Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: sCDFYSnN6tGIsnMEKaeGIX9IUCs/iB3b0kDn0iGDi8s=
Subject key identifier: 16:E9:98:C1:4B:96:74:E8:49:5D:57:73:D9:66:8C:1E:F2:6B:88:AC
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 019D28BB98BCBD4C9F1D15E454EAA0B20545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 0608
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: CWNF4a7mLYbKSGXj37QsRs18EPc.roa (hash: YsCfFIceaBejyXvZZ5Ucl+3/y81JerhJsxljYX0B06A=)
2: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: 2YTZj+5WzYwQwr9PPmIQbWR8Uaj3H9qh2L92GW8yS0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:98:bc:bd:4c:9f:1d:15:e4:54:ea:a0:b2:05:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=16e998c14b9674e8495d5773d9668c1ef26b88ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:73:1c:59:a1:6f:71:9a:f0:8c:d6:22:f2:
e9:80:47:37:70:f4:3b:d6:e8:45:7d:2f:62:17:3b:
e0:b1:08:98:6e:f9:f3:e9:e8:ab:cd:ac:54:7f:dd:
07:76:e4:07:ac:93:a6:2e:8d:d2:7f:b2:0f:14:95:
5b:2b:76:bc:4e:3d:a5:dd:55:da:56:e9:3f:86:1f:
44:fb:3f:67:60:9d:40:4d:5e:b4:ad:10:47:8d:9b:
cc:8f:e4:61:1d:13:62:b6:f7:6b:c2:da:09:f0:7b:
09:2f:15:38:ba:0b:cd:f4:23:81:f0:d7:56:12:15:
a5:70:2f:0a:0c:61:c6:cb:37:ef:8d:c6:d5:42:49:
36:34:aa:6f:3a:72:1c:f5:65:b6:96:5e:8e:7e:96:
2c:99:4e:db:81:c9:0e:a0:d7:51:04:f3:56:6f:de:
7b:b0:0a:20:85:bf:e3:35:86:c7:f1:aa:b9:fb:3a:
8f:bd:c8:0e:c9:07:cf:08:ba:78:35:0c:10:a9:04:
65:c4:28:43:ef:81:fe:1b:86:de:50:0b:28:b0:e4:
ab:34:78:10:fa:9d:db:23:1e:2a:b6:21:29:c0:f4:
15:ac:e8:9c:f1:bc:9d:cc:98:b2:d3:93:e4:af:5f:
10:89:9f:6d:71:dc:45:05:20:af:65:86:3b:79:e4:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:98:C1:4B:96:74:E8:49:5D:57:73:D9:66:8C:1E:F2:6B:88:AC
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c7:5b:62:da:a1:f8:e0:d3:63:ad:4e:36:e4:de:d1:af:f7:
02:37:d2:d4:37:94:fd:aa:43:de:e2:66:88:d9:25:e4:87:8e:
48:03:f4:5e:73:e8:a8:d1:d3:44:ba:90:ba:31:41:76:9e:6c:
10:b4:9f:b3:10:3d:95:79:eb:69:94:e4:b1:b7:0f:ba:2c:09:
c1:7d:39:52:df:8d:63:d5:dd:37:d6:e8:26:bb:df:63:9f:4d:
51:ac:f0:93:ee:9d:cf:82:a7:1e:b3:ea:86:7d:c2:bf:2b:4e:
1b:31:95:ed:4b:2e:89:95:bd:d6:79:92:a0:47:4c:34:c8:35:
ef:55:52:fe:33:79:2c:87:b1:3d:7f:60:29:b9:c7:25:b0:70:
5e:f1:75:0a:de:52:9e:4e:35:fc:83:dd:90:01:c0:12:45:ea:
0f:f2:80:0c:c9:66:ef:73:bd:cb:ad:e5:ac:b2:75:51:b5:67:
81:df:d2:4b:28:d8:85:2e:da:07:7c:37:b7:28:94:52:31:66:
ab:c9:e5:98:1d:a5:f6:2e:5f:07:e3:0a:0e:a3:23:9e:5e:72:
2c:0f:e4:ff:36:19:3c:0a:3f:4c:d0:10:5b:11:e3:4e:61:ea:
d7:6f:96:c7:55:5a:64:fd:31:a0:01:ac:64:ff:77:85:19:be:
0c:88:85:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5i8vUyfHRXkVOqgsgVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MWM4ZTJiMDBhM2Q1OTU3ZDQxMTJkYWYzNWI2NmU0Mjkz
NzU1MDUwHhcNMjYwMzI2MDYwMTE2WhcNMjYwMzI3MDYwMTE2WjAzMTEwLwYDVQQD
EygxNmU5OThjMTRiOTY3NGU4NDk1ZDU3NzNkOTY2OGMxZWYyNmI4OGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGhzHFmhb3Ga8IzWIvLpgEc3cPQ7
1uhFfS9iFzvgsQiYbvnz6eirzaxUf90HduQHrJOmLo3Sf7IPFJVbK3a8Tj2l3VXa
Vuk/hh9E+z9nYJ1ATV60rRBHjZvMj+RhHRNitvdrwtoJ8HsJLxU4ugvN9COB8NdW
EhWlcC8KDGHGyzfvjcbVQkk2NKpvOnIc9WW2ll6OfpYsmU7bgckOoNdRBPNWb957
sAoghb/jNYbH8aq5+zqPvcgOyQfPCLp4NQwQqQRlxChD74H+G4beUAsosOSrNHgQ
+p3bIx4qtiEpwPQVrOic8bydzJiy05Pkr18QiZ9tcdxFBSCvZYY7eeQj4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbpmMFLlnToSV1Xc9lmjB7ya4isMB8GA1UdIwQY
MBaAFCYcjisAo9WVfUES2vNbZuQpN1UFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAt
Mjk4ODM4NTU2ZDA5LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAtMjk4ODM4NTU2ZDA5
LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsdbYtqh
+ODTY61ONuTe0a/3AjfS1DeU/apD3uJmiNkl5IeOSAP0XnPoqNHTRLqQujFBdp5s
ELSfsxA9lXnraZTksbcPuiwJwX05Ut+NY9XdN9boJrvfY59NUazwk+6dz4KnHrPq
hn3CvytOGzGV7UsuiZW91nmSoEdMNMg171VS/jN5LIexPX9gKbnHJbBwXvF1Ct5S
nk41/IPdkAHAEkXqD/KADMlm73O9y63lrLJ1UbVngd/SSyjYhS7aB3w3tyiUUjFm
q8nlmB2l9i5fB+MKDqMjnl5yLA/k/zYZPAo/TNAQWxHjTmHq12+Wx1VaZP0xoAGs
ZP93hRm+DIiFvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:15 2026 by rpki-client