Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: Qx2fF84sG3Q61QILew1t21ZHo7ZRBM2+ZBv+P3MU458=
Subject key identifier: 14:78:5B:FB:3C:55:CF:85:C2:9C:82:7E:97:A3:28:EF:E1:2B:72:39
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019CC93EEEDF9B5D602DA9BA021925CCA35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 16B6
Signing time: Sat 07 Mar 2026 17:01:10 +0000
Manifest this update: Sat 07 Mar 2026 17:01:10 +0000
Manifest next update: Sun 08 Mar 2026 17:01:10 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: 9F4MX3j2DT0zCKB0y+3qW5BN4lDDE423lAXUbEgCdlE=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:ee:df:9b:5d:60:2d:a9:ba:02:19:25:cc:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Mar 7 17:01:10 2026 GMT
Not After : Mar 8 17:01:10 2026 GMT
Subject: CN=14785bfb3c55cf85c29c827e97a328efe12b7239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:0b:47:a8:e4:87:b8:51:5e:1f:f3:ef:75:
17:9e:f9:07:f4:9c:26:e3:72:1b:03:7a:0b:0b:bd:
ab:f8:2e:79:2d:35:94:dc:ae:06:b1:2d:a5:a2:90:
ec:14:56:c0:2d:3f:6e:c6:61:86:8e:c7:4d:7d:02:
d7:0f:a6:1e:e5:2a:32:0a:9e:88:05:bf:76:c5:55:
b6:be:5f:3b:d8:66:a6:c9:13:c0:42:31:8c:c6:75:
d0:97:69:fb:e1:b2:1f:69:0e:fb:c8:fb:9e:f6:24:
d8:f0:93:8e:92:0c:5c:d5:09:f1:ae:37:5c:5b:71:
3f:2f:ef:8c:71:d8:e2:d9:da:e9:05:26:5a:6b:d3:
88:84:8d:2f:c8:4e:8e:f0:ef:d4:f1:c1:5a:90:d6:
0b:ca:af:c7:94:e7:aa:b9:94:86:6c:2a:e1:c3:4a:
8c:a5:0b:72:cd:40:52:32:94:6f:4f:a4:55:c6:62:
e3:3a:99:34:16:15:81:38:3f:2e:f8:a5:d7:d5:38:
7c:56:fe:a5:0a:f1:a5:9f:98:d0:29:6e:fb:f7:2e:
1d:24:25:4b:25:85:93:f9:b6:3c:e7:66:86:c3:72:
80:4e:6b:5e:25:fd:d2:ad:62:7e:92:a9:74:d3:a1:
19:e7:ee:1a:1f:bd:3d:d4:b6:d3:62:fc:43:14:54:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:5B:FB:3C:55:CF:85:C2:9C:82:7E:97:A3:28:EF:E1:2B:72:39
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e9:bb:d5:f8:0a:b4:b6:07:ae:44:00:e7:b6:01:0a:2c:3d:
72:67:f0:73:87:bb:fd:2e:d6:cb:98:df:b6:c7:ce:89:c8:3f:
91:0b:51:96:8f:9f:cb:fc:0c:a7:72:4c:35:a7:c3:82:c2:d2:
cf:2c:b5:f6:b7:40:41:25:db:b0:0a:98:bf:96:20:2e:a2:a3:
5c:dd:ef:1e:2b:27:08:68:b2:28:e9:cd:84:4c:98:57:c9:5e:
7c:7d:ba:6b:30:c1:0a:63:1a:f4:78:12:f9:b7:0b:f1:c8:00:
b9:b9:49:74:ba:ff:e8:56:38:89:ff:07:4e:e9:50:4f:4e:0e:
ce:26:ec:33:d1:ab:1d:44:ff:57:c7:48:76:05:28:51:95:ba:
9a:eb:35:a0:1d:55:94:11:82:58:91:65:ad:39:da:3f:9e:e8:
4d:06:51:f0:48:46:f0:a0:ff:2d:cb:cf:3f:94:75:db:1b:d8:
9f:96:13:7d:40:30:bc:21:7f:89:b0:e6:49:49:c4:28:30:05:
53:de:28:b3:2f:b3:5a:25:d4:83:21:4e:9d:16:77:dd:49:d6:
dc:c3:b8:30:4f:e4:5a:5a:e9:28:b6:85:3d:f4:4c:53:be:ec:
e0:3f:08:95:9d:e8:c3:8b:65:35:3f:7a:64:e7:d5:3f:a8:90:
8f:e6:af:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJPu7fm11gLam6AhklzKNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGQ5MWNmYTBhNmRiOWJmZDkxNTRhNDQxODU4ZTAwZTM4
YmRiZDYwHhcNMjYwMzA3MTcwMTEwWhcNMjYwMzA4MTcwMTEwWjAzMTEwLwYDVQQD
EygxNDc4NWJmYjNjNTVjZjg1YzI5YzgyN2U5N2EzMjhlZmUxMmI3MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEkLR6jkh7hRXh/z73UXnvkH9Jwm
43IbA3oLC72r+C55LTWU3K4GsS2lopDsFFbALT9uxmGGjsdNfQLXD6Ye5SoyCp6I
Bb92xVW2vl872GamyRPAQjGMxnXQl2n74bIfaQ77yPue9iTY8JOOkgxc1Qnxrjdc
W3E/L++Mcdji2drpBSZaa9OIhI0vyE6O8O/U8cFakNYLyq/HlOequZSGbCrhw0qM
pQtyzUBSMpRvT6RVxmLjOpk0FhWBOD8u+KXX1Th8Vv6lCvGln5jQKW779y4dJCVL
JYWT+bY852aGw3KATmteJf3SrWJ+kql006EZ5+4aH7091LbTYvxDFFSuZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR4W/s8Vc+FwpyCfpejKO/hK3I5MB8GA1UdIwQY
MBaAFCdNkc+gptub/ZFUpEGFjgDji9vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYt
OTc4MjM0YzNiYjcwLzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYtOTc4MjM0YzNiYjcw
LzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQum71fgK
tLYHrkQA57YBCiw9cmfwc4e7/S7Wy5jftsfOicg/kQtRlo+fy/wMp3JMNafDgsLS
zyy19rdAQSXbsAqYv5YgLqKjXN3vHisnCGiyKOnNhEyYV8lefH26azDBCmMa9HgS
+bcL8cgAublJdLr/6FY4if8HTulQT04OzibsM9GrHUT/V8dIdgUoUZW6mus1oB1V
lBGCWJFlrTnaP57oTQZR8EhG8KD/LcvPP5R12xvYn5YTfUAwvCF/ibDmSUnEKDAF
U94osy+zWiXUgyFOnRZ33UnW3MO4ME/kWlrpKLaFPfRMU77s4D8IlZ3ow4tlNT96
ZOfVP6iQj+avLQ==
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:13:06 2026 by rpki-client