Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: 5rb8LZXmAnWACtZplgWBvfqtJI5HtBjAe7e7Y5IxBVE=
Subject key identifier: 37:40:CC:21:50:39:30:E4:25:FA:C1:01:AA:9C:5B:17:31:95:6C:0F
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 019D39415D7BB3F81B3EA9747022EF722A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 119F
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: mI6oY4Lnet6WkWSB7D2a3UmqXGA.roa (hash: 0KqnfYhvhDCdOS8nOcazqklOk+TkEMwWsm8QT9vs9ws=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: 7ODLUI1i0j4xdTC5limv6dzAk0IFR6iSDJahmW/IQeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5d:7b:b3:f8:1b:3e:a9:74:70:22:ef:72:2a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=3740cc21503930e425fac101aa9c5b1731956c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3f:bb:8d:54:68:65:8a:d6:e1:75:b1:e9:95:
80:e3:59:e0:e0:88:14:1b:4f:e6:e3:49:74:19:f8:
3e:88:22:c9:2b:89:d2:ea:0a:57:17:ab:6b:87:cd:
98:8a:bb:8e:16:20:0a:79:19:89:ee:8b:15:e6:24:
d0:72:49:d3:86:cb:29:4e:46:aa:da:99:ae:3a:68:
dd:b3:d5:e4:1d:80:f6:49:33:67:71:60:65:98:76:
48:c9:16:97:25:4b:72:7d:d2:09:1c:51:71:85:ae:
d3:0e:fd:ca:07:65:63:70:09:f5:09:be:bb:7c:de:
74:6e:5c:03:67:99:de:00:d9:58:89:3d:0b:28:3a:
28:08:d4:56:c0:a2:fb:ce:9a:0c:26:6d:fe:67:64:
8f:8e:29:58:2a:af:d1:04:11:4b:97:ae:17:bc:dc:
be:bf:aa:18:12:1c:7a:cb:70:47:75:80:0d:ef:40:
89:d4:1e:12:0e:d7:09:62:d0:d3:7f:5a:ca:ec:be:
a5:d8:13:76:bb:b3:ba:e6:87:52:76:15:e9:b1:ab:
77:6f:67:5f:80:54:6b:78:37:9d:66:da:8f:dd:a7:
83:b0:8a:e9:42:47:91:3b:66:7c:47:99:72:91:ad:
9d:aa:ce:4a:10:53:9a:a0:6a:89:26:28:67:d9:7a:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:40:CC:21:50:39:30:E4:25:FA:C1:01:AA:9C:5B:17:31:95:6C:0F
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:87:04:97:50:7d:14:6b:b4:ea:db:46:32:93:4a:5c:ed:41:
af:bf:0f:38:9e:8e:32:90:a8:a1:03:b9:a9:d1:42:b0:80:2a:
0f:04:3d:b2:91:ee:a6:83:ff:23:f9:86:67:ee:97:ad:57:f8:
a7:85:ad:c3:a0:a9:fe:b2:74:2b:3f:9d:0e:28:87:ec:e3:9e:
72:8c:46:3e:18:bb:91:bd:b4:2a:21:ab:13:bc:c4:4e:2c:3a:
cf:d9:21:5f:20:81:b0:72:07:2e:58:86:f7:30:d5:0a:b1:d6:
d8:e8:10:49:4b:16:6b:dc:7c:c8:c7:d9:cf:71:eb:96:b8:37:
2d:75:a8:30:e1:16:b6:1e:f6:f4:a4:4e:ea:90:2a:91:d8:b3:
e3:f0:2b:33:33:e4:72:2a:62:dc:0b:20:d7:f2:42:f2:9f:3f:
31:99:b5:c2:25:89:a3:d0:8c:1e:a0:d4:a7:27:e9:b4:69:cd:
a1:54:de:f4:92:7f:7f:85:9f:ca:e9:e5:a2:a9:81:a3:39:c2:
1b:1a:01:fe:eb:78:89:72:b3:a9:ab:a0:d6:f1:cb:47:bd:ef:
1d:77:a2:a9:1b:39:a3:f6:69:b3:b3:44:99:9f:40:8f:4a:f7:
1f:d4:ff:68:8e:14:14:90:4f:cb:da:6f:f0:43:fc:70:ba:5e:
14:c4:48:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QV17s/gbPql0cCLvcipaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTFmMjMwYTBlMmVlZGEzODEwNTIyZTc0YTY5ODIwMDcx
M2U2MjAwHhcNMjYwMzI5MTEwMTE4WhcNMjYwMzMwMTEwMTE4WjAzMTEwLwYDVQQD
EygzNzQwY2MyMTUwMzkzMGU0MjVmYWMxMDFhYTljNWIxNzMxOTU2YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T+7jVRoZYrW4XWx6ZWA41ng4IgU
G0/m40l0Gfg+iCLJK4nS6gpXF6trh82YiruOFiAKeRmJ7osV5iTQcknThsspTkaq
2pmuOmjds9XkHYD2STNncWBlmHZIyRaXJUtyfdIJHFFxha7TDv3KB2VjcAn1Cb67
fN50blwDZ5neANlYiT0LKDooCNRWwKL7zpoMJm3+Z2SPjilYKq/RBBFLl64XvNy+
v6oYEhx6y3BHdYAN70CJ1B4SDtcJYtDTf1rK7L6l2BN2u7O65odSdhXpsat3b2df
gFRreDedZtqP3aeDsIrpQkeRO2Z8R5lyka2dqs5KEFOaoGqJJihn2XrKJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdAzCFQOTDkJfrBAaqcWxcxlWwPMB8GA1UdIwQY
MBaAFKyR8jCg4u7aOBBSLnSmmCAHE+YgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9iNDYzYTYtMjgyZi00NWYwLWI0YmEt
Y2RmOTJmYmU4ZjBiLzEvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9iNDYzYTYtMjgyZi00NWYwLWI0YmEtY2RmOTJmYmU4ZjBi
LzEvckpIeU1LRGk3dG80RUZJdWRLYVlJQWNUNWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIcEl1B9
FGu06ttGMpNKXO1Br78POJ6OMpCooQO5qdFCsIAqDwQ9spHupoP/I/mGZ+6XrVf4
p4Wtw6Cp/rJ0Kz+dDiiH7OOecoxGPhi7kb20KiGrE7zETiw6z9khXyCBsHIHLliG
9zDVCrHW2OgQSUsWa9x8yMfZz3Hrlrg3LXWoMOEWth729KRO6pAqkdiz4/ArMzPk
cipi3Asg1/JC8p8/MZm1wiWJo9CMHqDUpyfptGnNoVTe9JJ/f4WfyunloqmBoznC
GxoB/ut4iXKzqaug1vHLR73vHXeiqRs5o/Zps7NEmZ9Aj0r3H9T/aI4UFJBPy9pv
8EP8cLpeFMRI+g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:36 2026 by rpki-client