Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: Hz6S5wa5Hi4hfPczMS94Y7Gzdov1ah7V7QRIronTcqk=
Subject key identifier: 92:02:93:FC:27:8F:31:6E:69:94:42:E9:13:EA:B4:43:F7:9C:35:90
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019D39E56831EE64C4DCD45194D850210338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:28 +0000
Manifest this update: Sun 29 Mar 2026 14:00:28 +0000
Manifest next update: Mon 30 Mar 2026 14:00:28 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: TrDDUll5463V9RAFvVWDPiGa+aCsbKgn0cjL6GSr87E=)
2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:68:31:ee:64:c4:dc:d4:51:94:d8:50:21:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Mar 29 14:00:28 2026 GMT
Not After : Mar 30 14:00:28 2026 GMT
Subject: CN=920293fc278f316e699442e913eab443f79c3590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:b7:a4:6f:88:04:21:71:13:36:3c:42:cc:
7c:88:b3:d4:9d:16:a9:51:25:ef:ab:2b:87:6d:8b:
9e:65:3f:73:bf:c1:b8:40:e2:c7:09:ba:70:9b:5f:
73:d0:06:9c:2c:42:cf:5e:ed:82:38:bb:ce:96:37:
97:2f:e4:67:ec:66:c1:6c:33:bc:ee:80:24:26:5c:
cd:b0:07:50:79:28:1c:bd:38:cb:82:88:b4:aa:3a:
5e:7d:c8:a6:4e:87:0f:17:ee:45:7a:ea:79:09:e0:
7a:24:2a:ec:0e:16:8e:67:5b:58:68:db:c5:84:f6:
3c:4a:c9:74:57:dd:27:93:9e:ec:43:f2:2b:e5:af:
46:09:0b:2c:2b:65:e8:d3:9c:b6:a3:74:38:f0:50:
8a:da:81:fc:4f:32:d3:bc:4f:25:a8:af:f9:91:99:
bf:f3:41:48:b1:a6:6a:4d:3f:96:e8:53:74:c0:af:
ba:22:de:7b:77:e1:01:a6:21:f9:fc:ca:54:84:b2:
4f:28:d6:d5:30:4b:b8:16:10:c1:63:9e:ae:8a:f4:
84:4b:c2:08:f9:4a:ac:ad:94:75:70:67:3c:8d:79:
f1:90:7a:52:ba:c4:d9:31:82:04:66:b0:41:a9:2c:
e5:25:84:05:fb:db:b4:ef:c7:e7:8d:ad:02:51:5a:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:93:FC:27:8F:31:6E:69:94:42:E9:13:EA:B4:43:F7:9C:35:90
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:be:27:bb:d5:02:42:96:18:5a:72:ef:3e:9c:09:4b:3a:ab:
02:b1:aa:cb:57:a5:31:cf:26:be:55:fd:a7:ec:c5:a2:ef:24:
2f:3c:c8:b9:bf:7b:f2:82:5f:ed:19:26:a2:74:23:a1:c8:20:
5c:7c:bb:e1:3e:25:b6:43:34:1c:0a:99:59:da:9b:9c:0a:3c:
4b:3d:9e:da:08:d0:ce:23:33:28:b2:79:6f:10:65:9b:d5:e5:
41:17:16:f0:e6:c9:5e:c5:cf:1d:37:bb:28:83:30:fa:13:c7:
5c:fc:70:eb:60:67:48:54:ca:04:97:18:9a:04:1e:58:54:a5:
a5:f3:74:68:1f:86:b6:38:87:44:34:d3:f9:a8:a8:b2:a6:f8:
a5:a5:ec:1c:f4:0b:36:79:fc:14:90:71:30:3a:fe:93:17:68:
0a:6b:9f:92:2b:2f:b4:ff:5c:f3:61:31:2f:63:7e:a5:44:ef:
39:07:8a:d6:1d:9b:9d:3e:29:cd:b9:11:d6:ca:b3:1e:dd:23:
57:73:22:57:f0:8d:34:f3:b2:da:7a:79:01:79:26:8c:72:d8:
be:e6:ae:c8:ea:04:27:b4:41:39:ef:0b:ec:41:f8:80:af:c1:
83:17:98:a7:cc:a0:06:e2:4c:d2:92:a3:5d:ee:be:1e:f7:84:
a3:66:b5:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055Wgx7mTE3NRRlNhQIQM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MWQ4NDM2OWMxNTUwNTVhZDliZDViNDcxNTU4ZDNmYTdi
MTA5ZDIwHhcNMjYwMzI5MTQwMDI4WhcNMjYwMzMwMTQwMDI4WjAzMTEwLwYDVQQD
Eyg5MjAyOTNmYzI3OGYzMTZlNjk5NDQyZTkxM2VhYjQ0M2Y3OWMzNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWa3pG+IBCFxEzY8Qsx8iLPUnRap
USXvqyuHbYueZT9zv8G4QOLHCbpwm19z0AacLELPXu2COLvOljeXL+Rn7GbBbDO8
7oAkJlzNsAdQeSgcvTjLgoi0qjpefcimTocPF+5Feup5CeB6JCrsDhaOZ1tYaNvF
hPY8Ssl0V90nk57sQ/Ir5a9GCQssK2Xo05y2o3Q48FCK2oH8TzLTvE8lqK/5kZm/
80FIsaZqTT+W6FN0wK+6It57d+EBpiH5/MpUhLJPKNbVMEu4FhDBY56uivSES8II
+UqsrZR1cGc8jXnxkHpSusTZMYIEZrBBqSzlJYQF+9u078fnja0CUVp6twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJICk/wnjzFuaZRC6RPqtEP3nDWQMB8GA1UdIwQY
MBaAFCcdhDacFVBVrZvVtHFVjT+nsQnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjIt
OTE0OTRhYzNiNmQ1LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjItOTE0OTRhYzNiNmQ1
LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvb4nu9UC
QpYYWnLvPpwJSzqrArGqy1elMc8mvlX9p+zFou8kLzzIub978oJf7RkmonQjocgg
XHy74T4ltkM0HAqZWdqbnAo8Sz2e2gjQziMzKLJ5bxBlm9XlQRcW8ObJXsXPHTe7
KIMw+hPHXPxw62BnSFTKBJcYmgQeWFSlpfN0aB+GtjiHRDTT+aiosqb4paXsHPQL
Nnn8FJBxMDr+kxdoCmufkisvtP9c82ExL2N+pUTvOQeK1h2bnT4pzbkR1sqzHt0j
V3MiV/CNNPOy2np5AXkmjHLYvuauyOoEJ7RBOe8L7EH4gK/BgxeYp8ygBuJM0pKj
Xe6+HveEo2a1pA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:10 2026 by rpki-client