Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: AMjOjB+/HS6IoHK0cRYgsvKtw3zKx0kW9FoGWYL93G0=
Subject key identifier: 3A:65:F7:26:3A:96:80:D9:3D:2B:CC:C4:82:2C:99:DE:68:96:32:60
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 019D37890E05779BF3754141761D8CB86703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: jvOfrJ8HXvzLIq5oeki4RaJ08vcle5ud4cmbUsFyA5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0e:05:77:9b:f3:75:41:41:76:1d:8c:b8:67:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=3a65f7263a9680d93d2bccc4822c99de68963260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:71:c8:b2:6e:c2:4a:1b:2b:d0:88:44:ce:
fe:7c:fa:d7:59:5d:18:7c:9d:36:de:4d:04:68:9a:
63:3c:79:9a:a4:62:89:c2:45:b7:0a:6d:2c:ee:10:
7e:80:f3:8e:75:14:10:e5:ae:3b:0d:67:a9:f7:74:
db:a8:6f:c7:41:21:9b:19:d1:db:07:66:2f:b9:c0:
d4:fa:5c:62:41:12:5b:a6:22:b5:88:0a:a8:38:6a:
0f:46:e0:9d:c5:9e:54:1c:9c:8c:5e:2c:e3:38:dd:
e3:9e:a8:3b:c0:fb:ca:2b:59:fb:79:bf:fb:5f:1c:
f7:e1:2f:dc:c4:7a:76:97:c5:e6:26:66:4e:9f:68:
94:a9:dc:aa:bf:0f:e7:e9:5f:83:94:4b:5f:d2:26:
2c:d0:f0:eb:0a:67:a8:59:4c:53:c4:05:22:5f:88:
1d:4a:38:8d:2c:d3:c7:05:80:12:1f:cd:b0:97:d7:
5b:2a:17:1f:6e:8c:ef:d2:5f:21:c5:c4:63:96:9b:
8d:23:1f:6a:7a:69:b2:d0:2b:0b:2a:24:ee:04:06:
17:4a:78:20:3e:17:33:2b:a7:07:30:4d:29:bd:3f:
c7:78:96:00:79:6c:fa:5d:8d:cf:5c:90:2e:91:12:
a0:9c:d2:e3:14:81:a5:44:e6:22:37:18:45:49:be:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:F7:26:3A:96:80:D9:3D:2B:CC:C4:82:2C:99:DE:68:96:32:60
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0e:d3:1d:ae:3b:5d:71:bd:a8:16:81:61:a5:32:cd:c5:3c:
95:f5:6f:14:8f:26:77:fa:70:9b:b4:fd:ff:43:4b:a0:42:d2:
59:b0:91:59:b3:e2:9c:57:fa:6b:cc:f9:7b:f6:01:88:e6:60:
bb:5c:79:e0:6a:e2:18:47:fc:ec:e0:48:1f:74:1c:f8:c0:12:
98:c7:d2:8f:85:1a:30:4f:fa:76:7c:17:cd:51:e4:9c:ef:d8:
d8:2e:9c:70:bc:07:4a:a7:09:f7:39:44:db:17:16:68:b7:20:
1e:53:51:eb:c8:73:be:f1:9b:14:7f:39:68:a4:69:07:72:13:
84:28:86:b7:b6:b7:f0:90:29:92:84:12:92:35:79:e4:fa:43:
30:d8:d1:b9:ac:01:04:74:75:80:0c:ee:4e:a8:c4:d3:0c:4c:
67:f1:5b:8f:9d:ae:29:3d:fe:95:cb:af:9a:3a:ea:f7:03:12:
8d:fd:44:29:65:5d:ae:05:45:c9:2f:cf:dd:e8:cf:ac:18:a9:
b2:00:2a:37:b1:5b:fa:89:65:6e:6d:3e:0b:8d:ea:db:de:74:
13:92:20:f9:e1:26:03:c5:df:3a:41:17:b8:83:a3:36:d5:8d:
b3:75:f7:d9:a3:bc:55:29:09:26:db:e3:1c:37:1c:5b:6e:82:
59:6e:ca:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iQ4Fd5vzdUFBdh2MuGcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZjQzMTU5MmRlY2YyODVjMzMyZDMwNjI1MzFjMGU3Y2Y2
MTAyYzAwHhcNMjYwMzI5MDMwMDIxWhcNMjYwMzMwMDMwMDIxWjAzMTEwLwYDVQQD
EygzYTY1ZjcyNjNhOTY4MGQ5M2QyYmNjYzQ4MjJjOTlkZTY4OTYzMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5xxyLJuwkobK9CIRM7+fPrXWV0Y
fJ023k0EaJpjPHmapGKJwkW3Cm0s7hB+gPOOdRQQ5a47DWep93TbqG/HQSGbGdHb
B2YvucDU+lxiQRJbpiK1iAqoOGoPRuCdxZ5UHJyMXizjON3jnqg7wPvKK1n7eb/7
Xxz34S/cxHp2l8XmJmZOn2iUqdyqvw/n6V+DlEtf0iYs0PDrCmeoWUxTxAUiX4gd
SjiNLNPHBYASH82wl9dbKhcfbozv0l8hxcRjlpuNIx9qemmy0CsLKiTuBAYXSngg
PhczK6cHME0pvT/HeJYAeWz6XY3PXJAukRKgnNLjFIGlROYiNxhFSb4ayQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpl9yY6loDZPSvMxIIsmd5oljJgMB8GA1UdIwQY
MBaAFI/0MVkt7PKFwzLTBiUxwOfPYQLAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZTFmZWQtMmU4Ni00NGE5LThhNjct
NDRiNzhlNzg4ZGViLzEval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZTFmZWQtMmU4Ni00NGE5LThhNjctNDRiNzhlNzg4ZGVi
LzEval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQ7THa47
XXG9qBaBYaUyzcU8lfVvFI8md/pwm7T9/0NLoELSWbCRWbPinFf6a8z5e/YBiOZg
u1x54GriGEf87OBIH3Qc+MASmMfSj4UaME/6dnwXzVHknO/Y2C6ccLwHSqcJ9zlE
2xcWaLcgHlNR68hzvvGbFH85aKRpB3IThCiGt7a38JApkoQSkjV55PpDMNjRuawB
BHR1gAzuTqjE0wxMZ/Fbj52uKT3+lcuvmjrq9wMSjf1EKWVdrgVFyS/P3ejPrBip
sgAqN7Fb+ollbm0+C43q2950E5Ig+eEmA8XfOkEXuIOjNtWNs3X32aO8VSkJJtvj
HDccW26CWW7KKQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:22 2026 by rpki-client