Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: czC1VmRL85Fc7+6inzdWbfYI3ZkFehzLbGVgiZCr1ZE=
Subject key identifier: 5C:A2:76:32:06:27:F6:8C:FA:58:6D:D3:B5:7A:4F:63:5B:20:C8:14
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 019D394192409AFE5948DAB18F00517F12D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 1744
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: iufQHL1rrp5XzvULdBkr0SPCCu8.roa (hash: o7Un0OaNswzLrJGI0RBqiK6v18+B62LAaKhklEYedo4=)
2: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: m0vOaNZCsxEfOxI3a4Eob5ZA+4sb4gPwGXZQR+CJIaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:92:40:9a:fe:59:48:da:b1:8f:00:51:7f:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=5ca276320627f68cfa586dd3b57a4f635b20c814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:88:4f:69:44:3c:3a:41:87:ea:24:4e:bf:
0f:2c:ab:89:a9:c4:6a:02:27:c8:24:db:03:ba:7a:
0f:cf:8d:ca:51:01:60:29:33:7e:45:7c:05:73:59:
bb:c1:78:cd:c9:5c:15:f5:90:80:52:c1:a3:30:e2:
a4:cf:e8:6b:94:e9:29:b7:93:36:d4:31:5c:a1:90:
e6:52:8d:e7:01:eb:02:64:40:e3:9e:5b:e4:c0:33:
4e:a3:e2:32:97:2d:f5:f6:b7:d8:22:76:0f:e2:71:
59:65:d9:ca:c8:5a:45:7b:a1:85:17:0b:05:97:44:
09:6b:97:09:32:fa:4a:2f:7b:73:41:39:f9:28:a9:
cc:b1:52:e1:25:71:87:b4:9c:5b:56:e9:b9:7d:f7:
f5:a1:db:37:32:b2:f2:d3:78:88:aa:62:00:6a:49:
b5:8f:47:90:b9:f3:31:6f:28:6f:7d:f4:ec:88:97:
d6:53:eb:e6:23:68:b8:1b:39:b7:31:49:25:1e:b2:
26:3e:26:7e:df:23:00:0f:32:ff:d3:95:67:db:fd:
b1:4a:19:5e:cb:90:ac:f2:ec:05:e3:55:e1:76:9b:
f1:3d:41:b1:bf:0b:0b:b7:64:f8:2e:19:64:cc:b7:
80:39:06:83:ef:35:13:54:b2:1c:30:52:d5:ac:e5:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:76:32:06:27:F6:8C:FA:58:6D:D3:B5:7A:4F:63:5B:20:C8:14
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:50:96:e9:42:d7:11:54:0e:51:61:40:e6:70:ed:75:85:b2:
f0:32:33:e8:91:d1:7d:8d:64:d2:cf:a1:ce:72:e0:f7:3f:52:
3d:70:e4:26:f7:e8:cb:09:dc:6e:d9:ff:b4:72:96:2e:2f:68:
7e:af:72:e3:64:92:5c:c7:13:1b:19:9d:2e:3a:d3:27:8c:cb:
6d:02:7a:4f:b0:0c:32:4f:0c:1d:23:bb:c0:bd:09:51:37:09:
92:5b:99:03:ea:4e:d9:36:81:54:f3:ff:9f:a0:15:53:e1:b4:
cb:6c:d2:de:e8:3a:d5:26:fd:12:48:86:f8:e0:25:c0:de:17:
05:c6:64:de:30:94:71:ef:db:d3:6b:e5:b9:01:32:9a:87:53:
ac:e4:27:11:bd:fd:4e:6f:15:ef:f1:69:6e:0a:7d:cb:08:0d:
64:77:4c:ee:cc:23:33:10:09:94:2d:f9:1c:da:5d:98:f2:c5:
76:90:67:22:23:33:ab:67:e9:35:24:08:33:da:a0:8c:6e:f5:
40:9c:10:76:7a:c5:5a:e0:4e:d0:8f:a4:1b:ee:fd:90:67:06:
13:24:46:5d:70:2f:b1:80:2a:8b:89:4f:e0:1d:35:c7:44:d1:
54:47:44:9d:c1:7f:13:0d:51:97:9b:1f:53:e5:db:05:69:09:
c6:54:2e:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QZJAmv5ZSNqxjwBRfxLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzM3YzBjODU2OTQ2YjhmYmRhZjI4NWY1MmNhZGRjZjM4
YWQwYTgwHhcNMjYwMzI5MTEwMTMxWhcNMjYwMzMwMTEwMTMxWjAzMTEwLwYDVQQD
Eyg1Y2EyNzYzMjA2MjdmNjhjZmE1ODZkZDNiNTdhNGY2MzViMjBjODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwguIT2lEPDpBh+okTr8PLKuJqcRq
AifIJNsDunoPz43KUQFgKTN+RXwFc1m7wXjNyVwV9ZCAUsGjMOKkz+hrlOkpt5M2
1DFcoZDmUo3nAesCZEDjnlvkwDNOo+Iyly319rfYInYP4nFZZdnKyFpFe6GFFwsF
l0QJa5cJMvpKL3tzQTn5KKnMsVLhJXGHtJxbVum5fff1ods3MrLy03iIqmIAakm1
j0eQufMxbyhvffTsiJfWU+vmI2i4Gzm3MUklHrImPiZ+3yMADzL/05Vn2/2xShle
y5Cs8uwF41XhdpvxPUGxvwsLt2T4LhlkzLeAOQaD7zUTVLIcMFLVrOX+nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyidjIGJ/aM+lht07V6T2NbIMgUMB8GA1UdIwQY
MBaAFI0zfAyFaUa4+9ryhfUsrdzzitCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMt
M2YxNWY4ODM2ZGJiLzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81YzliZDktMDlhZC00ZmFjLWJiYmMtM2YxNWY4ODM2ZGJi
LzEvalROOERJVnBScmo3MnZLRjlTeXQzUE9LMEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVCW6ULX
EVQOUWFA5nDtdYWy8DIz6JHRfY1k0s+hznLg9z9SPXDkJvfoywncbtn/tHKWLi9o
fq9y42SSXMcTGxmdLjrTJ4zLbQJ6T7AMMk8MHSO7wL0JUTcJkluZA+pO2TaBVPP/
n6AVU+G0y2zS3ug61Sb9EkiG+OAlwN4XBcZk3jCUce/b02vluQEymodTrOQnEb39
Tm8V7/Fpbgp9ywgNZHdM7swjMxAJlC35HNpdmPLFdpBnIiMzq2fpNSQIM9qgjG71
QJwQdnrFWuBO0I+kG+79kGcGEyRGXXAvsYAqi4lP4B01x0TRVEdEncF/Ew1Rl5sf
U+XbBWkJxlQuXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:05 2026 by rpki-client