:b8:1e:96:8e:96:
20:b0:b8:0f:43:6b:f9:70:84:3a:89:08:4b:d4:e4:
97:fd:c3:a1:61:95:89:40:e5:de:fa:97:bb:20:89:
37:bf:2a:b5:ff:7e:d7:38:da:14:88:5a:90:a7:89:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EE:E9:4B:34:1C:A0:4D:71:C8:DE:45:29:52:97:CD:83:8C:28:EC
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:31:2d:65:ba:15:d6:0e:a5:9d:5b:c9:46:10:86:43:32:98:
12:3d:d6:44:a5:da:59:89:af:f4:8d:93:02:09:78:c2:3f:42:
92:3a:f7:91:49:a9:2b:c6:3f:09:4b:3d:5c:e2:6b:d5:19:ff:
49:2d:61:68:65:91:50:55:47:3e:91:ea:c8:e4:fb:0d:9a:8b:
71:ec:cc:96:36:cf:bd:60:0f:79:8b:a9:e5:2d:4b:59:22:67:
f7:6d:4b:78:a7:23:64:a8:ee:f1:39:ff:b9:55:f3:da:ea:06:
fc:4b:5d:0d:05:02:b8:da:87:e0:ef:7d:25:f3:ca:2f:ef:e9:
5f:27:20:74:66:13:59:56:80:bf:2c:4f:bb:5e:f7:17:05:7e:
70:5d:ce:11:da:49:03:8f:4c:a2:36:54:6c:ba:c2:2a:57:8b:
69:7c:70:21:6d:fe:f6:c5:96:11:be:12:48:e2:ae:2a:02:9a:
66:ad:3a:a1:b6:a7:2d:79:ed:7d:ec:dc:9b:44:a0:35:f2:03:
d5:ba:43:cb:36:14:8f:71:44:e4:40:73:b8:11:16:5b:d0:00:
d8:53:c4:fd:39:1f:9f:8f:3b:0f:72:d2:ae:67:79:7c:e5:7d:
87:72:12:2e:7b:2a:fd:8c:a7:e7:29:e0:56:e8:a6:ff:5f:b8:
d9:18:74:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wda5rA/eaMS6Q8Vx3QRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGI0NTc2M2VmMGExOTYyOTNiMzM4MGM4ODhmODNhOGM3
Y2QzNzcwHhcNMjYwMzI5MTgwMTE1WhcNMjYwMzMwMTgwMTE1WjAzMTEwLwYDVQQD
EygwMGVlZTk0YjM0MWNhMDRkNzFjOGRlNDUyOTUyOTdjZDgzOGMyOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf9XzQbLWsYVVURA7O1s2r0LbOZ5
DqUkWO+VVJ1/Vr00V7AFigO3hKnCr4DjDEZBbw+T1I4jLSjTPYyYyNB6mFstPO47
WDBhBbqgq5bWGxZ7hyj4u61W5i92y6E7WIEwqveoIgK/AkRCmgTgEax41gIAT8Mu
plXYbEUgYUtkX4IY43pdG3hL5YkD9P+/5a3NrVDyNMWHfDTnpia++3lzs/HdhW83
84hdnp2cbJwbOa3zlH++lqxhCx7pL4lJ0UukFFvB2QF0p+ov9wM+uB6WjpYgsLgP
Q2v5cIQ6iQhL1OSX/cOhYZWJQOXe+pe7IIk3vyq1/37XONoUiFqQp4kT+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADu6Us0HKBNccjeRSlSl82DjCjsMB8GA1UdIwQY
MBaAFIzbRXY+8KGWKTszgMiI+DqMfNN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUt
NTNkM2I5ODc0ZWRkLzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUtNTNkM2I5ODc0ZWRk
LzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzEtZboV
1g6lnVvJRhCGQzKYEj3WRKXaWYmv9I2TAgl4wj9Ckjr3kUmpK8Y/CUs9XOJr1Rn/
SS1haGWRUFVHPpHqyOT7DZqLcezMljbPvWAPeYup5S1LWSJn921LeKcjZKju8Tn/
uVXz2uoG/EtdDQUCuNqH4O99JfPKL+/pXycgdGYTWVaAvyxPu173FwV+cF3OEdpJ
A49MojZUbLrCKleLaXxwIW3+9sWWEb4SSOKuKgKaZq06obanLXntfezcm0SgNfID
1bpDyzYUj3FE5EBzuBEWW9AA2FPE/Tkfn487D3LSrmd5fOV9h3ISLnsq/Yyn5yng
Vuim/1+42Rh0sA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:43 2026 by rpki-client