Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File: JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier: QpLHAg9IQAq1JUva9CGanA/h8uMQA0sPdjTdwaChXWU=
Subject key identifier: 0E:5F:28:4D:86:5C:87:22:03:3E:CA:36:76:BE:2B:30:B9:CD:AB:A2
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 019D39AEE4219A57DB5D0B275629183429F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 13:00:55 +0000
Manifest this update: Sun 29 Mar 2026 13:00:55 +0000
Manifest next update: Mon 30 Mar 2026 13:00:55 +0000
Files and hashes: 1: 3xiDzGgK4e9ceC4u7RUWp0fz_SM.roa (hash: DZHEO3sSIJCigbbB46icKw7YPH6Y87vFoZ5HjcDSncs=)
2: 9pGhFTVH5XN8vbhHpytqSGENvrk.roa (hash: LhRnX4VDOkccbXWuT427U2ER9cwZLZ0V0MGvKtu8Yyg=)
3: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: eXOJ4xwtIeUoKO5cX4AtOz2Wejsa5OM3z46uqynm8Wk=)
4: eEZUpEtjObJ9yeYuMAQAw_0jXUU.roa (hash: nuE7s/MKLf67lp3yMJo4q3u/cNq9UefHf0q9u+Y32mI=)
5: nNax3jH-aHbv8fUxbVL4yA04BCc.roa (hash: fqwvBl3p3PjrVK5KfWPgoqVaATaBD26mauAzKvmJgv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e4:21:9a:57:db:5d:0b:27:56:29:18:34:29:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Mar 29 13:00:55 2026 GMT
Not After : Mar 30 13:00:55 2026 GMT
Subject: CN=0e5f284d865c8722033eca3676be2b30b9cdaba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:b4:af:3b:87:94:53:a7:36:1a:47:c4:5d:
18:f5:7d:bf:39:3f:ef:02:43:e0:bb:4c:c2:85:ed:
b1:f7:3a:3f:c0:f2:c9:64:21:33:ce:d7:8e:24:ab:
d4:26:45:8d:49:d2:fd:76:92:6e:da:37:fd:08:97:
6e:3a:00:77:69:bb:b0:17:82:95:ee:75:10:49:d7:
5d:99:b7:bf:c6:94:32:f0:b6:6b:80:d6:e5:7c:63:
97:e4:f3:18:26:b9:59:c7:39:11:d4:a9:4c:81:fd:
dd:cf:90:9e:4e:e5:6f:a7:68:09:a7:34:22:26:b5:
53:da:6e:83:30:ff:d2:e8:c5:e1:1e:ea:81:ab:70:
9b:4b:68:c8:19:b8:3f:70:3f:4c:e4:72:3d:64:81:
42:be:d1:66:25:e9:df:dd:44:85:cc:f4:ef:7a:99:
32:e8:d0:20:db:f5:66:a7:18:cb:16:3c:34:b3:18:
3e:16:95:e8:24:6f:81:2a:bd:ef:f2:d6:04:e9:c4:
09:11:85:2e:41:4d:e7:26:27:4a:9d:da:e9:dd:13:
ff:6c:d2:39:b3:8e:57:75:aa:16:3e:05:16:f2:6c:
08:d7:96:c8:43:84:88:47:62:0b:43:d1:ef:01:33:
a4:7b:1b:40:28:2a:a7:34:c3:06:dd:9c:fd:67:f8:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:28:4D:86:5C:87:22:03:3E:CA:36:76:BE:2B:30:B9:CD:AB:A2
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a7:91:21:38:51:08:87:a3:37:18:ae:99:31:c9:4b:15:51:
7e:e9:7b:5a:d7:4f:e8:81:be:e7:98:1d:d4:77:0c:1c:6e:b9:
de:24:2c:fd:a4:1a:d8:50:71:7d:37:14:ea:a3:f8:be:4c:78:
38:7c:dd:5e:33:b1:4c:0a:6a:91:8b:a1:fb:91:e9:e7:f7:65:
56:76:ce:2a:97:1c:99:4c:aa:7c:d9:b0:79:b6:03:9b:aa:f4:
46:47:12:c9:1b:63:41:28:0c:3b:01:f2:44:78:cb:b8:d1:83:
38:d7:d7:42:bf:51:8a:76:b5:bb:a9:56:a4:53:b0:4d:bb:0a:
fa:3d:18:82:3d:61:56:69:20:e9:a6:f6:a9:54:98:83:3a:51:
84:97:fc:db:40:8d:e6:de:84:7b:11:04:00:6b:4d:8f:a1:bc:
d8:34:bf:6c:b9:fa:7f:9f:7a:cb:c7:e3:79:cf:e5:d0:c9:e0:
47:b6:24:4e:b0:56:83:bb:b7:a4:9b:ce:a4:88:fd:7a:60:d5:
11:4d:76:c9:1a:22:2e:a4:ff:5e:26:33:ba:f7:31:30:a9:3c:
c9:c8:14:99:bc:e4:ca:97:f6:0f:55:39:46:ae:6c:bb:7a:c3:
69:76:97:9d:05:de:aa:80:dd:3f:96:a1:35:71:6a:5e:ea:7e:
f3:18:65:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ruQhmlfbXQsnVikYNCn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5MGY1ZjMxZjIzOGRmM2U4ZjNiZGZjYzA1NzUxY2My
ZjE5MmMwHhcNMjYwMzI5MTMwMDU1WhcNMjYwMzMwMTMwMDU1WjAzMTEwLwYDVQQD
EygwZTVmMjg0ZDg2NWM4NzIyMDMzZWNhMzY3NmJlMmIzMGI5Y2RhYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIi0rzuHlFOnNhpHxF0Y9X2/OT/v
AkPgu0zChe2x9zo/wPLJZCEzzteOJKvUJkWNSdL9dpJu2jf9CJduOgB3abuwF4KV
7nUQSdddmbe/xpQy8LZrgNblfGOX5PMYJrlZxzkR1KlMgf3dz5CeTuVvp2gJpzQi
JrVT2m6DMP/S6MXhHuqBq3CbS2jIGbg/cD9M5HI9ZIFCvtFmJenf3USFzPTvepky
6NAg2/VmpxjLFjw0sxg+FpXoJG+BKr3v8tYE6cQJEYUuQU3nJidKndrp3RP/bNI5
s45XdaoWPgUW8mwI15bIQ4SIR2ILQ9HvATOkextAKCqnNMMG3Zz9Z/jqaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5fKE2GXIciAz7KNna+KzC5zauiMB8GA1UdIwQY
MBaAFCcCkPXzHyON8+jzvfzAV1HMLxksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAt
YjE0Y2M5MWM3NzZjLzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAtYjE0Y2M5MWM3NzZj
LzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqeRIThR
CIejNxiumTHJSxVRful7WtdP6IG+55gd1HcMHG653iQs/aQa2FBxfTcU6qP4vkx4
OHzdXjOxTApqkYuh+5Hp5/dlVnbOKpccmUyqfNmwebYDm6r0RkcSyRtjQSgMOwHy
RHjLuNGDONfXQr9Rina1u6lWpFOwTbsK+j0Ygj1hVmkg6ab2qVSYgzpRhJf820CN
5t6EexEEAGtNj6G82DS/bLn6f596y8fjec/l0MngR7YkTrBWg7u3pJvOpIj9emDV
EU12yRoiLqT/XiYzuvcxMKk8ycgUmbzkypf2D1U5Rq5su3rDaXaXnQXeqoDdP5ah
NXFqXup+8xhlOA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:50 2026 by rpki-client