Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: UYoOLpHB9+cKNBQqzd/I5hAGQkBvrSwO7LxJw+isIbw=
Subject key identifier: EF:FA:84:53:A9:5E:0E:92:94:80:41:AB:35:D3:A9:7B:21:FA:72:27
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019D265EFE150D61F1D569D6935E02ADD3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: 047B
Signing time: Wed 25 Mar 2026 19:00:52 +0000
Manifest this update: Wed 25 Mar 2026 19:00:52 +0000
Manifest next update: Thu 26 Mar 2026 19:00:52 +0000
Files and hashes: 1: TnQKWeQupyg_M_HldmwYeDDgvhk.roa (hash: M0Vpxy4Nn+gAxwO25JaUvS5hbetyj91H/ndxZ7DoUCo=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: gv4Yi5aDqLCd1dfrlVSd0cFS49zkh+o8PMqC4M5lBFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:fe:15:0d:61:f1:d5:69:d6:93:5e:02:ad:d3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Mar 25 19:00:52 2026 GMT
Not After : Mar 26 19:00:52 2026 GMT
Subject: CN=effa8453a95e0e92948041ab35d3a97b21fa7227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:84:fd:c9:7f:59:b2:c7:92:d4:91:bf:5d:
48:ea:a7:02:23:e5:35:32:23:cb:3a:4c:e4:f8:90:
54:9c:e9:37:90:d7:70:71:b2:09:b5:69:98:13:cf:
53:92:3c:ce:3c:cd:ae:5d:55:67:2c:39:cb:ad:37:
87:31:b1:af:ea:30:c6:93:99:88:53:aa:c1:d2:b9:
88:ff:bb:56:df:7e:00:74:b0:80:30:7b:7b:c3:3d:
39:1f:2c:76:a7:06:dd:14:c9:77:87:41:ed:b0:c9:
40:cc:28:f6:1b:5f:70:40:c1:b5:29:05:66:74:56:
10:ac:37:cd:bc:f6:f5:1d:5a:32:bb:4f:46:c6:f4:
ac:4d:f6:0d:e8:6a:14:fb:a2:64:58:b6:3c:a6:97:
28:98:59:c8:cc:6e:e3:9d:8d:10:6a:9c:ef:ab:64:
65:dc:63:91:a9:53:61:1a:2d:bb:7f:1d:d3:59:ec:
a9:37:4c:a6:34:73:12:f9:7b:82:15:c8:2b:ec:bb:
2b:73:b8:fb:32:2e:f3:8d:cf:48:d8:0c:d2:75:fa:
b2:5a:9d:f3:b5:15:48:62:46:94:e3:9b:e0:c2:cd:
65:d6:f6:25:45:36:4f:58:40:8a:09:b6:9b:cf:10:
fa:c8:a7:56:a9:eb:b8:6c:74:f0:dc:8e:74:1d:79:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FA:84:53:A9:5E:0E:92:94:80:41:AB:35:D3:A9:7B:21:FA:72:27
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0b:95:47:a1:c1:15:ac:f3:14:4f:c4:38:85:63:35:2b:0f:
78:b5:c3:2e:c1:d6:78:1d:1d:e1:b7:c7:23:c3:d1:f6:ca:ad:
2a:45:04:71:ce:5d:6c:c0:b1:39:51:c4:a5:b2:ab:68:35:4e:
91:10:31:67:7c:09:73:1c:e8:73:63:c5:09:3c:09:2d:f1:32:
c2:8b:36:c0:61:00:8b:89:bd:d1:a3:3e:21:ea:d4:12:45:c8:
90:a2:8c:db:08:57:72:7f:9d:08:2c:b1:db:33:b1:b5:ab:54:
08:84:b2:01:1f:2d:1c:b8:e3:3b:ce:3a:b8:36:3a:d4:ea:79:
ca:5b:3d:66:82:23:0d:e0:9d:e7:f8:38:4e:9d:9d:55:a4:39:
71:11:c1:74:f9:c1:4f:87:92:61:0a:3d:e6:15:88:e5:a6:6f:
bc:4c:b1:79:78:6d:ac:e0:90:29:f2:4f:8d:f2:3f:d3:58:91:
5c:bb:5a:84:a1:95:7f:b2:63:b2:cc:70:0e:b1:3b:a8:67:a5:
5f:e9:bd:22:81:b4:ae:34:5f:aa:2d:0d:93:4f:9a:3b:5f:69:
a7:90:11:21:1d:d0:87:75:73:4d:41:6f:1f:15:6b:50:84:4b:
78:3c:d1:01:2b:8a:b4:e1:ac:e0:da:94:05:cf:db:a7:92:20:
2d:d7:80:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXv4VDWHx1WnWk14CrdO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjY2M4MmE1YmVlM2E5MzYzMzAzYzMzY2RjZGQzNmVmYzY4
ZjhiNDQwHhcNMjYwMzI1MTkwMDUyWhcNMjYwMzI2MTkwMDUyWjAzMTEwLwYDVQQD
EyhlZmZhODQ1M2E5NWUwZTkyOTQ4MDQxYWIzNWQzYTk3YjIxZmE3MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCOE/cl/WbLHktSRv11I6qcCI+U1
MiPLOkzk+JBUnOk3kNdwcbIJtWmYE89TkjzOPM2uXVVnLDnLrTeHMbGv6jDGk5mI
U6rB0rmI/7tW334AdLCAMHt7wz05Hyx2pwbdFMl3h0HtsMlAzCj2G19wQMG1KQVm
dFYQrDfNvPb1HVoyu09GxvSsTfYN6GoU+6JkWLY8ppcomFnIzG7jnY0Qapzvq2Rl
3GORqVNhGi27fx3TWeypN0ymNHMS+XuCFcgr7Lsrc7j7Mi7zjc9I2AzSdfqyWp3z
tRVIYkaU45vgws1l1vYlRTZPWECKCbabzxD6yKdWqeu4bHTw3I50HXnf5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/6hFOpXg6SlIBBqzXTqXsh+nInMB8GA1UdIwQY
MBaAFIzMgqW+46k2MwPDPNzdNu/Gj4tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQt
YmViZGExNjA4ZDA5LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQtYmViZGExNjA4ZDA5
LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAuVR6HB
FazzFE/EOIVjNSsPeLXDLsHWeB0d4bfHI8PR9sqtKkUEcc5dbMCxOVHEpbKraDVO
kRAxZ3wJcxzoc2PFCTwJLfEywos2wGEAi4m90aM+IerUEkXIkKKM2whXcn+dCCyx
2zOxtatUCISyAR8tHLjjO846uDY61Op5yls9ZoIjDeCd5/g4Tp2dVaQ5cRHBdPnB
T4eSYQo95hWI5aZvvEyxeXhtrOCQKfJPjfI/01iRXLtahKGVf7JjssxwDrE7qGel
X+m9IoG0rjRfqi0Nk0+aO19pp5ARIR3Qh3VzTUFvHxVrUIRLeDzRASuKtOGs4NqU
Bc/bp5IgLdeA9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:49 2026 by rpki-client