Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: WlTVML0zIeUCga7wgxfCvRaMAiROluMwwehDtk5+CI0=
Subject key identifier: 50:C7:D6:9C:DF:43:22:42:7E:FE:EF:D8:A0:DC:2F:18:26:28:3A:C8
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 019D37F76DE310FA1E3C2F40831C4727104E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 156A
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: GO5gsgSjP6atrmJc6eN-oLN1XJE.roa (hash: T+zIy0ejXj3SXGWGil9zAIh7/YFmPINe0YtkNe4/+uU=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: nYKbc6uRlPmfAvB+qyPAnL+RJTbIyu2JHEQV3yhEsAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6d:e3:10:fa:1e:3c:2f:40:83:1c:47:27:10:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=50c7d69cdf4322427efeefd8a0dc2f1826283ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:ad:09:81:89:bd:a1:8e:0a:78:78:c6:f6:
67:31:82:1f:a3:74:d4:ed:29:65:fa:45:fc:e2:5f:
6b:f7:9c:c7:f5:1b:cd:c5:bd:84:43:f3:c5:2a:99:
2c:34:0d:37:eb:28:42:b1:9f:48:8a:cd:83:01:f2:
32:57:52:63:d2:2c:ad:97:69:e9:63:e9:af:4c:87:
cd:2c:68:1b:6a:46:93:8e:4e:ee:57:ff:da:e4:ac:
6f:2c:9c:f0:c5:de:55:9f:23:b9:45:fe:b0:06:67:
fe:60:02:5c:6a:71:60:02:14:d2:da:a7:66:5a:d0:
45:82:8e:6b:58:7b:7e:8b:e3:b6:32:75:6d:80:5e:
5c:2f:c9:8b:71:f4:93:0a:5f:c5:ad:4d:f7:dc:63:
27:e5:4f:14:71:af:09:27:93:61:25:d1:27:35:5a:
8b:a5:1e:1f:8c:e7:14:81:c3:b6:06:64:a7:3d:e5:
c2:8b:54:15:12:a2:fc:63:7e:43:81:bd:56:2d:85:
57:8c:be:53:94:bb:88:e9:c7:96:96:6e:e0:f4:99:
dc:84:fe:99:99:21:f9:c7:2b:47:b8:81:1e:8c:3b:
7d:bd:7b:59:08:6f:2e:de:f6:c6:a8:41:b6:b1:67:
93:cc:5c:23:99:29:0a:c3:82:a0:58:55:27:db:67:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:D6:9C:DF:43:22:42:7E:FE:EF:D8:A0:DC:2F:18:26:28:3A:C8
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:02:56:aa:6d:d9:6c:45:96:eb:fb:ab:dc:70:71:dd:29:0c:
32:8e:a8:2f:4e:c4:33:92:fa:23:3f:e5:b9:48:d2:d3:1c:22:
95:9e:e7:08:12:ad:71:55:28:1b:b5:11:19:40:f6:60:54:59:
c7:55:81:d5:d3:41:fe:69:79:7d:85:a6:5d:f2:c5:48:ff:25:
61:57:1d:c6:a6:7d:e9:bf:e1:23:77:2b:f4:b6:3b:f0:ed:ae:
28:89:55:0a:2d:4f:85:63:a1:11:fc:e9:fe:b9:9c:04:b7:f6:
31:e8:4e:2c:45:bc:00:92:a8:0f:db:25:a3:40:f1:57:8b:9a:
1d:8f:da:80:f1:76:23:fe:c1:05:68:71:f7:f9:13:8a:d9:82:
7c:13:b1:bd:bb:7c:ec:84:de:c8:ee:f5:19:f5:0a:f0:55:13:
12:07:70:ce:d5:20:0f:ac:07:75:77:51:fc:1c:a7:39:16:d5:
3a:25:63:71:9e:07:cf:f2:23:df:14:4c:c6:31:d8:b1:fb:87:
14:0a:33:76:08:42:62:1d:5a:10:bd:dd:6b:be:4d:1a:2d:d8:
1b:ed:3a:4c:08:00:53:e2:9a:e9:8b:9b:21:4f:2f:3e:9e:68:
fc:af:f0:31:42:21:71:8d:13:83:5d:57:0f:45:64:bb:3f:a5:
ab:e6:d6:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03923jEPoePC9AgxxHJxBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOGQ3ZWE0N2QxYjcwMGMzZDZiNzk5MzU4YWE3ZWE1ZWNh
OGIzZDIwHhcNMjYwMzI5MDUwMDU1WhcNMjYwMzMwMDUwMDU1WjAzMTEwLwYDVQQD
Eyg1MGM3ZDY5Y2RmNDMyMjQyN2VmZWVmZDhhMGRjMmYxODI2MjgzYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QOtCYGJvaGOCnh4xvZnMYIfo3TU
7Sll+kX84l9r95zH9RvNxb2EQ/PFKpksNA036yhCsZ9Iis2DAfIyV1Jj0iytl2np
Y+mvTIfNLGgbakaTjk7uV//a5KxvLJzwxd5VnyO5Rf6wBmf+YAJcanFgAhTS2qdm
WtBFgo5rWHt+i+O2MnVtgF5cL8mLcfSTCl/FrU333GMn5U8Uca8JJ5NhJdEnNVqL
pR4fjOcUgcO2BmSnPeXCi1QVEqL8Y35Dgb1WLYVXjL5TlLuI6ceWlm7g9JnchP6Z
mSH5xytHuIEejDt9vXtZCG8u3vbGqEG2sWeTzFwjmSkKw4KgWFUn22cyqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDH1pzfQyJCfv7v2KDcLxgmKDrIMB8GA1UdIwQY
MBaAFI+NfqR9G3AMPWt5k1iqfqXsqLPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEt
MjA1MjBlNmI2MTdhLzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEtMjA1MjBlNmI2MTdh
LzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAJWqm3Z
bEWW6/ur3HBx3SkMMo6oL07EM5L6Iz/luUjS0xwilZ7nCBKtcVUoG7URGUD2YFRZ
x1WB1dNB/ml5fYWmXfLFSP8lYVcdxqZ96b/hI3cr9LY78O2uKIlVCi1PhWOhEfzp
/rmcBLf2MehOLEW8AJKoD9slo0DxV4uaHY/agPF2I/7BBWhx9/kTitmCfBOxvbt8
7ITeyO71GfUK8FUTEgdwztUgD6wHdXdR/BynORbVOiVjcZ4Hz/Ij3xRMxjHYsfuH
FAozdghCYh1aEL3da75NGi3YG+06TAgAU+Ka6YubIU8vPp5o/K/wMUIhcY0Tg11X
D0Vkuz+lq+bWFA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:31 2026 by rpki-client