Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: 3Crw70zXYCCUA2xb2TCPO8ZTbc411/7ZCQMv76qu0/U=
Subject key identifier: B4:8B:D5:FF:B0:E0:94:DA:B8:8B:F7:05:F1:46:0C:42:F9:03:43:F9
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019D38D34169F4A1A4364B5F26AB79D5FC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 11BD
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: fpTANtI4bRz4exyqA72XnfqWeAU.asa (hash: AzHMEe9qZzasIn392H8jsDvUxwHyy/nAONClfoo+kAc=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: 17brryZ2uxayLQ3AhVy8f1Jy7XlzMhLVOwKrW61/Uks=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:41:69:f4:a1:a4:36:4b:5f:26:ab:79:d5:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=b48bd5ffb0e094dab88bf705f1460c42f90343f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:48:7c:0a:e7:55:dd:44:58:80:46:95:44:
c7:ae:5c:96:d7:65:96:7c:c4:78:bc:f5:f8:38:04:
40:e3:3c:ba:b7:e5:29:4e:35:2c:5a:73:07:7f:c0:
de:2e:57:fa:62:98:4d:01:a6:3b:a0:7b:53:66:79:
5a:eb:bc:17:09:a0:fa:fc:b7:d4:31:e6:ca:23:12:
7d:28:23:e3:cc:aa:00:a1:5b:2c:5f:4b:fb:1f:ca:
e8:81:a1:22:ae:c3:6b:2e:81:00:e3:b1:53:0e:ae:
b0:08:e9:91:7b:85:17:d2:dc:3b:99:a5:ef:3e:e7:
4f:e0:2c:f0:52:91:e2:72:b2:be:b3:df:a5:9b:a6:
d1:0c:b7:ab:a6:9e:34:71:72:02:9e:0e:e9:35:3e:
56:53:9f:f9:44:ff:34:3e:27:d3:71:e9:a8:0b:0c:
cb:d1:fb:ab:ef:f2:1c:68:0a:c3:af:25:80:04:a9:
3a:6b:7a:27:dc:69:1a:ab:c7:73:e2:74:a3:5d:a9:
b9:01:75:1f:1d:4e:b7:e5:d1:eb:8f:07:cc:6c:55:
f0:28:0f:08:fb:70:15:4e:fc:32:bb:0a:00:e4:3d:
b4:2c:b1:a1:f0:f2:91:96:d7:01:e5:84:c2:8a:4b:
8f:17:4b:5c:e6:95:b6:b1:c7:a4:c1:f0:80:a8:6b:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8B:D5:FF:B0:E0:94:DA:B8:8B:F7:05:F1:46:0C:42:F9:03:43:F9
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:06:c2:ad:3c:96:ec:a6:4a:9b:41:3f:4f:30:d7:ac:24:14:
8b:4e:f1:e6:93:d0:87:a6:22:20:3c:a9:87:ec:a2:cf:15:c2:
8e:6f:df:5d:84:4f:25:62:0f:b5:55:b0:23:a3:04:aa:91:51:
36:14:d5:ff:70:d9:30:f0:10:7a:ae:ee:be:b3:fd:fd:c3:38:
f3:42:18:d4:6d:c6:47:c1:a8:e9:eb:fe:82:ee:96:38:fc:96:
1c:3a:20:25:1f:5b:80:ce:a2:c6:ae:ae:3b:5b:b6:ef:f5:01:
87:d1:c5:d9:3e:00:62:a0:ca:f4:29:14:00:88:c3:f4:32:9d:
ce:35:5b:61:ba:12:86:cd:11:23:ed:2b:90:59:c5:78:9c:cb:
95:d1:55:a4:6f:98:a3:0f:4f:a7:3d:9a:f0:4c:2e:1f:d8:80:
55:b8:0a:86:28:f2:9a:4f:e8:06:50:d1:7a:9b:34:09:d0:3b:
b8:35:b6:ee:3a:a0:26:ff:33:fc:2d:a5:06:6a:08:b5:f0:4f:
7d:2b:65:64:10:4b:3e:08:2c:d9:a3:2a:f0:b4:a0:af:84:e2:
fd:d8:41:36:aa:56:9c:e5:0a:df:80:92:b9:6e:31:2a:6b:d6:
db:70:03:d8:e8:88:28:e3:82:2f:75:bf:08:43:82:65:2e:3a:
b0:35:2c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400Fp9KGkNktfJqt51fw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh
ZWQwYjEwHhcNMjYwMzI5MDkwMTAyWhcNMjYwMzMwMDkwMTAyWjAzMTEwLwYDVQQD
EyhiNDhiZDVmZmIwZTA5NGRhYjg4YmY3MDVmMTQ2MGM0MmY5MDM0M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3xIfArnVd1EWIBGlUTHrlyW12WW
fMR4vPX4OARA4zy6t+UpTjUsWnMHf8DeLlf6YphNAaY7oHtTZnla67wXCaD6/LfU
MebKIxJ9KCPjzKoAoVssX0v7H8rogaEirsNrLoEA47FTDq6wCOmRe4UX0tw7maXv
PudP4CzwUpHicrK+s9+lm6bRDLerpp40cXICng7pNT5WU5/5RP80PifTcemoCwzL
0fur7/IcaArDryWABKk6a3on3Gkaq8dz4nSjXam5AXUfHU635dHrjwfMbFXwKA8I
+3AVTvwyuwoA5D20LLGh8PKRltcB5YTCikuPF0tc5pW2scekwfCAqGsbRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSL1f+w4JTauIv3BfFGDEL5A0P5MB8GA1UdIwQY
MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt
Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi
LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwbCrTyW
7KZKm0E/TzDXrCQUi07x5pPQh6YiIDyph+yizxXCjm/fXYRPJWIPtVWwI6MEqpFR
NhTV/3DZMPAQeq7uvrP9/cM480IY1G3GR8Go6ev+gu6WOPyWHDogJR9bgM6ixq6u
O1u27/UBh9HF2T4AYqDK9CkUAIjD9DKdzjVbYboShs0RI+0rkFnFeJzLldFVpG+Y
ow9Ppz2a8EwuH9iAVbgKhijymk/oBlDReps0CdA7uDW27jqgJv8z/C2lBmoItfBP
fStlZBBLPggs2aMq8LSgr4Ti/dhBNqpWnOUK34CSuW4xKmvW23AD2OiIKOOCL3W/
CEOCZS46sDUsCA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:44 2026 by rpki-client