Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: MK4m7FqRoVCAmFXeqKB+/hCHMW4CD5GlLoosLapVPpY=
Subject key identifier: 6E:4F:C2:89:07:0C:EE:B3:B8:DA:B4:08:1E:18:D5:1E:70:31:E6:3D
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019D3A1CB637C29225AD807AC377580B16DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 15:00:53 +0000
Manifest this update: Sun 29 Mar 2026 15:00:53 +0000
Manifest next update: Mon 30 Mar 2026 15:00:53 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: d2SWQ3pjJKqsae1Opdht5JdhZHhOIk5BTkiX1tf24J0=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b6:37:c2:92:25:ad:80:7a:c3:77:58:0b:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Mar 29 15:00:53 2026 GMT
Not After : Mar 30 15:00:53 2026 GMT
Subject: CN=6e4fc289070ceeb3b8dab4081e18d51e7031e63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:5f:3d:ec:3e:5e:77:77:96:40:5b:d2:6b:
64:5a:3e:3b:41:35:97:dd:8a:1a:ea:b1:c6:62:65:
cb:d4:98:37:a1:37:11:73:7c:20:b5:b8:a8:92:08:
f0:e0:19:38:1b:ff:84:5c:4a:21:ce:9c:cc:04:56:
75:28:20:fe:87:85:71:b1:6b:93:b3:e9:c7:61:26:
7e:c1:4c:0a:2b:f9:e2:81:7f:6b:d0:ed:ec:5f:62:
57:c5:c5:10:59:a3:98:fb:53:ac:5f:e8:bd:f2:26:
31:27:5c:9a:9b:1d:5c:1a:c2:1b:e8:0f:26:1f:1e:
02:fc:5e:3c:2f:3b:f4:24:5a:70:b3:37:f0:d3:89:
a4:ba:66:a3:53:fc:6b:ce:05:b3:5f:8b:4c:a6:48:
46:5e:bf:29:dc:19:e9:ff:9c:6d:b3:9b:3c:1d:5b:
5f:c0:51:0c:94:ae:26:1c:ca:1a:42:8d:f6:e4:24:
e8:86:b5:f6:4a:39:84:fe:04:ed:d6:8e:38:61:7e:
60:66:a9:4d:a0:61:26:17:29:28:74:c4:ef:5c:aa:
a8:67:d2:4b:72:e9:c6:9f:25:42:35:4f:0b:8d:5a:
ad:aa:36:54:ea:4c:43:25:10:82:6e:a6:d2:25:36:
5c:62:0b:9a:12:4b:44:99:1b:dd:34:99:34:29:f1:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4F:C2:89:07:0C:EE:B3:B8:DA:B4:08:1E:18:D5:1E:70:31:E6:3D
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:99:92:35:4b:f7:97:fb:de:6a:0b:9f:71:d4:36:43:45:6a:
60:d1:f4:c1:19:b7:b3:05:bb:31:24:ac:7e:f8:f9:ea:59:80:
bd:58:d0:c8:19:74:9d:55:24:06:e1:8c:24:aa:01:35:55:88:
14:cc:cc:7c:1c:10:ec:39:30:e4:1b:95:79:94:61:39:e8:b6:
20:f2:23:93:9b:4f:52:59:b1:80:03:3c:c6:c3:f1:cd:84:a4:
74:35:9a:c6:17:d8:02:e6:1e:d3:99:c5:1c:bd:2b:49:84:cc:
77:bc:77:db:81:4d:3b:49:31:c4:eb:0f:a1:e8:eb:d9:54:6c:
20:a4:8d:43:cb:f5:e3:61:ff:81:59:ea:25:b3:1f:36:a3:10:
60:75:29:2e:6c:d0:f8:f4:49:16:6a:1a:8a:55:04:1c:5e:7d:
32:d9:85:65:2d:57:3a:6a:4d:e3:26:03:c2:26:df:1f:1d:f8:
c9:a3:8d:b6:6e:e8:58:c8:19:14:e8:76:66:20:0e:79:14:17:
54:da:a1:46:d8:3b:cc:ff:79:a1:34:f1:06:55:83:a6:ae:5d:
02:e0:c5:41:87:11:b8:c1:b9:11:51:53:c7:a6:e8:af:71:1b:
13:4b:b0:44:fd:1a:f6:53:c2:a0:28:fd:f1:1b:04:b0:1e:f6:
f0:76:14:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HLY3wpIlrYB6w3dYCxbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlM2IwMzg1MjYwYWM2NmYyMWM0M2Y1YWI3OGJhYzY4MmU4
Y2U1NGYwHhcNMjYwMzI5MTUwMDUzWhcNMjYwMzMwMTUwMDUzWjAzMTEwLwYDVQQD
Eyg2ZTRmYzI4OTA3MGNlZWIzYjhkYWI0MDgxZTE4ZDUxZTcwMzFlNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqRfPew+Xnd3lkBb0mtkWj47QTWX
3Yoa6rHGYmXL1Jg3oTcRc3wgtbiokgjw4Bk4G/+EXEohzpzMBFZ1KCD+h4VxsWuT
s+nHYSZ+wUwKK/nigX9r0O3sX2JXxcUQWaOY+1OsX+i98iYxJ1yamx1cGsIb6A8m
Hx4C/F48Lzv0JFpwszfw04mkumajU/xrzgWzX4tMpkhGXr8p3Bnp/5xts5s8HVtf
wFEMlK4mHMoaQo325CTohrX2SjmE/gTt1o44YX5gZqlNoGEmFykodMTvXKqoZ9JL
cunGnyVCNU8LjVqtqjZU6kxDJRCCbqbSJTZcYguaEktEmRvdNJk0KfFx+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5PwokHDO6zuNq0CB4Y1R5wMeY9MB8GA1UdIwQY
MBaAFP47A4UmCsZvIcQ/WreLrGgujOVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjIt
NzUwMzNmOGY3MjEwLzEvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjItNzUwMzNmOGY3MjEw
LzEvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZmSNUv3
l/veagufcdQ2Q0VqYNH0wRm3swW7MSSsfvj56lmAvVjQyBl0nVUkBuGMJKoBNVWI
FMzMfBwQ7Dkw5BuVeZRhOei2IPIjk5tPUlmxgAM8xsPxzYSkdDWaxhfYAuYe05nF
HL0rSYTMd7x324FNO0kxxOsPoejr2VRsIKSNQ8v142H/gVnqJbMfNqMQYHUpLmzQ
+PRJFmoailUEHF59MtmFZS1XOmpN4yYDwibfHx34yaONtm7oWMgZFOh2ZiAOeRQX
VNqhRtg7zP95oTTxBlWDpq5dAuDFQYcRuMG5EVFTx6bor3EbE0uwRP0a9lPCoCj9
8RsEsB728HYUhg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:44 2026 by rpki-client