Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
File: j-Arfu3_w4q16rRBYXLn2I6a0eI.mft (raw, json)
Hash identifier: xEZBN9gT6p2c5Q+RKLxv+2n5gu8thJ5sTmKgOiE2m7k=
Subject key identifier: DC:85:63:8E:5F:30:B8:0E:34:89:BC:F1:67:21:AD:50:B7:4B:F7:C1
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019CE74923DC474D8BF0963DC2A074FE3E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
Manifest number: 124F
Signing time: Fri 13 Mar 2026 13:00:56 +0000
Manifest this update: Fri 13 Mar 2026 13:00:56 +0000
Manifest next update: Sat 14 Mar 2026 13:00:56 +0000
Files and hashes: 1: ZozBgriq6kWUkB3EEMv0zuDMpg0.roa (hash: TLlTKsaLK/1ufozvAabU7oKR7zYU0p22HLkLEedOcsQ=)
2: j-Arfu3_w4q16rRBYXLn2I6a0eI.crl (hash: x6eDW4eWB0d8SoI0g0ywLEzntJbFTDfDllKPQtoJpDA=)
3: nhHCyeQqh6mJ2bYlu-BdXtbSr2g.roa (hash: 6UCtegtaLhqm785oV+vRV6CeZ4+1/GyKLgr46mrjl8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:23:dc:47:4d:8b:f0:96:3d:c2:a0:74:fe:3e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Mar 13 13:00:56 2026 GMT
Not After : Mar 14 13:00:56 2026 GMT
Subject: CN=dc85638e5f30b80e3489bcf16721ad50b74bf7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:aa:70:fa:ce:fa:cd:e1:28:ec:d1:f6:b0:
0d:56:45:00:69:d7:1f:2d:49:5a:79:1f:54:ac:56:
e8:7d:de:04:91:b2:73:84:1e:a1:6f:2c:d1:ab:e9:
ba:b7:e2:36:49:a1:df:39:2b:ac:85:bb:31:ac:e1:
1c:7b:23:6f:dc:a5:5d:81:65:7b:1d:d6:11:02:15:
5e:4f:84:f3:86:e8:10:36:47:ea:1b:8f:48:0f:2c:
be:6b:cd:31:9b:f7:cc:14:74:b2:42:6e:70:bc:f6:
6d:b2:27:1b:a3:20:c3:2f:0c:99:7b:bd:1e:22:89:
be:02:29:d7:55:fa:93:b5:5f:d7:51:a0:16:97:f9:
18:0c:37:7f:ac:f0:0f:9e:fb:b0:15:30:60:ef:01:
b3:5b:7e:b6:92:e2:c2:97:58:56:2c:94:a3:7d:3a:
dd:28:19:b5:72:35:2f:e3:44:2b:89:f9:3d:f7:e2:
90:05:de:93:30:55:d9:2f:ed:8b:b1:87:ad:c9:62:
35:57:67:82:a8:0a:1b:f6:e0:4a:bb:1b:80:c7:72:
51:48:4a:4a:68:b5:6a:55:4c:d5:fc:a5:2b:8e:8e:
36:b1:3b:c2:a4:ec:66:6c:26:cc:bb:5c:14:a7:88:
6e:bf:8a:77:74:4c:7f:61:ae:12:2b:3f:9e:94:a2:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:63:8E:5F:30:B8:0E:34:89:BC:F1:67:21:AD:50:B7:4B:F7:C1
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:af:da:3b:75:9c:39:5f:98:20:15:82:aa:f1:96:86:c6:a0:
27:4e:b9:55:4c:8e:30:ef:3d:5f:ae:5c:d1:11:40:f4:a7:96:
5f:32:51:39:6f:7f:d6:d5:09:95:cb:4d:82:6f:fb:3d:7f:12:
7a:76:76:3c:b0:90:97:65:2e:97:19:af:54:84:bb:3a:bd:b0:
f7:1e:2c:4c:f9:0f:52:de:bf:41:f2:83:58:b5:f7:a3:80:0a:
be:63:e7:fb:fd:4e:7c:73:99:9c:2f:98:bb:70:58:2c:bc:a1:
19:82:c9:17:f6:bf:c1:69:b5:eb:09:a4:4c:cb:bf:c8:58:96:
f2:78:6e:0d:0a:e4:8d:98:32:e6:2e:14:c2:aa:62:7e:4c:2c:
11:ca:b5:5a:f3:9c:a8:9c:60:1f:1b:74:06:fb:36:6e:9d:92:
75:07:66:f4:4e:5d:ca:11:68:1d:5a:45:16:cc:4e:30:e9:ef:
4e:bf:09:c0:f4:f8:5d:86:81:f2:a7:86:ac:b5:a0:ac:81:c3:
d2:7e:06:67:1e:f1:6f:b1:b7:b7:8e:f0:31:1e:00:8b:f9:41:
1a:f9:8a:69:a2:cd:d1:1c:3e:ea:19:08:21:8d:50:68:32:b2:
01:54:7c:ea:2a:f5:f2:ae:35:85:e1:fa:85:5f:36:5b:8e:bc:
0b:c9:2f:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznSSPcR02L8JY9wqB0/j41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5
YWQxZTIwHhcNMjYwMzEzMTMwMDU2WhcNMjYwMzE0MTMwMDU2WjAzMTEwLwYDVQQD
EyhkYzg1NjM4ZTVmMzBiODBlMzQ4OWJjZjE2NzIxYWQ1MGI3NGJmN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX6qcPrO+s3hKOzR9rANVkUAadcf
LUlaeR9UrFbofd4EkbJzhB6hbyzRq+m6t+I2SaHfOSushbsxrOEceyNv3KVdgWV7
HdYRAhVeT4TzhugQNkfqG49IDyy+a80xm/fMFHSyQm5wvPZtsicboyDDLwyZe70e
Iom+AinXVfqTtV/XUaAWl/kYDDd/rPAPnvuwFTBg7wGzW362kuLCl1hWLJSjfTrd
KBm1cjUv40Qrifk99+KQBd6TMFXZL+2LsYetyWI1V2eCqAob9uBKuxuAx3JRSEpK
aLVqVUzV/KUrjo42sTvCpOxmbCbMu1wUp4huv4p3dEx/Ya4SKz+elKJ3VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyFY45fMLgONIm88WchrVC3S/fBMB8GA1UdIwQY
MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt
NTE0NmYxM2I3MWExLzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYtNTE0NmYxM2I3MWEx
LzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAna/aO3Wc
OV+YIBWCqvGWhsagJ065VUyOMO89X65c0RFA9KeWXzJROW9/1tUJlctNgm/7PX8S
enZ2PLCQl2UulxmvVIS7Or2w9x4sTPkPUt6/QfKDWLX3o4AKvmPn+/1OfHOZnC+Y
u3BYLLyhGYLJF/a/wWm16wmkTMu/yFiW8nhuDQrkjZgy5i4UwqpifkwsEcq1WvOc
qJxgHxt0Bvs2bp2SdQdm9E5dyhFoHVpFFsxOMOnvTr8JwPT4XYaB8qeGrLWgrIHD
0n4GZx7xb7G3t47wMR4Ai/lBGvmKaaLN0Rw+6hkIIY1QaDKyAVR86ir18q41heH6
hV82W468C8kvag==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:26:58 2026 by rpki-client