
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier: FxMuJx/3RNda73Tlz1PHwCiZXS42FEZT4lDikjGFGKg=
Subject key identifier: 06:52:CA:29:A7:04:1B:2C:37:99:FD:E8:30:0C:49:58:8D:32:84:31
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial: 019D36E43F6E9B3ABD364D35B6AA39855259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number: 0E7A
Signing time: Sun 29 Mar 2026 00:00:21 +0000
Manifest this update: Sun 29 Mar 2026 00:00:21 +0000
Manifest next update: Mon 30 Mar 2026 00:00:21 +0000
Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: ZZGXHwRZKRFbzbzDGrUdsExCRfPYZ0OuukWz8iE6ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:3f:6e:9b:3a:bd:36:4d:35:b6:aa:39:85:52:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Validity
Not Before: Mar 29 00:00:21 2026 GMT
Not After : Mar 30 00:00:21 2026 GMT
Subject: CN=0652ca29a7041b2c3799fde8300c49588d328431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:81:d8:04:18:8c:32:52:55:e0:d5:7e:1f:
20:18:7a:4d:52:77:c4:2e:5b:33:b0:38:9f:b6:7b:
25:22:1d:74:bb:a9:6a:b5:35:f6:63:be:39:fe:c5:
d4:7b:3b:8d:ca:af:ef:08:42:1e:55:d3:5f:3b:22:
b1:ef:a4:55:57:1a:da:b4:17:63:25:ba:71:e0:2d:
22:48:4c:d3:74:40:ec:e9:2b:33:e5:a9:02:f1:0c:
96:c8:4d:55:d5:f1:d1:6e:23:a3:59:71:6b:60:29:
d1:2c:5a:91:39:e4:b7:6e:4c:ac:15:8e:5c:0c:6e:
18:b0:44:47:3a:9c:4f:24:70:b6:d3:6c:f8:ea:ff:
33:88:b3:ae:f2:81:5b:61:ab:e5:02:7a:ed:45:46:
a4:d6:8b:1f:9e:4a:26:1a:82:b9:68:69:c1:b3:23:
0c:32:b3:90:ea:99:b8:2d:31:6e:41:73:97:fe:f5:
00:03:54:9f:d1:68:82:8a:64:8d:a0:26:0d:8e:3b:
5a:4c:25:2b:25:b2:64:23:f3:3c:4b:ac:4f:02:f5:
12:78:68:fe:ed:4a:e8:1c:38:39:a2:b5:95:e4:f7:
5b:14:c8:a8:14:f5:4f:e6:85:c4:d9:b9:48:87:8a:
a8:89:66:61:bd:59:35:d0:0a:89:a9:ef:fd:9a:5f:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:52:CA:29:A7:04:1B:2C:37:99:FD:E8:30:0C:49:58:8D:32:84:31
X509v3 Authority Key Identifier:
keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e0:c4:30:8c:96:c5:c4:9a:14:a7:dd:ee:57:b3:b5:ff:2b:
e7:a5:68:58:86:6b:1f:36:96:b6:85:16:37:51:e2:0c:85:63:
cb:f9:37:db:a5:2a:d9:02:1e:34:50:38:0a:a9:e0:f0:1a:65:
7e:4d:a0:ba:ed:8b:e5:7f:ae:42:8d:33:75:e5:d1:c5:98:80:
a5:58:8a:f4:33:a9:9f:87:28:50:a5:e5:73:70:4c:84:48:12:
6f:73:8b:21:eb:d0:9b:64:c2:91:23:f6:4b:fd:c7:a8:ce:25:
d6:ba:0c:8f:34:ca:d9:af:af:b4:87:d5:1d:cd:32:4e:8d:de:
b4:ef:0a:9f:07:f4:47:d9:8b:7b:bc:13:9c:06:a1:13:f6:0f:
7d:d3:34:80:14:e3:13:08:54:3d:2c:f7:09:5c:02:72:1c:d4:
11:cd:62:0c:52:47:64:46:f1:44:f0:eb:b4:29:ed:db:89:3d:
81:11:b8:6c:8e:30:d5:85:bf:1b:91:d3:af:64:47:c9:1a:db:
46:9a:7a:f4:fe:ef:86:d4:5a:0b:46:f6:67:0a:9a:86:ee:b2:
c3:db:fe:74:9d:41:9e:86:01:ff:1f:a1:20:cf:3a:f3:59:33:
10:e6:48:95:7f:1c:62:04:92:22:99:ee:1e:21:37:99:e2:82:
8f:19:73:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ025D9umzq9Nk01tqo5hVJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDRjNjE1ZTBkYjBjNWI5OGE4MGIyNWI1MmQ4OTMyZGJm
ZDA1ZGYwHhcNMjYwMzI5MDAwMDIxWhcNMjYwMzMwMDAwMDIxWjAzMTEwLwYDVQQD
EygwNjUyY2EyOWE3MDQxYjJjMzc5OWZkZTgzMDBjNDk1ODhkMzI4NDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOmB2AQYjDJSVeDVfh8gGHpNUnfE
LlszsDiftnslIh10u6lqtTX2Y745/sXUezuNyq/vCEIeVdNfOyKx76RVVxratBdj
Jbpx4C0iSEzTdEDs6Ssz5akC8QyWyE1V1fHRbiOjWXFrYCnRLFqROeS3bkysFY5c
DG4YsERHOpxPJHC202z46v8ziLOu8oFbYavlAnrtRUak1osfnkomGoK5aGnBsyMM
MrOQ6pm4LTFuQXOX/vUAA1Sf0WiCimSNoCYNjjtaTCUrJbJkI/M8S6xPAvUSeGj+
7UroHDg5orWV5PdbFMioFPVP5oXE2blIh4qoiWZhvVk10AqJqe/9ml8E1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZSyimnBBssN5n96DAMSViNMoQxMB8GA1UdIwQY
MBaAFI8ExhXg2wxbmKgLJbUtiTLb/QXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgt
ZjJiMGIyN2ExY2I2LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgtZjJiMGIyN2ExY2I2
LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+DEMIyW
xcSaFKfd7leztf8r56VoWIZrHzaWtoUWN1HiDIVjy/k326Uq2QIeNFA4Cqng8Bpl
fk2guu2L5X+uQo0zdeXRxZiApViK9DOpn4coUKXlc3BMhEgSb3OLIevQm2TCkSP2
S/3HqM4l1roMjzTK2a+vtIfVHc0yTo3etO8Knwf0R9mLe7wTnAahE/YPfdM0gBTj
EwhUPSz3CVwCchzUEc1iDFJHZEbxRPDrtCnt24k9gRG4bI4w1YW/G5HTr2RHyRrb
Rpp69P7vhtRaC0b2Zwqahu6yw9v+dJ1BnoYB/x+hIM8681kzEOZIlX8cYgSSIpnu
HiE3meKCjxlzww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:47 2026 by rpki-client