Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: hsc/FrUBoA2QB2ir7TzydOjch6p6BDI20s1fKm7mLuc=
Subject key identifier: 24:C1:78:7D:BC:A1:AE:7F:AF:A1:BD:92:AD:9E:71:CB:C4:66:91:BE
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 019D371B657D3B51B071C29EBBC1FF34B287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:00:35 +0000
Manifest this update: Sun 29 Mar 2026 01:00:35 +0000
Manifest next update: Mon 30 Mar 2026 01:00:35 +0000
Files and hashes: 1: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: eYsARdoALlp96iZGK8lh5++SlUdQOn3mhJ69y+llw+o=)
2: wqo2yKaT_Oy-6AZMqxxn4GNk_cE.roa (hash: TLnFbPYehyFEASmdorMS1jkAMvulGnwe0TFiZO1diU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:65:7d:3b:51:b0:71:c2:9e:bb:c1:ff:34:b2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: Mar 29 01:00:35 2026 GMT
Not After : Mar 30 01:00:35 2026 GMT
Subject: CN=24c1787dbca1ae7fafa1bd92ad9e71cbc46691be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:d6:5e:97:0f:88:52:8b:87:c2:50:b1:92:
6d:2e:7a:c7:97:d3:c8:d6:8a:e4:ca:e2:df:95:ff:
ce:8b:4a:cc:62:3c:08:4b:68:6f:88:96:bc:74:a5:
c0:ac:99:ab:c2:a5:fe:a8:cf:f1:34:4c:6e:27:51:
a5:cd:d2:8a:19:08:17:6f:db:19:67:dd:d0:44:8d:
fb:25:42:11:17:08:12:21:48:b6:72:5f:8e:cc:67:
1f:e9:23:8b:fb:50:87:a8:22:3d:74:f3:5c:5f:78:
42:2c:4f:b4:1e:45:e6:70:0b:39:c9:28:91:14:74:
5c:c7:c8:e6:1b:0f:24:10:f5:12:86:bb:d5:e5:71:
a9:36:df:d4:03:2a:26:be:71:3d:02:b5:28:a4:9f:
6f:c7:db:2c:65:67:c6:4c:ec:f8:ee:df:46:ec:f1:
23:da:67:f2:20:bc:55:43:1f:7f:d1:11:23:27:ab:
5c:27:d1:b6:9c:43:05:44:96:6d:04:a8:53:32:15:
9b:f2:47:da:33:fb:87:be:ec:26:81:46:28:94:f6:
4d:2f:ef:2c:5a:b7:13:ab:ff:ed:96:bc:3f:69:b9:
e0:e3:c5:d9:1c:dd:30:b8:ec:34:fc:20:e1:54:0d:
be:85:0a:f7:50:58:96:64:97:8a:59:07:da:52:7a:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:78:7D:BC:A1:AE:7F:AF:A1:BD:92:AD:9E:71:CB:C4:66:91:BE
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bb:d2:81:14:b7:bd:74:5a:20:05:cc:79:3b:4f:f8:d3:22:
8b:cd:d7:a3:1e:70:31:eb:e0:72:12:f3:cf:dc:5b:31:dd:8b:
b3:42:9b:34:ce:23:e8:04:03:b5:c5:17:c7:bd:45:f1:ba:68:
90:12:ea:7c:a0:a8:1f:4b:03:0c:20:73:3a:f4:3c:be:48:a4:
2d:2e:ef:c9:84:68:c1:d3:03:2c:cc:00:c7:a1:cd:de:b4:7b:
0b:69:ab:2b:99:5e:57:d8:fb:80:c2:1c:3c:16:fe:52:07:0c:
9a:b0:01:21:ee:4a:bc:7e:db:22:02:83:cb:c7:b8:1e:0e:ad:
4a:8e:8d:91:4f:78:61:9f:fd:ec:ab:be:4f:fb:b7:eb:80:77:
bd:59:f9:d8:65:d1:1a:0d:6a:82:45:da:1a:90:8a:5f:f4:8d:
53:e1:2a:d8:8b:d2:32:ae:80:cd:6c:8f:4c:7e:cc:21:20:ec:
5a:0e:7c:d9:d6:8b:74:cf:cc:78:77:d4:8d:4c:c4:8c:db:79:
82:2e:95:02:06:94:b6:57:42:7c:ec:97:40:2a:12:66:17:3e:
d2:7b:19:f3:f2:b3:c4:42:f3:ea:d8:a6:e0:2e:2a:c2:a4:bc:
c1:a3:15:51:1e:08:8e:9e:57:45:82:49:9f:e7:66:03:4f:90:
ab:42:44:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G2V9O1GwccKeu8H/NLKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkY2U0ZGY2ODA0NDk4NWExNzdiMzAzMmYwMGZjNmZlMjI0
YWQ4YjMwHhcNMjYwMzI5MDEwMDM1WhcNMjYwMzMwMDEwMDM1WjAzMTEwLwYDVQQD
EygyNGMxNzg3ZGJjYTFhZTdmYWZhMWJkOTJhZDllNzFjYmM0NjY5MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yLWXpcPiFKLh8JQsZJtLnrHl9PI
1orkyuLflf/Oi0rMYjwIS2hviJa8dKXArJmrwqX+qM/xNExuJ1GlzdKKGQgXb9sZ
Z93QRI37JUIRFwgSIUi2cl+OzGcf6SOL+1CHqCI9dPNcX3hCLE+0HkXmcAs5ySiR
FHRcx8jmGw8kEPUShrvV5XGpNt/UAyomvnE9ArUopJ9vx9ssZWfGTOz47t9G7PEj
2mfyILxVQx9/0REjJ6tcJ9G2nEMFRJZtBKhTMhWb8kfaM/uHvuwmgUYolPZNL+8s
WrcTq//tlrw/abng48XZHN0wuOw0/CDhVA2+hQr3UFiWZJeKWQfaUnrvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTBeH28oa5/r6G9kq2eccvEZpG+MB8GA1UdIwQY
MBaAFI3OTfaARJhaF3swMvAPxv4iStizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjkt
MTZiMWQyZWU4OGE2LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjktMTZiMWQyZWU4OGE2
LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbvSgRS3
vXRaIAXMeTtP+NMii83Xox5wMevgchLzz9xbMd2Ls0KbNM4j6AQDtcUXx71F8bpo
kBLqfKCoH0sDDCBzOvQ8vkikLS7vyYRowdMDLMwAx6HN3rR7C2mrK5leV9j7gMIc
PBb+UgcMmrABIe5KvH7bIgKDy8e4Hg6tSo6NkU94YZ/97Ku+T/u364B3vVn52GXR
Gg1qgkXaGpCKX/SNU+Eq2IvSMq6AzWyPTH7MISDsWg582daLdM/MeHfUjUzEjNt5
gi6VAgaUtldCfOyXQCoSZhc+0nsZ8/KzxELz6tim4C4qwqS8waMVUR4Ijp5XRYJJ
n+dmA0+Qq0JEkA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:55 2026 by rpki-client