Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: eQcy8UA5IXQyITpWxxZ/4m6yUj83LxxBfeMlDXe2PDM=
Subject key identifier: 8B:84:2F:73:35:8E:24:01:DD:41:C8:2D:68:6D:11:96:8B:F7:FA:C0
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019D39412B0FCC5D0A8AE27A28E139DD4133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 15D1
Signing time: Sun 29 Mar 2026 11:01:05 +0000
Manifest this update: Sun 29 Mar 2026 11:01:05 +0000
Manifest next update: Mon 30 Mar 2026 11:01:05 +0000
Files and hashes: 1: 9cLaCRMmkUSsyxFDOIgTHYqGjrA.roa (hash: M8D9X9HUQkQdMWCylk5MMocwUSM9A6MJTfk46/lEGqw=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: O+5d432O/Qb0qBc/k+ICWHSHLFx0yXZcQu4iFTi5B68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2b:0f:cc:5d:0a:8a:e2:7a:28:e1:39:dd:41:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Mar 29 11:01:05 2026 GMT
Not After : Mar 30 11:01:05 2026 GMT
Subject: CN=8b842f73358e2401dd41c82d686d11968bf7fac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:9f:15:71:f4:52:96:5e:15:56:6a:a0:8d:
a1:29:41:b1:33:48:ed:e1:af:fc:78:5c:bf:ba:af:
38:30:5e:56:bb:48:ef:c1:fd:a1:09:af:b0:a6:69:
ee:eb:9b:c9:ae:ed:a5:44:48:72:b4:0d:b0:12:01:
b3:6a:38:2a:cd:97:77:e3:ea:35:b9:d5:26:4c:68:
4f:ef:2c:ed:bc:55:27:00:cb:db:d1:ff:6e:f5:64:
36:1a:26:51:28:2b:5c:54:80:b2:e4:bf:f5:55:85:
e6:3e:8b:45:40:d7:bd:c6:71:54:1e:c8:8b:1e:28:
87:8c:fa:aa:46:de:f9:2a:ea:5f:37:d2:8d:6c:da:
7f:f2:09:45:bc:11:07:43:ba:a7:f0:27:1f:aa:68:
26:50:8b:f7:95:61:24:af:dc:18:08:97:33:64:07:
f8:c3:5d:61:79:91:04:a8:51:59:34:2e:a2:e7:9c:
fd:3c:14:f4:1f:95:06:52:e1:c5:e3:a7:2b:89:c4:
c2:84:d5:1a:82:fe:36:07:e0:a3:3f:ab:93:60:b9:
bd:fd:48:05:b7:37:23:c0:aa:d3:30:29:ff:3f:8b:
92:ad:32:e1:61:b0:c9:f8:98:fb:0c:16:f3:f5:f3:
5e:16:92:fa:f8:78:7e:fc:0a:ff:92:7f:b1:77:34:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:2F:73:35:8E:24:01:DD:41:C8:2D:68:6D:11:96:8B:F7:FA:C0
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a0:38:44:f9:b7:6d:e1:44:83:0b:c1:0f:e9:f5:01:5c:f5:
e2:9c:fa:4c:3c:6d:d3:25:23:ab:fc:44:f7:e0:04:de:68:6f:
38:48:4d:70:63:41:5f:c3:2d:18:17:df:c8:ed:74:15:20:e3:
4e:ea:24:a3:bf:9c:8b:72:07:2a:c5:50:02:6e:48:3b:69:e0:
6b:3e:25:49:68:0d:33:81:62:23:6f:7e:c7:bc:fe:ca:00:eb:
4b:8d:91:dc:f3:86:9f:4f:ed:46:d0:47:f2:2c:a8:ad:79:71:
15:4a:db:60:22:99:79:98:92:18:43:83:32:72:f1:fc:64:6b:
13:c8:f4:bb:58:a6:b0:8d:b7:54:f8:9a:db:5e:87:78:75:cc:
9a:c5:68:cf:11:13:e0:70:cf:b4:3d:77:fe:04:64:20:c0:f0:
4e:b2:e6:fb:c0:ba:26:3b:69:92:fa:a0:52:5b:9d:25:de:5f:
fb:a3:24:75:5b:fd:dd:b5:73:5a:5e:d4:a0:e0:74:85:4d:93:
58:bb:e4:90:dd:c7:f7:88:90:12:fc:36:73:bc:7c:2e:ad:b6:
3a:37:0a:4d:05:47:3f:7f:24:0a:d4:45:34:8f:e9:d2:92:53:
07:6e:ff:29:f9:6c:a9:e3:37:dd:5d:0b:0d:91:7d:4d:eb:4a:
81:9b:e9:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QSsPzF0KiuJ6KOE53UEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2
M2MwYTkwHhcNMjYwMzI5MTEwMTA1WhcNMjYwMzMwMTEwMTA1WjAzMTEwLwYDVQQD
Eyg4Yjg0MmY3MzM1OGUyNDAxZGQ0MWM4MmQ2ODZkMTE5NjhiZjdmYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSifFXH0UpZeFVZqoI2hKUGxM0jt
4a/8eFy/uq84MF5Wu0jvwf2hCa+wpmnu65vJru2lREhytA2wEgGzajgqzZd34+o1
udUmTGhP7yztvFUnAMvb0f9u9WQ2GiZRKCtcVICy5L/1VYXmPotFQNe9xnFUHsiL
HiiHjPqqRt75KupfN9KNbNp/8glFvBEHQ7qn8CcfqmgmUIv3lWEkr9wYCJczZAf4
w11heZEEqFFZNC6i55z9PBT0H5UGUuHF46cricTChNUagv42B+CjP6uTYLm9/UgF
tzcjwKrTMCn/P4uSrTLhYbDJ+Jj7DBbz9fNeFpL6+Hh+/Ar/kn+xdzQ54wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuEL3M1jiQB3UHILWhtEZaL9/rAMB8GA1UdIwQY
MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt
OGFjYmZlYTJlY2ZhLzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh
LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKA4RPm3
beFEgwvBD+n1AVz14pz6TDxt0yUjq/xE9+AE3mhvOEhNcGNBX8MtGBffyO10FSDj
Tuoko7+ci3IHKsVQAm5IO2ngaz4lSWgNM4FiI29+x7z+ygDrS42R3POGn0/tRtBH
8iyorXlxFUrbYCKZeZiSGEODMnLx/GRrE8j0u1imsI23VPia216HeHXMmsVozxET
4HDPtD13/gRkIMDwTrLm+8C6JjtpkvqgUludJd5f+6MkdVv93bVzWl7UoOB0hU2T
WLvkkN3H94iQEvw2c7x8Lq22OjcKTQVHP38kCtRFNI/p0pJTB27/KflsqeM33V0L
DZF9TetKgZvphg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:18 2026 by rpki-client