Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier: 2eAf0Ir/M9bosnDCOw1E9K0yGmDceDH6MjnooRWSHmA=
Subject key identifier: 1F:33:1B:09:4B:87:7D:07:3C:53:02:D4:34:9B:7A:D4:C4:E9:76:87
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 019D3940D2418BD02A74CCE8C25923C09995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number: 11E3
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: 7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa (hash: Z91Be9fMnlCk9EcCA8UjSbIMFHHE/PnW3Mwi2btNcCM=)
2: jIeFhJZd4hnKN5qOPFYJyLelG2U.roa (hash: FLT9m7JPrJS5aMnwU7tXsALsvI1wqlNumVY/Ni2QnbM=)
3: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: F2zRLNrhcIqL/PfzBk04LQKthRW83SL7hWEaJ/DxkS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d2:41:8b:d0:2a:74:cc:e8:c2:59:23:c0:99:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=1f331b094b877d073c5302d4349b7ad4c4e97687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:55:6d:f3:dd:6c:63:a0:0f:02:1a:09:ca:
96:26:7a:75:dc:fc:01:32:06:70:9b:46:c9:30:e0:
be:e4:4a:64:81:b9:9a:8e:fc:cc:4a:91:04:72:86:
35:fa:47:f9:a9:cb:33:89:14:fe:f4:b5:21:7c:f1:
3f:07:18:81:61:c9:1b:d9:48:26:68:75:ae:06:25:
66:ea:6b:87:db:45:52:fc:dd:cf:b0:c8:ec:e4:f8:
15:a1:be:3b:7c:1f:06:06:14:fe:54:a3:97:c6:b2:
ed:e0:09:80:29:a1:f4:44:a0:36:a8:bc:f4:61:42:
5e:b8:41:eb:bd:9a:2b:a1:0a:81:73:df:e9:38:9b:
95:91:d2:1a:af:ac:82:94:a2:b7:fc:66:e6:a6:8a:
62:a6:fc:8c:48:92:ad:b5:aa:16:f8:9f:05:f0:a6:
99:b6:ce:3a:d5:20:f0:8a:29:c4:16:b9:54:98:ab:
7b:26:f3:33:76:fa:1b:8c:36:5a:fd:f9:a0:f5:f8:
7d:de:0d:3e:94:ff:be:85:7e:84:74:8e:d8:a8:b8:
d0:0c:32:0c:9f:52:7a:a3:9f:9e:1c:a6:f3:a4:a8:
4c:25:3f:78:3d:8e:54:98:75:4e:32:4d:88:ad:59:
7e:03:b3:d4:ce:43:c6:55:ee:cc:28:f4:08:60:a2:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:33:1B:09:4B:87:7D:07:3C:53:02:D4:34:9B:7A:D4:C4:E9:76:87
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1b:c4:c1:88:3d:ee:3f:b5:00:17:f0:85:9e:2e:71:ab:81:
db:a9:7f:13:f9:f4:6c:a6:9b:85:26:72:08:99:d8:17:13:99:
38:cc:75:78:f5:61:2f:95:02:96:6f:65:3b:50:aa:31:19:b0:
a2:21:94:4f:c1:df:0b:79:2c:b4:e1:5b:25:bd:83:ad:78:df:
5c:35:c0:0d:66:8b:f3:10:11:d2:17:67:32:ab:d8:11:0f:ba:
01:c8:a9:24:d8:61:0c:dd:e9:6c:67:d4:52:0a:0b:7b:fb:42:
d6:1a:94:01:39:2e:e5:06:6c:1a:22:6c:12:6d:41:ab:1d:40:
b8:91:57:4a:c2:ab:10:e3:14:85:f7:07:e8:a2:4b:d2:40:ba:
ee:ac:95:b7:ac:9f:cb:fc:2e:76:80:eb:51:17:8b:4d:68:c6:
97:2c:1d:30:99:e2:07:ae:07:e2:1a:75:da:11:61:00:dd:1a:
f4:d0:68:3f:a7:62:af:84:92:a4:62:6d:80:af:5d:52:20:61:
9e:2e:4a:ad:33:0e:d5:b2:8e:60:13:38:e9:63:f5:5b:49:ff:
2d:c5:cf:1c:f2:fa:47:49:3b:3a:91:42:1d:7b:3a:bd:54:a9:
8e:fd:36:2b:aa:81:ce:1a:85:f3:e9:0f:9e:c6:c6:aa:07:35:
88:c7:b1:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QNJBi9AqdMzowlkjwJmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjJmODFiOGM0N2MyYjU4OGY0NTFkNDAzN2M2ODM3ODcw
YjM5N2YwHhcNMjYwMzI5MTEwMDQyWhcNMjYwMzMwMTEwMDQyWjAzMTEwLwYDVQQD
EygxZjMzMWIwOTRiODc3ZDA3M2M1MzAyZDQzNDliN2FkNGM0ZTk3Njg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TlVbfPdbGOgDwIaCcqWJnp13PwB
MgZwm0bJMOC+5EpkgbmajvzMSpEEcoY1+kf5qcsziRT+9LUhfPE/BxiBYckb2Ugm
aHWuBiVm6muH20VS/N3PsMjs5PgVob47fB8GBhT+VKOXxrLt4AmAKaH0RKA2qLz0
YUJeuEHrvZoroQqBc9/pOJuVkdIar6yClKK3/GbmpopipvyMSJKttaoW+J8F8KaZ
ts461SDwiinEFrlUmKt7JvMzdvobjDZa/fmg9fh93g0+lP++hX6EdI7YqLjQDDIM
n1J6o5+eHKbzpKhMJT94PY5UmHVOMk2IrVl+A7PUzkPGVe7MKPQIYKKiswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8zGwlLh30HPFMC1DSbetTE6XaHMB8GA1UdIwQY
MBaAFI6y+BuMR8K1iPRR1AN8aDeHCzl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgt
NDgzZmM5MDcwOGQ1LzEvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgtNDgzZmM5MDcwOGQ1
LzEvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxvEwYg9
7j+1ABfwhZ4ucauB26l/E/n0bKabhSZyCJnYFxOZOMx1ePVhL5UClm9lO1CqMRmw
oiGUT8HfC3kstOFbJb2DrXjfXDXADWaL8xAR0hdnMqvYEQ+6AcipJNhhDN3pbGfU
UgoLe/tC1hqUATku5QZsGiJsEm1Bqx1AuJFXSsKrEOMUhfcH6KJL0kC67qyVt6yf
y/wudoDrUReLTWjGlywdMJniB64H4hp12hFhAN0a9NBoP6dir4SSpGJtgK9dUiBh
ni5KrTMO1bKOYBM46WP1W0n/LcXPHPL6R0k7OpFCHXs6vVSpjv02K6qBzhqF8+kP
nsbGqgc1iMexpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:19 2026 by rpki-client