Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: ZQl8IKkeTdKeMWVxh1RiAPdvXjGYq2UsPDcVLLGPkPA=
Subject key identifier: CB:3C:B0:9D:2C:7C:BA:1A:9E:5D:F1:D9:91:26:5E:BE:A2:37:6D:47
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 019D375253435F04004594F70ED77AB2EC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0C00
Signing time: Sun 29 Mar 2026 02:00:35 +0000
Manifest this update: Sun 29 Mar 2026 02:00:35 +0000
Manifest next update: Mon 30 Mar 2026 02:00:35 +0000
Files and hashes: 1: 402WgFEvx-MCA7DFemnXw9EsHq0.roa (hash: I1gPCHaPoQ70/m4H48LGfcyzChehib1qKqxsJxfnGkA=)
2: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: kvVsOBXSRFuY7jRz9oX1XLuyjnz42L/xysqzme9EDr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:53:43:5f:04:00:45:94:f7:0e:d7:7a:b2:ec:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Mar 29 02:00:35 2026 GMT
Not After : Mar 30 02:00:35 2026 GMT
Subject: CN=cb3cb09d2c7cba1a9e5df1d991265ebea2376d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:66:72:02:0f:f1:fc:3d:b4:cf:e9:7e:07:c8:
9a:b2:14:85:1a:24:0d:44:70:2d:5d:e2:ab:97:94:
42:62:cb:19:f2:7a:39:7a:10:b3:d7:10:17:f1:e2:
a1:15:ea:0d:04:05:ef:0b:f4:b8:c2:a2:7f:08:ae:
ca:72:c1:3b:bb:69:82:ae:65:a6:54:b2:7d:43:3d:
51:22:30:36:67:89:36:92:74:c9:8a:f5:15:ec:ed:
75:79:32:d1:ab:fa:55:35:e8:8b:bd:28:f7:30:64:
b3:df:52:4a:12:29:9a:99:dd:ef:21:7e:3e:e7:3d:
9d:ec:b5:a4:e9:82:bf:ba:cf:a9:10:4b:03:71:14:
55:2d:b2:f7:81:34:cd:9f:73:4f:d7:6b:8a:00:f4:
94:94:78:7a:c4:19:69:cd:bb:ab:6f:7a:ba:b8:e7:
f6:8f:67:7c:4e:c7:bb:1f:53:bc:b7:e4:2f:73:af:
62:1d:99:ea:4b:e3:0b:9d:d3:6e:16:9f:32:93:fe:
64:ab:41:24:01:2a:62:bf:21:0a:dd:ee:99:19:00:
7c:53:0d:bf:45:ed:b9:86:62:4e:1a:d2:61:ea:96:
ca:8d:79:58:30:a8:39:1c:e9:d6:2f:60:e2:92:ee:
eb:4c:ac:a1:9a:d9:6c:0c:65:0a:79:01:d8:63:ff:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:B0:9D:2C:7C:BA:1A:9E:5D:F1:D9:91:26:5E:BE:A2:37:6D:47
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:68:67:ae:72:9a:65:7f:2f:0b:7d:ac:0b:82:17:b6:fa:b4:
60:88:33:23:7b:bc:b6:57:e9:00:89:cf:3d:bc:0a:6d:52:a2:
d9:fc:64:3d:27:48:7c:5c:4b:ba:ba:bd:bd:12:ec:be:45:a3:
ea:28:e0:fd:67:8d:7f:b9:81:2c:fe:2a:9a:de:50:50:44:37:
80:ef:50:36:75:3c:50:c2:13:3a:b2:b0:23:6d:a1:c8:dc:44:
9e:6a:63:e9:36:5c:57:a1:8c:81:0c:46:d8:00:a4:40:3d:13:
71:22:50:ac:1b:05:7d:fc:01:0d:3e:a2:3d:68:14:dd:c1:4e:
13:b1:6a:bd:72:98:fa:18:c9:1a:b7:c5:41:26:95:d4:da:f7:
c1:a6:0b:18:33:1a:ad:c6:83:ae:6d:35:d1:4b:04:84:ed:35:
ae:c6:ac:d3:bf:7a:8c:b2:db:a1:08:29:a7:7e:42:aa:30:4d:
63:28:d9:1d:30:0c:d4:d6:dc:ae:3c:b5:64:1b:a5:db:5a:f1:
e3:58:8c:70:5b:38:45:6a:c7:3f:65:1e:34:e7:c9:d0:93:ae:
9d:d9:06:25:ba:a2:4c:d7:06:bd:cb:2b:25:22:97:a4:e3:16:
8f:98:e5:3b:2c:6b:07:7c:f1:17:24:50:10:82:0c:36:e7:99:
63:f3:fc:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UlNDXwQARZT3Dtd6suyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2Y1MzhmOGEwMWVkZDBhNzZiMDA4YjRkNDVkNDFmNjc4
MjFiZDIwHhcNMjYwMzI5MDIwMDM1WhcNMjYwMzMwMDIwMDM1WjAzMTEwLwYDVQQD
EyhjYjNjYjA5ZDJjN2NiYTFhOWU1ZGYxZDk5MTI2NWViZWEyMzc2ZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mZyAg/x/D20z+l+B8iashSFGiQN
RHAtXeKrl5RCYssZ8no5ehCz1xAX8eKhFeoNBAXvC/S4wqJ/CK7KcsE7u2mCrmWm
VLJ9Qz1RIjA2Z4k2knTJivUV7O11eTLRq/pVNeiLvSj3MGSz31JKEimamd3vIX4+
5z2d7LWk6YK/us+pEEsDcRRVLbL3gTTNn3NP12uKAPSUlHh6xBlpzburb3q6uOf2
j2d8Tse7H1O8t+Qvc69iHZnqS+MLndNuFp8yk/5kq0EkASpivyEK3e6ZGQB8Uw2/
Re25hmJOGtJh6pbKjXlYMKg5HOnWL2Diku7rTKyhmtlsDGUKeQHYY/+7lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs8sJ0sfLoanl3x2ZEmXr6iN21HMB8GA1UdIwQY
MBaAFIw/U4+KAe3Qp2sAi01F1B9nghvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQt
Y2Q2YTUwMzE2M2Q2LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQtY2Q2YTUwMzE2M2Q2
LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmhnrnKa
ZX8vC32sC4IXtvq0YIgzI3u8tlfpAInPPbwKbVKi2fxkPSdIfFxLurq9vRLsvkWj
6ijg/WeNf7mBLP4qmt5QUEQ3gO9QNnU8UMITOrKwI22hyNxEnmpj6TZcV6GMgQxG
2ACkQD0TcSJQrBsFffwBDT6iPWgU3cFOE7FqvXKY+hjJGrfFQSaV1Nr3waYLGDMa
rcaDrm010UsEhO01rsas0796jLLboQgpp35CqjBNYyjZHTAM1Nbcrjy1ZBul21rx
41iMcFs4RWrHP2UeNOfJ0JOundkGJbqiTNcGvcsrJSKXpOMWj5jlOyxrB3zxFyRQ
EIIMNueZY/P8+A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:57 2026 by rpki-client