
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: 7ARvH2y3KcAQoFeGP2CPmrQrMt6a1wlXN6WRCAcoBuo=
Subject key identifier: 3D:DE:10:13:A8:8F:8C:84:CB:BB:98:E5:EB:B6:4F:56:7D:84:73:63
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019F1B319973C02238A0D150E4737F18C6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 05E3
Signing time: Wed 01 Jul 2026 01:01:03 +0000
Manifest this update: Wed 01 Jul 2026 01:01:03 +0000
Manifest next update: Thu 02 Jul 2026 01:01:03 +0000
Files and hashes: 1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
2: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: l6xfMfZwrtiy3RjEh9lz8GBSNAhG/nPO8xXeoCUjqgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:31:99:73:c0:22:38:a0:d1:50:e4:73:7f:18:c6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Jul 1 01:01:03 2026 GMT
Not After : Jul 2 01:01:03 2026 GMT
Subject: CN=3dde1013a88f8c84cbbb98e5ebb64f567d847363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:04:08:8d:58:2c:f9:3e:13:bb:01:c5:48:
f3:f0:52:35:ef:7b:3e:42:05:a6:f2:f0:98:17:6f:
1a:47:1a:52:73:ae:09:af:f7:59:c2:9f:00:07:8a:
a4:42:2a:21:69:fa:36:83:bb:bc:2d:ab:f9:d8:24:
85:ef:d8:62:55:e9:4e:da:30:de:7e:09:c9:be:eb:
14:22:4a:c6:d4:a2:a2:c2:e7:95:53:1d:5b:07:e7:
d5:c1:12:55:54:bf:f4:0d:68:b2:63:c8:10:8d:83:
07:ef:74:0f:4b:f5:ea:44:7c:10:12:f8:e7:05:10:
27:e3:3c:42:9c:4f:25:52:72:2d:bb:1d:57:6b:6e:
e5:be:f8:d5:42:e1:a3:ad:cb:b3:64:85:29:7e:5d:
c8:c2:b3:1b:dc:1e:80:90:74:08:b7:16:5c:33:b9:
09:c9:74:c9:52:bb:a7:2d:30:9c:a7:fc:95:b8:75:
2e:8e:38:49:e1:0a:7b:24:51:84:17:34:cc:92:6a:
df:8c:27:00:0c:5e:51:29:60:0d:32:24:ae:f2:11:
97:fc:11:1f:25:60:f9:18:ac:d7:6a:ce:c3:25:3e:
59:af:65:d2:68:09:7b:3a:a6:f8:4b:97:fe:e7:dd:
7a:9e:07:5e:e1:cf:92:28:66:6e:2e:1d:14:1c:9f:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DE:10:13:A8:8F:8C:84:CB:BB:98:E5:EB:B6:4F:56:7D:84:73:63
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:21:4a:cd:d0:d4:98:c5:7e:ca:c6:fc:d7:5a:a3:62:5c:ab:
db:d3:1e:ef:2d:28:5a:7f:b2:cd:e7:3a:96:0b:07:b0:9e:7c:
7b:41:b2:e6:6e:41:d9:ab:d8:20:c9:d8:47:37:72:2e:9a:de:
86:d1:a8:4a:72:18:3b:fb:bf:e5:0b:92:87:0f:f7:ab:eb:61:
88:31:79:9b:83:4c:9d:ef:0f:e1:34:e1:b3:19:5d:3d:70:43:
85:37:f7:31:8c:7c:f4:b2:50:9b:d3:2e:23:f0:78:72:db:5d:
24:26:f1:38:03:d4:1e:dc:9b:8d:0d:38:d0:ac:8b:ff:09:08:
a7:84:c5:e3:70:29:92:d2:94:47:61:67:61:14:29:ed:94:13:
18:29:99:15:5b:68:0e:54:f9:2d:58:39:fc:98:bb:d4:08:be:
48:a1:50:05:db:24:2b:ab:86:f5:57:d5:73:3e:db:c7:1c:d5:
b1:73:a1:73:ac:3c:b1:4d:da:bb:9e:63:99:1d:ff:cd:24:9c:
e0:08:cd:a5:ef:7a:da:76:65:11:0b:63:4e:98:22:74:d8:2a:
50:c9:d9:0a:f7:5c:88:57:36:45:bc:d6:17:0a:14:8d:c8:79:
de:6b:e5:fa:5c:09:18:48:21:70:dc:7e:d8:32:3a:8c:36:cd:
4d:07:de:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8bMZlzwCI4oNFQ5HN/GMbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj
ZjU1MjYwHhcNMjYwNzAxMDEwMTAzWhcNMjYwNzAyMDEwMTAzWjAzMTEwLwYDVQQD
EygzZGRlMTAxM2E4OGY4Yzg0Y2JiYjk4ZTVlYmI2NGY1NjdkODQ3MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PQECI1YLPk+E7sBxUjz8FI173s+
QgWm8vCYF28aRxpSc64Jr/dZwp8AB4qkQiohafo2g7u8Lav52CSF79hiVelO2jDe
fgnJvusUIkrG1KKiwueVUx1bB+fVwRJVVL/0DWiyY8gQjYMH73QPS/XqRHwQEvjn
BRAn4zxCnE8lUnItux1Xa27lvvjVQuGjrcuzZIUpfl3IwrMb3B6AkHQItxZcM7kJ
yXTJUrunLTCcp/yVuHUujjhJ4Qp7JFGEFzTMkmrfjCcADF5RKWANMiSu8hGX/BEf
JWD5GKzXas7DJT5Zr2XSaAl7Oqb4S5f+5916ngde4c+SKGZuLh0UHJ+iHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3eEBOoj4yEy7uY5eu2T1Z9hHNjMB8GA1UdIwQY
MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt
NDgyNTU1NDUyODMxLzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx
LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyFKzdDU
mMV+ysb811qjYlyr29Me7y0oWn+yzec6lgsHsJ58e0Gy5m5B2avYIMnYRzdyLpre
htGoSnIYO/u/5QuShw/3q+thiDF5m4NMne8P4TThsxldPXBDhTf3MYx89LJQm9Mu
I/B4cttdJCbxOAPUHtybjQ040KyL/wkIp4TF43ApktKUR2FnYRQp7ZQTGCmZFVto
DlT5LVg5/Ji71Ai+SKFQBdskK6uG9VfVcz7bxxzVsXOhc6w8sU3au55jmR3/zSSc
4AjNpe962nZlEQtjTpgidNgqUMnZCvdciFc2RbzWFwoUjch53mvl+lwJGEghcNx+
2DI6jDbNTQfebA==
-----END CERTIFICATE-----
Generated at Wed Jul 1 03:18:10 2026 by rpki-client