Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: q9oy1XXQUwARezllDYdNmfwzsqwNKnBzM0MuezHXjXw=
Subject key identifier: 26:D1:52:C4:53:10:11:2B:08:39:68:C1:F6:EC:B8:E3:92:02:BC:07
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 019D2C2AA25BBF4D480F982E5429B7AAE922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 22:01:24 +0000
Manifest this update: Thu 26 Mar 2026 22:01:24 +0000
Manifest next update: Fri 27 Mar 2026 22:01:24 +0000
Files and hashes: 1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: C4Fh8wbLY1YlEauuemg81a9Nz+BBmpZpj7Q3/JgzNXU=)
3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:a2:5b:bf:4d:48:0f:98:2e:54:29:b7:aa:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Mar 26 22:01:24 2026 GMT
Not After : Mar 27 22:01:24 2026 GMT
Subject: CN=26d152c45310112b083968c1f6ecb8e39202bc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:cf:3a:ff:6c:e9:ec:4a:2c:58:ea:c5:17:
67:db:fc:94:97:6a:91:64:37:36:53:76:80:f1:97:
b7:e5:46:2a:04:89:8f:48:da:50:77:ed:ae:ef:57:
39:0d:5a:bf:fa:bf:22:6f:2f:f5:0c:19:10:cc:b5:
a3:13:99:5c:3b:d5:16:1c:ad:dc:25:e7:6a:a9:06:
14:88:35:b0:fd:7f:c8:18:a4:73:22:37:60:a4:23:
25:8d:f9:64:0b:a4:45:11:be:c7:89:89:3d:ae:4a:
73:16:94:b2:15:d7:55:73:22:05:32:50:a5:93:74:
4a:9a:fb:06:5d:21:6d:07:37:ae:38:4e:4c:20:b4:
e9:23:02:45:51:3b:5d:c1:cd:68:a5:42:76:35:a8:
8c:ec:e7:c7:29:88:4b:3c:8a:d1:bd:54:6b:b5:a5:
99:98:9d:83:ac:e5:5f:a8:14:73:08:92:23:1e:76:
9f:98:fc:84:a5:48:f0:72:28:85:0c:3c:91:0c:d1:
b6:cd:96:98:1a:1a:cd:3e:cc:07:40:17:f0:de:1e:
ad:d6:56:9e:48:95:71:c0:fd:da:36:27:72:c2:01:
72:45:06:57:58:74:d4:d9:84:55:71:6a:04:db:ba:
5e:c7:a5:6f:67:fb:e9:63:0d:a5:07:14:3a:72:1e:
f5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D1:52:C4:53:10:11:2B:08:39:68:C1:F6:EC:B8:E3:92:02:BC:07
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e7:fc:c9:d6:df:71:b6:9a:4b:65:88:27:2c:15:c1:1a:1d:
32:2b:37:a3:58:0d:df:92:6c:56:07:91:f4:cd:50:60:28:0a:
35:ab:fd:44:e0:74:be:b4:96:5b:41:6c:ca:b3:39:47:c6:ba:
0b:69:d7:bc:3a:3d:e6:0a:9a:1b:37:16:7e:3e:bb:cb:21:7e:
6d:12:dc:5d:78:61:73:6a:54:e9:a4:dc:0b:92:ce:e2:ff:42:
ab:64:49:d8:a9:eb:52:c8:b9:c5:3e:9a:16:9e:41:3d:f9:c4:
bd:e2:a0:cc:1f:e5:3d:69:ce:7b:43:56:3a:34:37:97:57:ed:
20:75:31:3e:e1:fa:7b:26:1f:f5:7b:4a:d5:5f:10:03:86:fa:
81:45:d8:2d:7d:83:87:2b:ed:59:cb:4a:eb:50:12:f6:dd:bb:
8a:6e:16:54:95:06:68:dc:ee:fd:ad:5e:82:89:05:be:45:10:
96:81:2e:29:43:29:c8:24:a7:95:aa:5f:ab:af:11:04:0b:02:
c3:4f:11:62:56:ab:a9:48:bf:43:a6:c9:af:5f:66:9d:40:e7:
c3:20:6a:f5:b0:af:81:aa:c6:95:bf:cc:3e:37:94:ae:a2:14:
fd:0e:c3:d6:a1:ef:ee:09:e0:70:27:6e:46:6a:96:ab:0f:7a:
0f:3e:29:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sKqJbv01ID5guVCm3qukiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODFiN2I0YWUzZTc1ZGM0YjM2Y2ZmMjkzNzkyM2VjZGZm
NzI1OWIwHhcNMjYwMzI2MjIwMTI0WhcNMjYwMzI3MjIwMTI0WjAzMTEwLwYDVQQD
EygyNmQxNTJjNDUzMTAxMTJiMDgzOTY4YzFmNmVjYjhlMzkyMDJiYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngfPOv9s6exKLFjqxRdn2/yUl2qR
ZDc2U3aA8Ze35UYqBImPSNpQd+2u71c5DVq/+r8iby/1DBkQzLWjE5lcO9UWHK3c
JedqqQYUiDWw/X/IGKRzIjdgpCMljflkC6RFEb7HiYk9rkpzFpSyFddVcyIFMlCl
k3RKmvsGXSFtBzeuOE5MILTpIwJFUTtdwc1opUJ2NaiM7OfHKYhLPIrRvVRrtaWZ
mJ2DrOVfqBRzCJIjHnafmPyEpUjwciiFDDyRDNG2zZaYGhrNPswHQBfw3h6t1lae
SJVxwP3aNidywgFyRQZXWHTU2YRVcWoE27pex6VvZ/vpYw2lBxQ6ch71+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbRUsRTEBErCDlowfbsuOOSArwHMB8GA1UdIwQY
MBaAFCaBt7SuPnXcSzbP8pN5I+zf9yWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEt
ZmM4MzliYjZkMTczLzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85Nzg4NzEtMjU1Yi00NDNhLThlMDEtZmM4MzliYjZkMTcz
LzEvSm9HM3RLNC1kZHhMTnNfeWsza2o3Tl8zSlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgef8ydbf
cbaaS2WIJywVwRodMis3o1gN35JsVgeR9M1QYCgKNav9ROB0vrSWW0FsyrM5R8a6
C2nXvDo95gqaGzcWfj67yyF+bRLcXXhhc2pU6aTcC5LO4v9Cq2RJ2KnrUsi5xT6a
Fp5BPfnEveKgzB/lPWnOe0NWOjQ3l1ftIHUxPuH6eyYf9XtK1V8QA4b6gUXYLX2D
hyvtWctK61AS9t27im4WVJUGaNzu/a1egokFvkUQloEuKUMpyCSnlapfq68RBAsC
w08RYlarqUi/Q6bJr19mnUDnwyBq9bCvgarGlb/MPjeUrqIU/Q7D1qHv7gngcCdu
RmqWqw96Dz4pjA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:15:53 2026 by rpki-client