Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: aEIrR9QlFPvGAeBNyt32l7WFPkeDIasFSDR+2SYuA10=
Subject key identifier: 7B:F2:74:6A:AB:35:A5:7D:7D:3C:B5:DE:03:8E:E0:61:AA:4E:C3:CB
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 019D37C06B9CF3D335A660A5C781FE62A554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 1150
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: QU8JayzWOK5NLSuIb0OVeqfAY81pkERMiYPpkOr+h0Y=)
2: t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa (hash: j8FLow634/sFX5We1fU/Tl5tl/Iw6/b+Vn5Ia8rywE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6b:9c:f3:d3:35:a6:60:a5:c7:81:fe:62:a5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=7bf2746aab35a57d7d3cb5de038ee061aa4ec3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:25:4e:e9:4f:98:f3:59:07:aa:fc:57:4e:
d9:27:35:a6:b0:b3:50:e4:42:d1:ec:32:2f:76:c6:
e2:d8:0b:50:04:b4:a4:d9:4a:90:3a:cb:ae:12:08:
6a:46:00:24:e8:d3:7a:5b:bb:a2:b9:c9:59:94:97:
43:ce:ff:cf:c7:4e:c7:b0:c8:ba:86:d2:20:78:88:
ce:c2:9d:12:2a:3f:01:5a:92:0a:2c:bd:62:96:80:
21:40:47:8b:1a:e6:1a:27:e0:c5:72:e3:d2:60:d0:
b4:d3:39:1b:fe:67:63:4b:fd:4b:78:2e:17:25:ed:
00:c7:6f:07:56:01:7c:40:9e:1f:d7:6a:bf:86:a6:
ce:8a:57:56:be:70:c5:e7:48:c1:5e:26:59:4d:8b:
b5:a4:56:c3:db:83:e3:6b:00:f3:2e:7d:40:3f:b4:
d2:ca:1e:de:f4:98:42:eb:15:f4:5b:f0:79:e1:95:
43:a9:43:a8:57:ef:00:1f:70:5a:64:f7:c7:5e:86:
b3:b3:b9:f4:d2:af:d3:21:00:10:28:d8:a7:d8:2f:
de:f8:fb:d5:00:83:b2:2f:74:4e:1d:0e:84:49:12:
87:cf:46:8e:5f:70:7f:52:b3:2d:00:b5:1c:0e:1c:
3e:46:0c:56:08:65:c4:ca:f0:4f:51:f2:01:37:07:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:74:6A:AB:35:A5:7D:7D:3C:B5:DE:03:8E:E0:61:AA:4E:C3:CB
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f0:0e:e4:fb:7d:62:4f:96:92:f6:44:b5:11:ce:96:a5:ec:
99:fb:75:d8:99:a6:4d:6e:da:2e:9e:2e:41:28:94:3f:b5:6a:
e4:cc:a5:fe:ff:a2:cb:a8:1f:bd:a4:7a:3e:fc:9a:21:4a:23:
42:6c:83:e5:77:83:f0:bb:22:76:df:d0:bf:b6:ab:3d:bc:a5:
e4:26:d5:d3:35:e4:2a:d4:5e:2e:d4:83:f2:35:92:71:fa:1e:
cf:12:3f:95:71:b5:86:6c:0c:b7:0d:60:ff:de:34:1d:f2:f0:
38:0f:d0:c0:a6:6e:0d:3c:af:39:72:48:e9:41:6e:43:5c:67:
77:0b:db:af:8f:0b:63:1d:19:51:9c:b2:7f:02:c3:cb:43:7c:
df:d7:bb:a7:53:e0:bb:0b:d0:2e:e6:5a:8f:38:30:94:99:c3:
3e:1c:83:8f:73:dd:2f:97:bf:9f:2c:df:9f:54:b3:8c:9f:f3:
ff:81:39:47:a6:20:fb:78:99:e5:d8:87:cd:48:8a:10:c2:da:
35:2a:40:81:ae:9b:80:12:12:87:d3:2c:4c:c3:9b:9c:a3:76:
47:f6:21:5a:6f:a6:3f:a5:be:31:7a:c8:a2:0b:39:b9:4a:61:
92:78:67:af:d8:6a:9d:a5:da:ca:4e:08:03:37:32:7e:71:4f:
62:58:5b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wGuc89M1pmClx4H+YqVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmM0MjRjZmU5MjcwMzEwMGQ1MGEyODMyMjUzNzQ0ZGQ3
NTY0NTIwHhcNMjYwMzI5MDQwMDUwWhcNMjYwMzMwMDQwMDUwWjAzMTEwLwYDVQQD
Eyg3YmYyNzQ2YWFiMzVhNTdkN2QzY2I1ZGUwMzhlZTA2MWFhNGVjM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVclTulPmPNZB6r8V07ZJzWmsLNQ
5ELR7DIvdsbi2AtQBLSk2UqQOsuuEghqRgAk6NN6W7uiuclZlJdDzv/Px07HsMi6
htIgeIjOwp0SKj8BWpIKLL1iloAhQEeLGuYaJ+DFcuPSYNC00zkb/mdjS/1LeC4X
Je0Ax28HVgF8QJ4f12q/hqbOildWvnDF50jBXiZZTYu1pFbD24PjawDzLn1AP7TS
yh7e9JhC6xX0W/B54ZVDqUOoV+8AH3BaZPfHXoazs7n00q/TIQAQKNin2C/e+PvV
AIOyL3ROHQ6ESRKHz0aOX3B/UrMtALUcDhw+RgxWCGXEyvBPUfIBNwc0IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvydGqrNaV9fTy13gOO4GGqTsPLMB8GA1UdIwQY
MBaAFI9sQkz+knAxANUKKDIlN0TddWRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgt
MGNiMjE4ZTVlNzA3LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hZWI4NGEtN2U3NS00OGY1LWJhMzgtMGNiMjE4ZTVlNzA3
LzEvajJ4Q1RQNlNjREVBMVFvb01pVTNSTjExWkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvAO5Pt9
Yk+WkvZEtRHOlqXsmft12JmmTW7aLp4uQSiUP7Vq5Myl/v+iy6gfvaR6PvyaIUoj
QmyD5XeD8Lsidt/Qv7arPbyl5CbV0zXkKtReLtSD8jWScfoezxI/lXG1hmwMtw1g
/940HfLwOA/QwKZuDTyvOXJI6UFuQ1xndwvbr48LYx0ZUZyyfwLDy0N839e7p1Pg
uwvQLuZajzgwlJnDPhyDj3PdL5e/nyzfn1SzjJ/z/4E5R6Yg+3iZ5diHzUiKEMLa
NSpAga6bgBISh9MsTMObnKN2R/YhWm+mP6W+MXrIogs5uUphknhnr9hqnaXayk4I
AzcyfnFPYlhbTg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:48 2026 by rpki-client