Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier: hfk3D0sd8HyFNBEaxOufG2fzG7BgrLbKFih6iqSpzvc=
Subject key identifier: 76:3E:F8:EF:3F:B7:1F:94:00:B0:99:90:75:4D:76:E1:DA:7A:93:FF
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 019D389BB9279C0A6D80DC27B3657F6EE06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number: 16CE
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: 1zrQOkN9Z90Pr68K5rn8gfvEwpo.roa (hash: 6SGeBYB7qPaByHLVFjzOEKr5KcRtq2GA3JucBrXz448=)
2: 4oer0NIy8gLaot91RUTGaO6LrAo.roa (hash: yRr8CCQ/YtEMqUBMAHOSC+xneg3hncFxDqmVEzIn8BA=)
3: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: NEquPxjSrk0QKZ885GJ2nac3QNQVpkqjw9Q2vUdVDKY=)
4: eWHL2KDrJjJ8ZSeJDpUQ4WKF2Gk.roa (hash: 7JmTL04KBPq1kd3qGXa89Y/80yoHChM4TTSdZFS3a48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b9:27:9c:0a:6d:80:dc:27:b3:65:7f:6e:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=763ef8ef3fb71f9400b09990754d76e1da7a93ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:fa:3e:c1:52:57:c4:a3:23:80:43:3f:fb:
04:75:9e:db:8c:23:9c:cf:0d:3d:ac:1f:46:df:07:
e2:8e:fe:5c:c0:e1:76:28:e3:5a:81:4f:a6:e2:50:
bc:29:1e:4f:bd:bc:53:af:b6:73:e1:56:4d:94:fc:
a5:cb:59:a4:26:f2:77:c0:e1:7a:a0:ce:54:02:41:
f3:3e:65:97:ff:6a:3c:db:01:30:de:56:5b:be:9b:
ab:c2:94:94:dc:e6:9c:b5:97:3b:fc:5e:23:f4:8a:
f5:e8:2f:8b:e8:24:a2:5d:0d:c0:a7:d8:8a:7d:63:
6b:a0:6a:9c:57:09:84:36:29:75:3a:80:a5:37:06:
a8:5e:4d:e5:72:28:45:a3:85:30:47:91:e2:b9:72:
11:4b:4b:77:1e:ff:0a:61:62:5a:12:8b:df:e1:aa:
6f:0c:79:5a:a8:66:57:c9:21:71:1b:78:31:25:9b:
f5:36:a4:ac:cc:4c:65:53:e2:8e:93:9a:81:a0:f8:
32:b6:fb:fd:5e:4c:51:b9:48:cd:48:d5:de:eb:d3:
ee:34:48:c1:15:af:e4:b2:4f:d1:d9:3f:d4:01:a8:
e7:7e:b3:33:7d:ce:a6:19:4b:36:10:fc:92:af:83:
42:11:ba:3c:9b:1b:ad:81:83:1e:78:b8:de:70:d2:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:F8:EF:3F:B7:1F:94:00:B0:99:90:75:4D:76:E1:DA:7A:93:FF
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:94:21:36:27:37:cb:e8:18:7c:cb:95:bb:83:3d:db:d5:5a:
7e:07:75:e5:61:19:eb:8c:11:ba:b6:a5:0b:f1:01:b6:08:70:
7f:0e:05:a9:23:5d:68:fd:9f:d3:cc:aa:0b:7a:36:e6:ed:f2:
42:38:7a:bb:70:c6:df:71:cc:e6:c2:b5:21:a7:2b:32:fe:77:
a8:59:a9:4d:e3:0d:59:7e:d0:bc:33:82:23:00:b5:b6:d0:97:
e9:91:96:37:e6:18:65:a6:d2:d1:8c:c1:87:bb:4f:00:01:84:
68:38:5a:a5:bb:44:e0:d1:cb:12:c1:58:02:c5:05:ca:b9:83:
90:0a:16:0d:d7:4a:72:43:9a:7b:42:03:14:ad:35:f0:40:d3:
f0:5d:61:ce:55:f0:14:8b:e8:67:eb:8d:d8:c1:45:ba:96:b9:
03:09:b9:2f:bb:15:b8:8f:dd:bc:94:74:7b:c5:e6:af:60:5a:
af:34:7b:b7:90:3d:4f:1a:d2:6f:65:bf:c9:eb:6b:55:e3:0e:
42:b4:c4:64:e6:39:65:d0:be:0e:ec:5a:cd:61:10:2d:ce:7c:
33:95:aa:85:d8:1c:e6:38:90:d0:ff:2b:cc:31:0a:ae:90:08:
41:81:b2:2b:52:6e:9a:5f:eb:e4:5f:8a:96:2d:89:fe:fd:2e:
69:65:bc:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7knnAptgNwns2V/buBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzAwN2U1MDgyYjhlOGQ4Mjg5MDE4NzE4Y2ZkNTI3YTc4
OTNlNWUwHhcNMjYwMzI5MDgwMDIyWhcNMjYwMzMwMDgwMDIyWjAzMTEwLwYDVQQD
Eyg3NjNlZjhlZjNmYjcxZjk0MDBiMDk5OTA3NTRkNzZlMWRhN2E5M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzj6PsFSV8SjI4BDP/sEdZ7bjCOc
zw09rB9G3wfijv5cwOF2KONagU+m4lC8KR5PvbxTr7Zz4VZNlPyly1mkJvJ3wOF6
oM5UAkHzPmWX/2o82wEw3lZbvpurwpSU3OactZc7/F4j9Ir16C+L6CSiXQ3Ap9iK
fWNroGqcVwmENil1OoClNwaoXk3lcihFo4UwR5HiuXIRS0t3Hv8KYWJaEovf4apv
DHlaqGZXySFxG3gxJZv1NqSszExlU+KOk5qBoPgytvv9XkxRuUjNSNXe69PuNEjB
Fa/ksk/R2T/UAajnfrMzfc6mGUs2EPySr4NCEbo8mxutgYMeeLjecNL2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY++O8/tx+UALCZkHVNduHaepP/MB8GA1UdIwQY
MBaAFCfAB+UIK46NgokBhxjP1SeniT5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEt
MmM2NGMyOTEzNTNlLzEvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEtMmM2NGMyOTEzNTNl
LzEvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZQhNic3
y+gYfMuVu4M929Vafgd15WEZ64wRuralC/EBtghwfw4FqSNdaP2f08yqC3o25u3y
Qjh6u3DG33HM5sK1IacrMv53qFmpTeMNWX7QvDOCIwC1ttCX6ZGWN+YYZabS0YzB
h7tPAAGEaDhapbtE4NHLEsFYAsUFyrmDkAoWDddKckOae0IDFK018EDT8F1hzlXw
FIvoZ+uN2MFFupa5Awm5L7sVuI/dvJR0e8Xmr2BarzR7t5A9TxrSb2W/yetrVeMO
QrTEZOY5ZdC+DuxazWEQLc58M5Wqhdgc5jiQ0P8rzDEKrpAIQYGyK1Juml/r5F+K
li2J/v0uaWW8jA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:37 2026 by rpki-client