
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: CRTGWZO2FtwVlcIqODOnhXsx1j7uFai/OQTju9Snows=
Subject key identifier: 7A:2E:82:42:BE:F0:7E:0A:AE:B3:B4:C8:76:E8:48:FD:DF:D7:A3:FF
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 019D3909FEBCA5D8BD5E7230D7FDAC47F2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:49 +0000
Manifest this update: Sun 29 Mar 2026 10:00:49 +0000
Manifest next update: Mon 30 Mar 2026 10:00:49 +0000
Files and hashes: 1: G1NkqVj8Yr6VTyyoWcdSUhUvvCw.roa (hash: CZnYGn2RTJItTzBITrNscqi0v2S9GDn0ujpdRLMbDD4=)
2: _Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa (hash: xyogZ8QKw5nxXSVIno+0JDHOn4OpmuVmDGIYgg6rJzo=)
3: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: HQP2FKvVfxb3cUZ6kcPOpK3CPnR4noFvwuMWBXYkmD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fe:bc:a5:d8:bd:5e:72:30:d7:fd:ac:47:f2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Mar 29 10:00:49 2026 GMT
Not After : Mar 30 10:00:49 2026 GMT
Subject: CN=7a2e8242bef07e0aaeb3b4c876e848fddfd7a3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:fa:1a:3d:c5:3f:e8:ae:30:8b:45:a1:93:
6f:ea:29:33:02:bc:26:6e:52:b2:84:98:45:e0:de:
aa:f9:07:d4:bf:3f:0b:01:a3:a9:d8:44:24:9b:41:
ab:57:d0:23:c3:8b:bf:8a:6f:93:5d:98:a2:e0:97:
e2:89:02:37:36:8f:73:57:18:14:38:5b:12:1c:41:
d4:53:9b:35:08:c2:85:a1:85:55:f6:a3:68:a3:c7:
90:22:b6:e1:45:77:dc:aa:16:9d:18:c7:72:95:fd:
d1:53:e5:9f:15:c8:f7:72:c1:9b:b1:04:aa:d6:f9:
0d:28:a5:e7:ef:52:bd:70:31:f0:21:a4:c1:32:ba:
38:4c:33:3d:0b:8e:85:9e:35:6f:a3:f1:24:ce:bf:
73:1c:2c:1a:82:e0:6b:62:55:54:4a:65:13:a6:29:
b3:f3:77:11:8f:36:72:37:a3:89:b9:0e:3a:a0:ea:
89:3b:b8:27:58:b0:a3:8a:54:d0:a2:cc:09:c0:3d:
26:fd:77:ba:21:33:12:d3:9d:72:f1:01:d4:00:f8:
0a:5b:e1:dc:3b:5b:25:a5:58:e3:7f:d6:62:2c:66:
55:64:3b:a3:58:1f:5d:08:e8:02:09:9d:56:95:ea:
d9:1f:86:7f:9c:89:91:03:ce:df:d3:90:4e:b1:b8:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2E:82:42:BE:F0:7E:0A:AE:B3:B4:C8:76:E8:48:FD:DF:D7:A3:FF
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f6:40:2a:42:e4:a7:a2:8e:e8:b2:58:66:e8:9a:10:a1:4f:
c8:b6:f3:3d:f3:02:b7:7f:c8:ea:f9:ff:87:d7:86:c4:ba:b5:
ce:5f:0a:ea:4e:6e:b9:22:3f:e3:7f:58:32:53:72:af:b4:8e:
98:e4:58:d2:e1:68:62:7a:44:2e:55:04:88:d3:31:ad:fa:21:
93:57:98:02:d1:8d:f1:ca:cb:94:4b:ec:8d:2b:7b:7c:99:44:
c1:f4:92:a5:e1:bf:28:4f:c8:15:c6:f1:cd:29:07:34:31:52:
28:fa:52:a2:cc:64:72:cd:c4:18:dd:2a:a2:7c:49:88:5a:9f:
a5:a4:8d:bd:b7:27:c1:a0:04:10:d8:0c:bb:b9:67:6e:0f:99:
f6:d4:da:98:45:8e:82:81:e3:6f:e5:ca:0a:ea:cf:22:5a:f5:
3c:ba:7b:99:68:4c:31:7d:d4:4e:f0:fc:ce:6b:5e:e0:ac:43:
b2:74:65:e3:1a:e6:16:7a:84:27:0d:69:68:5b:e9:86:21:71:
b9:0e:93:ca:70:d4:3a:eb:2d:c9:35:c2:b5:c8:6d:e6:51:31:
ac:d6:91:48:89:11:49:76:6f:cd:29:d6:d8:8c:76:8f:ac:9c:
05:d5:67:bf:4d:4c:a0:74:bc:93:66:9e:b6:40:d7:a4:15:1b:
a5:d3:00:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cf68pdi9XnIw1/2sR/K8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTc1MjI1ZjM4NmNlOTgwMTE5ZjY5ODg0ZjliZTdjNmEy
YjNiMzMwHhcNMjYwMzI5MTAwMDQ5WhcNMjYwMzMwMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg3YTJlODI0MmJlZjA3ZTBhYWViM2I0Yzg3NmU4NDhmZGRmZDdhM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l/6Gj3FP+iuMItFoZNv6ikzArwm
blKyhJhF4N6q+QfUvz8LAaOp2EQkm0GrV9Ajw4u/im+TXZii4JfiiQI3No9zVxgU
OFsSHEHUU5s1CMKFoYVV9qNoo8eQIrbhRXfcqhadGMdylf3RU+WfFcj3csGbsQSq
1vkNKKXn71K9cDHwIaTBMro4TDM9C46FnjVvo/Ekzr9zHCwaguBrYlVUSmUTpimz
83cRjzZyN6OJuQ46oOqJO7gnWLCjilTQoswJwD0m/Xe6ITMS051y8QHUAPgKW+Hc
O1slpVjjf9ZiLGZVZDujWB9dCOgCCZ1WlerZH4Z/nImRA87f05BOsbiCxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHougkK+8H4KrrO0yHboSP3f16P/MB8GA1UdIwQY
MBaAFI8XUiXzhs6YARn2mIT5vnxqKzszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjct
NjFiNzcyZDc1MWVjLzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjctNjFiNzcyZDc1MWVj
LzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/ZAKkLk
p6KO6LJYZuiaEKFPyLbzPfMCt3/I6vn/h9eGxLq1zl8K6k5uuSI/439YMlNyr7SO
mORY0uFoYnpELlUEiNMxrfohk1eYAtGN8crLlEvsjSt7fJlEwfSSpeG/KE/IFcbx
zSkHNDFSKPpSosxkcs3EGN0qonxJiFqfpaSNvbcnwaAEENgMu7lnbg+Z9tTamEWO
goHjb+XKCurPIlr1PLp7mWhMMX3UTvD8zmte4KxDsnRl4xrmFnqEJw1paFvphiFx
uQ6TynDUOustyTXCtcht5lExrNaRSIkRSXZvzSnW2Ix2j6ycBdVnv01MoHS8k2ae
tkDXpBUbpdMA5g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:02 2026 by rpki-client