Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File: jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier: 1ejbyyU03ldR0Z5w+WK9TG7ZcACl7dbAInGVkMYX3RQ=
Subject key identifier: 35:0A:47:79:A3:FA:09:84:56:AA:45:9B:9C:29:AE:7C:F4:29:8E:D6
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 019D0F695B8E32B72B40F42124F37B1CB05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number: 1466
Signing time: Sat 21 Mar 2026 08:00:56 +0000
Manifest this update: Sat 21 Mar 2026 08:00:56 +0000
Manifest next update: Sun 22 Mar 2026 08:00:56 +0000
Files and hashes: 1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
2: 1-VHrB2ftFgG1R7rW9e965VrbOgs.roa (hash: e22B3XhTvj7ENfOUB059RvQemhyhAgeNVsH6G1GtXTY=)
3: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=)
4: 7YQDZucpbsxyTF1dG-WSopyYoD4.roa (hash: AZ+p2vdqGYxqTemz9H7WmkXG8urZ++JrwB5Ra4yemqo=)
5: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=)
6: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
7: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
8: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: lTc+1BKt3rwipJut3povB3XtnsodAlqeY7Xy4x0HErk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:69:5b:8e:32:b7:2b:40:f4:21:24:f3:7b:1c:b0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Mar 21 08:00:56 2026 GMT
Not After : Mar 22 08:00:56 2026 GMT
Subject: CN=350a4779a3fa098456aa459b9c29ae7cf4298ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:99:62:ca:d0:3f:85:3c:4d:8a:52:4b:42:
2d:55:19:eb:dd:dd:12:f2:0f:c7:75:ed:d8:be:75:
72:55:a5:2f:53:66:31:a3:8d:1f:c5:6b:1a:08:09:
11:b5:57:bb:f7:dc:1c:c1:4a:fe:04:a3:6f:e4:bd:
66:2f:bf:04:c8:dc:21:c0:14:35:8b:ca:4f:e1:19:
70:31:51:f5:4a:ed:f8:58:8a:ff:21:89:99:25:92:
f0:40:f5:21:a8:01:ae:1a:09:1e:e3:c2:f4:0f:5e:
c3:50:50:95:8d:d7:ec:8c:0d:5b:1f:0b:79:03:16:
cc:57:9a:f2:8b:16:38:13:ac:ff:a2:2c:95:0e:0c:
c1:86:89:9a:5c:dc:63:95:78:44:c7:b2:7f:41:ab:
85:43:31:16:45:01:bd:4e:2a:00:6d:d1:ab:c2:b6:
23:44:14:a7:bd:95:59:db:e8:b5:3a:02:ed:b3:b1:
f0:73:90:56:17:17:7d:06:9c:1a:5f:cf:24:54:d2:
9b:9c:72:e0:30:a8:ba:6d:54:3d:33:b2:6c:3a:6a:
b2:81:0a:c6:0f:1f:66:88:7b:36:f3:6a:6a:7d:b0:
88:79:c4:66:0e:c2:11:90:1c:4e:ed:04:2d:a9:14:
05:0e:73:22:b3:07:b8:89:6b:1b:42:48:db:12:66:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:47:79:A3:FA:09:84:56:AA:45:9B:9C:29:AE:7C:F4:29:8E:D6
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:51:37:94:ca:b6:21:9b:f8:49:2c:6f:08:c1:9a:39:14:1a:
28:f9:db:6e:d6:bf:2e:cd:ba:94:15:33:3c:c4:94:b6:f5:f0:
ad:0b:99:27:2f:74:aa:c8:77:75:70:36:2b:d5:30:94:c5:c3:
2d:11:ce:c8:ee:3e:c0:42:0b:30:58:84:21:1d:d3:4b:c2:ae:
26:ca:47:fc:c8:4e:88:1b:e3:b4:87:dd:ba:c2:ab:08:7a:13:
c0:4f:97:34:b0:fa:5f:16:29:2f:1f:9f:e1:0f:eb:c6:99:b7:
f4:dd:1e:19:b0:ef:a8:3f:c4:23:31:12:5f:9f:f5:fc:91:c6:
de:8f:d7:6a:44:66:2f:1b:b1:8a:60:0e:a7:26:0a:4e:9c:50:
d4:3e:02:4c:7d:26:20:c8:5f:dd:47:1f:4a:59:ad:c8:04:65:
20:81:25:c0:b1:08:fd:17:b8:77:af:97:f7:5a:04:6b:00:c1:
96:c9:d3:36:09:8f:a1:8e:f2:16:52:d7:7b:c0:b2:74:8b:45:
fe:1e:1e:2f:89:de:9b:4a:36:f0:8a:f1:46:c0:c4:2c:93:e8:
8c:07:cf:13:7a:02:3a:25:a0:2d:b1:2b:b9:1c:2a:6a:84:55:
8a:04:75:25:eb:d5:6d:85:01:66:d0:db:83:d2:02:22:80:7f:
31:1b:3c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0PaVuOMrcrQPQhJPN7HLBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk
Mzk4YTMwHhcNMjYwMzIxMDgwMDU2WhcNMjYwMzIyMDgwMDU2WjAzMTEwLwYDVQQD
EygzNTBhNDc3OWEzZmEwOTg0NTZhYTQ1OWI5YzI5YWU3Y2Y0Mjk4ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4omZYsrQP4U8TYpSS0ItVRnr3d0S
8g/Hde3YvnVyVaUvU2Yxo40fxWsaCAkRtVe799wcwUr+BKNv5L1mL78EyNwhwBQ1
i8pP4RlwMVH1Su34WIr/IYmZJZLwQPUhqAGuGgke48L0D17DUFCVjdfsjA1bHwt5
AxbMV5ryixY4E6z/oiyVDgzBhomaXNxjlXhEx7J/QauFQzEWRQG9TioAbdGrwrYj
RBSnvZVZ2+i1OgLts7Hwc5BWFxd9BpwaX88kVNKbnHLgMKi6bVQ9M7JsOmqygQrG
Dx9miHs282pqfbCIecRmDsIRkBxO7QQtqRQFDnMiswe4iWsbQkjbEmayKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUKR3mj+gmEVqpFm5wprnz0KY7WMB8GA1UdIwQY
MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt
YzhmOWJlN2QxOWRmLzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm
LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVE3lMq2
IZv4SSxvCMGaORQaKPnbbta/Ls26lBUzPMSUtvXwrQuZJy90qsh3dXA2K9UwlMXD
LRHOyO4+wEILMFiEIR3TS8KuJspH/MhOiBvjtIfdusKrCHoTwE+XNLD6XxYpLx+f
4Q/rxpm39N0eGbDvqD/EIzESX5/1/JHG3o/XakRmLxuximAOpyYKTpxQ1D4CTH0m
IMhf3UcfSlmtyARlIIElwLEI/Re4d6+X91oEawDBlsnTNgmPoY7yFlLXe8CydItF
/h4eL4nem0o28IrxRsDELJPojAfPE3oCOiWgLbEruRwqaoRVigR1JevVbYUBZtDb
g9ICIoB/MRs8+A==
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:54:46 2026 by rpki-client