
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File: jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier: yITpNge+6UuVlojf1dI/8AdFGH2f3FM6r6IIg1s2MIs=
Subject key identifier: 31:E0:78:D0:31:A8:0A:83:63:98:88:79:8C:18:25:8E:73:14:D7:BF
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer: /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial: 019D37C07DFBE64D7788C162E2500C8DDF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number: 0224
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: 4av5zvB60UOpa8+I6cqgNB6bCTo93Vq2/aMprhc7cX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7d:fb:e6:4d:77:88:c1:62:e2:50:0c:8d:df:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=31e078d031a80a83639888798c18258e7314d7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:11:e3:5c:39:a7:a0:2e:62:a6:53:66:a0:
8b:a4:9b:8f:7b:89:27:25:46:82:13:bc:4d:c5:a0:
ca:b6:de:47:a7:fb:d2:bc:75:e4:4f:ab:80:74:e3:
4b:a0:e9:90:da:41:45:ef:73:a2:cc:b5:c3:7e:5d:
a2:16:e7:28:d2:8a:c6:78:09:3d:6f:83:e8:77:d3:
05:ca:54:f2:e9:5a:42:2c:58:af:45:61:0c:23:7a:
fd:59:77:47:50:d5:f8:16:e8:35:28:a5:46:03:2f:
05:bd:88:22:44:6d:81:7f:cd:f8:a7:ff:5d:16:c4:
ca:92:d1:03:ad:9a:9e:67:a5:60:68:de:97:fc:5d:
c9:ee:a9:ad:5a:76:00:50:eb:b8:34:1a:53:79:58:
f8:24:11:fc:0e:ad:e3:f5:20:1f:34:02:ed:1c:33:
4b:84:ba:88:ad:4c:f6:c2:e5:e0:cc:cd:35:55:56:
26:4d:2d:f4:cd:66:9b:4f:d8:6a:27:d1:b8:bf:7e:
03:bc:e2:1a:f7:a1:3a:9f:37:98:86:23:1e:14:76:
b2:5a:6b:b5:5a:59:c9:b8:5d:e0:3f:6f:e1:ca:cd:
13:b8:ab:48:a8:4f:fe:f9:0a:7c:13:58:dc:f9:cc:
98:18:de:58:60:e1:53:bf:32:46:3e:0a:78:95:f3:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:78:D0:31:A8:0A:83:63:98:88:79:8C:18:25:8E:73:14:D7:BF
X509v3 Authority Key Identifier:
keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d0:7a:be:c5:30:a8:80:60:47:52:03:ab:63:be:0a:d5:d5:
78:41:6d:e4:6d:a7:27:ff:de:55:ee:5f:a7:54:06:24:64:59:
2e:af:41:a1:3c:ca:23:35:67:8c:0b:4b:45:da:99:5f:f0:da:
f7:d1:ff:68:57:a5:ac:8f:0e:00:86:6e:20:3f:c0:42:01:7c:
f9:63:06:91:fe:b6:21:b7:50:13:4d:15:a2:ba:01:24:3c:93:
0c:fb:78:e0:40:00:01:e5:c0:bb:9f:28:62:28:14:a6:5c:51:
35:53:c9:df:e0:dd:ae:45:52:97:19:d7:ef:e2:6a:28:39:62:
fe:bf:d4:d6:16:a6:a8:6c:99:81:ff:de:24:ee:a8:f5:c0:d8:
c7:0a:d1:6a:ca:13:14:8f:59:a4:e4:78:a9:0e:7a:f8:7b:41:
4d:6b:c4:1d:f6:4d:94:7c:6c:50:04:0f:a8:fa:f8:96:64:76:
e6:22:8b:a5:d7:db:69:68:b5:21:46:d9:3a:d7:39:05:f4:c3:
ab:40:b2:43:c1:3a:19:82:cd:71:39:3c:8f:6e:5f:02:3e:df:
b0:1b:b0:0b:8c:48:50:a3:b3:2e:81:84:aa:b3:14:80:40:2c:
26:56:41:4c:ab:91:e2:12:79:70:60:50:8a:45:02:a2:2e:47:
a2:56:49:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wH375k13iMFi4lAMjd8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNDE1OTc5MjNiOTgxZTFjMGQ0ZmNhMmZmZDBhOGNkYzM2
NjdiN2QwHhcNMjYwMzI5MDQwMDU1WhcNMjYwMzMwMDQwMDU1WjAzMTEwLwYDVQQD
EygzMWUwNzhkMDMxYTgwYTgzNjM5ODg4Nzk4YzE4MjU4ZTczMTRkN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z8R41w5p6AuYqZTZqCLpJuPe4kn
JUaCE7xNxaDKtt5Hp/vSvHXkT6uAdONLoOmQ2kFF73OizLXDfl2iFuco0orGeAk9
b4Pod9MFylTy6VpCLFivRWEMI3r9WXdHUNX4Fug1KKVGAy8FvYgiRG2Bf834p/9d
FsTKktEDrZqeZ6VgaN6X/F3J7qmtWnYAUOu4NBpTeVj4JBH8Dq3j9SAfNALtHDNL
hLqIrUz2wuXgzM01VVYmTS30zWabT9hqJ9G4v34DvOIa96E6nzeYhiMeFHayWmu1
WlnJuF3gP2/hys0TuKtIqE/++Qp8E1jc+cyYGN5YYOFTvzJGPgp4lfNUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHgeNAxqAqDY5iIeYwYJY5zFNe/MB8GA1UdIwQY
MBaAFI5BWXkjuYHhwNT8ov/QqM3DZnt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jOTYwOTAtOTFkNC00NDAzLWJiZmQt
NDdiYTMzYmEzYzA1LzEvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jOTYwOTAtOTFkNC00NDAzLWJiZmQtNDdiYTMzYmEzYzA1
LzEvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdB6vsUw
qIBgR1IDq2O+CtXVeEFt5G2nJ//eVe5fp1QGJGRZLq9BoTzKIzVnjAtLRdqZX/Da
99H/aFelrI8OAIZuID/AQgF8+WMGkf62IbdQE00VoroBJDyTDPt44EAAAeXAu58o
YigUplxRNVPJ3+DdrkVSlxnX7+JqKDli/r/U1hamqGyZgf/eJO6o9cDYxwrRasoT
FI9ZpOR4qQ56+HtBTWvEHfZNlHxsUAQPqPr4lmR25iKLpdfbaWi1IUbZOtc5BfTD
q0CyQ8E6GYLNcTk8j25fAj7fsBuwC4xIUKOzLoGEqrMUgEAsJlZBTKuR4hJ5cGBQ
ikUCoi5HolZJ1Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:53 2026 by rpki-client