Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: h4hx46U3Tavwc1oWINrexfhEm+flHEexaWL4qJcG2LY=
Subject key identifier: 05:3C:9C:AC:EA:37:FF:08:B3:24:C7:92:86:7C:2E:06:83:F3:5F:89
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019D389C1517AB1800F849185E28884C3108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 164D
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa (hash: 9j0sAYqHnylk8DHpPYOuCBCLe7gHNXAvxTbqjQ3el4M=)
2: lNDMKb0aTV8SXs00e18A81qWIek.roa (hash: herRhJivtwm2jHvfa8VAdymtufMvK+b5YDKOa9xoFaM=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: bJYrEyoO2DUG8Nisqkjc/KXdiPanvqtNWCpu/4XKMxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:15:17:ab:18:00:f8:49:18:5e:28:88:4c:31:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=053c9cacea37ff08b324c792867c2e0683f35f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:f0:89:91:f3:7f:c0:55:b0:d3:26:24:f4:
a4:11:74:25:5e:80:98:af:c7:ea:cb:33:66:29:a6:
9d:c1:ee:90:87:58:ae:8d:72:78:91:23:85:04:d1:
50:b7:47:47:15:9f:09:fb:c1:f8:ef:b6:b3:ac:d5:
f0:d6:a7:74:c4:d8:76:59:62:8c:59:33:17:5f:ca:
ae:53:f5:1b:1b:c6:c3:2a:96:a0:86:fb:94:f0:b5:
5c:69:44:b3:15:00:f2:db:7d:19:e0:b0:aa:13:52:
af:fa:81:36:a2:48:31:32:24:a8:88:d0:1b:b2:8b:
e4:b1:1e:4d:87:50:7b:48:35:39:30:94:7c:ae:66:
66:e2:fd:f5:f9:f6:e7:d9:19:ce:b6:4a:44:51:ae:
08:3e:2e:1d:3f:c9:b3:49:45:07:db:ba:d0:e4:fd:
20:03:05:46:8d:aa:25:1f:f6:06:b0:89:61:e5:69:
9b:17:df:5b:9b:a7:f2:e6:8e:00:29:21:8e:a6:16:
cb:b9:4a:f8:d4:51:23:6d:6d:62:a0:11:c6:90:f1:
36:fd:59:19:fb:8a:b8:cf:57:58:af:2e:dd:49:9e:
85:1e:03:0d:2e:bc:7e:fe:c6:a8:f8:76:50:28:bc:
e9:86:3c:b8:af:65:ed:e8:ea:6a:e5:ed:10:47:ca:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:9C:AC:EA:37:FF:08:B3:24:C7:92:86:7C:2E:06:83:F3:5F:89
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:53:9d:61:75:cd:35:20:d5:5d:6f:6d:6b:8e:4a:6e:a1:97:
00:d2:79:b4:d0:22:3d:cc:a2:b6:c1:6a:f1:af:21:76:1b:5b:
af:25:54:f6:36:60:65:f8:52:34:57:bf:b7:3d:66:f5:03:4c:
5d:94:28:ff:02:dd:c0:33:fe:cc:fc:5e:19:d4:e9:77:a8:db:
72:1c:79:d7:c3:5f:83:cb:90:33:14:0b:ec:13:cf:2b:09:f6:
e3:b3:73:ac:de:d0:e2:74:11:03:82:e6:83:ec:43:97:7a:b8:
e0:1c:69:34:9e:6c:6c:5a:75:d3:f5:b1:32:7e:8b:21:7c:98:
92:1f:4f:9a:11:eb:bb:eb:ad:0f:de:38:c8:fc:3b:4f:56:11:
32:cb:02:10:63:04:ae:4a:ec:a4:a7:4c:54:b4:15:11:ed:62:
37:e1:13:8c:c9:42:ed:1c:69:54:7b:32:bc:4f:5a:e5:4f:a2:
17:b2:ba:f1:cf:12:8d:9c:a6:42:28:5d:bc:f3:dd:27:40:d6:
2e:91:e4:1c:02:84:1a:df:90:b3:5c:cb:03:f3:45:35:4a:37:
9e:b6:27:37:20:60:3c:cc:e0:2b:fe:6c:58:26:1a:8f:8e:05:
ac:9f:85:43:f9:71:74:88:0f:19:56:cc:1b:ca:28:1a:b8:2d:
ce:7f:df:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBUXqxgA+EkYXiiITDEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWUyZWZjZGMyMTNhYzViMWIwODc5ZDkyMmExNzhiODUw
ZjQ1MWYwHhcNMjYwMzI5MDgwMDQ2WhcNMjYwMzMwMDgwMDQ2WjAzMTEwLwYDVQQD
EygwNTNjOWNhY2VhMzdmZjA4YjMyNGM3OTI4NjdjMmUwNjgzZjM1Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTbwiZHzf8BVsNMmJPSkEXQlXoCY
r8fqyzNmKaadwe6Qh1iujXJ4kSOFBNFQt0dHFZ8J+8H477azrNXw1qd0xNh2WWKM
WTMXX8quU/UbG8bDKpaghvuU8LVcaUSzFQDy230Z4LCqE1Kv+oE2okgxMiSoiNAb
sovksR5Nh1B7SDU5MJR8rmZm4v31+fbn2RnOtkpEUa4IPi4dP8mzSUUH27rQ5P0g
AwVGjaolH/YGsIlh5WmbF99bm6fy5o4AKSGOphbLuUr41FEjbW1ioBHGkPE2/VkZ
+4q4z1dYry7dSZ6FHgMNLrx+/sao+HZQKLzphjy4r2Xt6Opq5e0QR8qt7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU8nKzqN/8IsyTHkoZ8LgaD81+JMB8GA1UdIwQY
MBaAFKyeLvzcITrFsbCHnZIqF4uFD0UfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEt
N2M3YmYyNzE3NWM1LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEtN2M3YmYyNzE3NWM1
LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1OdYXXN
NSDVXW9ta45KbqGXANJ5tNAiPcyitsFq8a8hdhtbryVU9jZgZfhSNFe/tz1m9QNM
XZQo/wLdwDP+zPxeGdTpd6jbchx518Nfg8uQMxQL7BPPKwn247NzrN7Q4nQRA4Lm
g+xDl3q44BxpNJ5sbFp10/WxMn6LIXyYkh9PmhHru+utD944yPw7T1YRMssCEGME
rkrspKdMVLQVEe1iN+ETjMlC7RxpVHsyvE9a5U+iF7K68c8SjZymQihdvPPdJ0DW
LpHkHAKEGt+Qs1zLA/NFNUo3nrYnNyBgPMzgK/5sWCYaj44FrJ+FQ/lxdIgPGVbM
G8ooGrgtzn/f5g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:47 2026 by rpki-client