Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: 04e/u5faU0SlA1lxF6WU++qje+tjuybc0zI5vMdEsbc=
Subject key identifier: 88:14:26:76:25:FE:99:F9:68:0B:D9:DE:2E:20:E5:5C:FB:0C:6D:08
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019D39AE7BDF4318227C6A641DB29C3EA20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 1104
Signing time: Sun 29 Mar 2026 13:00:29 +0000
Manifest this update: Sun 29 Mar 2026 13:00:29 +0000
Manifest next update: Mon 30 Mar 2026 13:00:29 +0000
Files and hashes: 1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: icvC7PHp9deVxlt/1VGT5glev/cU+yWkyf81s4Kay0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:7b:df:43:18:22:7c:6a:64:1d:b2:9c:3e:a2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Mar 29 13:00:29 2026 GMT
Not After : Mar 30 13:00:29 2026 GMT
Subject: CN=8814267625fe99f9680bd9de2e20e55cfb0c6d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:54:0c:60:4c:2a:b9:15:6d:97:f8:25:bc:
80:b1:2e:17:eb:c3:a6:4a:f0:43:42:93:98:f1:5c:
bb:06:84:d8:cd:4d:6e:09:9a:11:72:66:af:52:15:
11:09:47:40:ea:1c:c3:93:0c:6e:13:d2:82:08:64:
e8:15:9a:2b:63:f5:70:bb:1b:2e:1b:86:ee:d7:1f:
c4:2f:14:4a:97:89:04:4a:03:a6:84:ca:91:e2:e0:
65:8f:48:94:f0:3c:22:86:99:11:ef:b8:12:f0:40:
d2:b3:f8:47:13:a3:b6:07:0c:21:3d:77:49:73:33:
f6:61:98:7c:a5:2a:3c:23:99:8d:25:c9:b5:2a:6f:
c5:9e:9f:e3:65:12:70:4e:c7:e2:54:d1:c5:a9:ee:
67:ba:e5:58:f6:9b:62:b2:a5:28:b7:c3:b7:23:bf:
c5:99:d5:06:18:e2:34:05:61:cd:49:9b:14:69:7f:
9f:83:d1:ed:d4:66:b0:10:c3:dd:5b:2f:98:cd:03:
85:a9:18:84:c5:48:9a:86:7e:dc:b4:7e:dc:0b:1b:
47:c4:87:cf:fc:0c:78:83:b2:a8:3d:e9:2c:f8:46:
c9:b2:4c:f4:98:2a:d9:75:29:73:54:89:9a:86:04:
81:0f:b5:c8:36:8e:f9:f0:89:0e:12:5d:88:ae:ef:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:26:76:25:FE:99:F9:68:0B:D9:DE:2E:20:E5:5C:FB:0C:6D:08
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6c:d1:5b:b8:d1:a6:46:1f:e2:51:3c:ed:05:01:10:bb:d8:
87:5e:f2:dc:e6:77:37:a2:22:3f:6c:82:48:cf:b2:a4:33:41:
3a:40:74:49:7f:96:4b:30:e8:46:5e:43:00:a4:67:b0:c7:aa:
37:87:ff:fe:5c:a2:2e:3d:dd:ea:51:f3:a3:2f:03:7c:a3:73:
ed:0f:87:4f:f4:c6:33:0b:c5:37:a1:a3:61:a5:86:95:d9:90:
6f:3b:22:e9:3a:08:ab:f3:57:09:f8:2f:7a:0d:18:2c:ad:a7:
d3:61:97:c5:24:d5:8f:e1:01:ff:a6:15:96:b7:83:24:d5:34:
1e:30:6a:8d:1e:4a:56:59:db:89:34:b8:6c:da:d6:4d:63:e6:
02:51:dc:64:33:9a:26:b8:05:25:3b:b1:18:ff:5b:3b:22:f3:
e5:86:98:0b:8f:f7:46:b3:e5:ca:4a:3f:b2:4c:84:9b:35:21:
78:db:ee:ca:4c:dd:dc:85:61:6b:ef:f0:ac:c7:1b:b6:61:f2:
48:2b:b8:9a:86:ce:4f:b5:d0:94:ad:3d:71:d7:2b:77:ea:d1:
f5:5b:2d:b2:1b:1a:e7:44:9e:06:33:91:83:ad:14:9d:38:7a:
33:89:65:44:56:a9:ef:f2:4b:7c:2e:76:ad:58:83:83:7c:d6:
67:7b:44:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rnvfQxgifGpkHbKcPqIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm
ZGZmZjgwHhcNMjYwMzI5MTMwMDI5WhcNMjYwMzMwMTMwMDI5WjAzMTEwLwYDVQQD
Eyg4ODE0MjY3NjI1ZmU5OWY5NjgwYmQ5ZGUyZTIwZTU1Y2ZiMGM2ZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj5UDGBMKrkVbZf4JbyAsS4X68Om
SvBDQpOY8Vy7BoTYzU1uCZoRcmavUhURCUdA6hzDkwxuE9KCCGToFZorY/Vwuxsu
G4bu1x/ELxRKl4kESgOmhMqR4uBlj0iU8DwihpkR77gS8EDSs/hHE6O2BwwhPXdJ
czP2YZh8pSo8I5mNJcm1Km/Fnp/jZRJwTsfiVNHFqe5nuuVY9ptisqUot8O3I7/F
mdUGGOI0BWHNSZsUaX+fg9Ht1GawEMPdWy+YzQOFqRiExUiahn7ctH7cCxtHxIfP
/Ax4g7KoPeks+EbJskz0mCrZdSlzVImahgSBD7XINo758IkOEl2Iru+KAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgUJnYl/pn5aAvZ3i4g5Vz7DG0IMB8GA1UdIwQY
MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct
MjFmM2YyNjQ4NGQ5LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5
LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2zRW7jR
pkYf4lE87QUBELvYh17y3OZ3N6IiP2yCSM+ypDNBOkB0SX+WSzDoRl5DAKRnsMeq
N4f//lyiLj3d6lHzoy8DfKNz7Q+HT/TGMwvFN6GjYaWGldmQbzsi6ToIq/NXCfgv
eg0YLK2n02GXxSTVj+EB/6YVlreDJNU0HjBqjR5KVlnbiTS4bNrWTWPmAlHcZDOa
JrgFJTuxGP9bOyLz5YaYC4/3RrPlyko/skyEmzUheNvuykzd3IVha+/wrMcbtmHy
SCu4mobOT7XQlK09cdcrd+rR9Vstshsa50SeBjORg60UnTh6M4llRFap7/JLfC52
rViDg3zWZ3tEnA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:13 2026 by rpki-client