Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier: bLwji8XeoZx5gQ4q0+4HiKXHhpMfmOcaqOFAviEZOzI=
Subject key identifier: E9:D3:16:52:AA:DF:3A:38:81:FA:A6:BF:53:C5:DE:27:66:E7:96:D3
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial: 019D38D3D9495AA57FB69016514F5D15E5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 09:01:40 +0000
Manifest this update: Sun 29 Mar 2026 09:01:40 +0000
Manifest next update: Mon 30 Mar 2026 09:01:40 +0000
Files and hashes: 1: 9h49lJWwF1PdYlUFcV2QXMYgM9o.roa (hash: GCIawhjOg95GqWKJazHKfaZHhHNmcBK7aJ3Mw2UEcAc=)
2: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: FfwxUC0fg5CGhFZkPjQsldaRdta0Lqz2E8snuPIhgrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d9:49:5a:a5:7f:b6:90:16:51:4f:5d:15:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Validity
Not Before: Mar 29 09:01:40 2026 GMT
Not After : Mar 30 09:01:40 2026 GMT
Subject: CN=e9d31652aadf3a3881faa6bf53c5de2766e796d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:40:5c:f3:a2:6b:c9:db:cb:b4:3f:c0:74:
67:2b:29:43:d8:68:61:01:19:58:12:f4:e6:e3:0c:
ad:12:75:e9:ca:1b:92:89:4b:29:57:ad:e5:17:08:
03:15:30:40:2f:46:88:35:a2:f0:cc:fa:d4:32:a3:
af:b1:5e:b6:5c:0d:b0:29:82:fc:a0:28:4d:33:c5:
c6:af:30:ea:12:cd:7a:c4:38:32:ab:7a:be:be:9f:
7f:d6:29:2e:9d:87:68:6e:98:e5:57:d0:65:b8:cd:
4b:ab:22:f6:89:15:00:55:f3:ca:c0:fd:d2:31:13:
59:ca:24:19:13:4d:ba:d7:ef:62:b2:13:d9:6a:4a:
fe:de:f2:c0:3e:58:b7:bd:b2:c0:af:85:17:72:e3:
1e:9e:de:10:5f:6d:9a:43:a6:e1:f1:00:2b:37:a3:
cd:6b:f8:99:60:6b:ea:51:5a:8f:c5:ca:cf:fc:ec:
2e:61:e0:a1:62:9c:d0:b1:3c:07:f5:92:ab:22:25:
f9:51:88:66:cb:18:55:9e:53:41:15:c7:c8:3b:be:
ff:88:a2:e0:1f:45:0d:28:47:ce:9d:d1:3f:db:e6:
4c:a5:29:67:3f:7b:af:02:ae:d8:69:d7:3f:43:b1:
e8:08:cd:8e:ae:4b:5c:2c:02:80:57:e6:bc:20:cb:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D3:16:52:AA:DF:3A:38:81:FA:A6:BF:53:C5:DE:27:66:E7:96:D3
X509v3 Authority Key Identifier:
keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3b:9c:07:6a:98:a1:f4:6b:6d:f1:04:1f:ba:76:fa:4e:6f:
59:0a:d8:ea:06:df:cf:fd:54:87:6e:bf:b7:4c:cf:53:ea:23:
2d:b4:c8:db:3d:b2:d1:0b:b1:fd:f3:17:2d:1a:fc:76:3e:b6:
33:74:ac:47:85:f7:55:a4:8b:3e:7d:21:52:e6:86:18:45:87:
0d:f6:32:3b:fd:89:9d:e0:75:5b:b4:df:72:c8:48:73:d8:a8:
e7:9e:7a:f3:6b:fe:f3:65:c2:c8:73:53:c5:f1:54:f3:04:fd:
29:3c:a0:c8:4c:a3:0c:ae:08:d4:e4:e0:ca:2a:cc:0a:dd:25:
1f:97:37:77:33:f1:24:15:f0:0a:de:74:75:8d:46:bc:c9:ad:
1a:29:4a:dc:92:b0:f0:3f:39:22:db:d0:49:b0:12:fc:92:a1:
0d:81:5d:d8:53:b9:4b:10:43:32:9f:9a:1e:7b:b6:4e:a7:7d:
73:ee:32:4c:9b:0c:6b:5e:30:ea:f0:ef:58:a6:41:ef:db:b8:
1a:b5:86:01:59:d6:5d:d1:0d:90:29:c6:66:27:cf:ee:ed:76:
d5:ad:0f:03:fc:02:3c:af:5e:92:66:4e:d8:3f:f1:5a:e4:37:
88:b9:44:53:a7:87:68:88:60:30:71:d6:46:11:58:25:aa:3d:
b2:61:d2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409lJWqV/tpAWUU9dFeX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWE3YjdhMmMyOGEwYjNjMGUwYTU4OGMzYzg5MmU1MmE1
OWYwZTYwHhcNMjYwMzI5MDkwMTQwWhcNMjYwMzMwMDkwMTQwWjAzMTEwLwYDVQQD
EyhlOWQzMTY1MmFhZGYzYTM4ODFmYWE2YmY1M2M1ZGUyNzY2ZTc5NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dZAXPOia8nby7Q/wHRnKylD2Ghh
ARlYEvTm4wytEnXpyhuSiUspV63lFwgDFTBAL0aINaLwzPrUMqOvsV62XA2wKYL8
oChNM8XGrzDqEs16xDgyq3q+vp9/1ikunYdobpjlV9BluM1LqyL2iRUAVfPKwP3S
MRNZyiQZE0261+9ishPZakr+3vLAPli3vbLAr4UXcuMent4QX22aQ6bh8QArN6PN
a/iZYGvqUVqPxcrP/OwuYeChYpzQsTwH9ZKrIiX5UYhmyxhVnlNBFcfIO77/iKLg
H0UNKEfOndE/2+ZMpSlnP3uvAq7Yadc/Q7HoCM2OrktcLAKAV+a8IMsVZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnTFlKq3zo4gfqmv1PF3idm55bTMB8GA1UdIwQY
MBaAFPyae3osKKCzwOCliMPIkuUqWfDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTkt
YWNmMDkzMjI2YjA3LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTktYWNmMDkzMjI2YjA3
LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTucB2qY
ofRrbfEEH7p2+k5vWQrY6gbfz/1Uh26/t0zPU+ojLbTI2z2y0Qux/fMXLRr8dj62
M3SsR4X3VaSLPn0hUuaGGEWHDfYyO/2JneB1W7TfcshIc9io555682v+82XCyHNT
xfFU8wT9KTygyEyjDK4I1OTgyirMCt0lH5c3dzPxJBXwCt50dY1GvMmtGilK3JKw
8D85ItvQSbAS/JKhDYFd2FO5SxBDMp+aHnu2Tqd9c+4yTJsMa14w6vDvWKZB79u4
GrWGAVnWXdENkCnGZifP7u121a0PA/wCPK9ekmZO2D/xWuQ3iLlEU6eHaIhgMHHW
RhFYJao9smHSfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:43 2026 by rpki-client