Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: UJ0QncQ7EGB5s3AsAoR2fo/MIy3l7kwyu7QrL1dpyr4=
Subject key identifier: AC:27:A3:03:04:12:08:9F:0C:C3:5E:06:B0:BA:31:AE:E5:86:E0:DC
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 019D329A057C5E5AB4FBC449551A8C1F47CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 1860
Signing time: Sat 28 Mar 2026 04:00:47 +0000
Manifest this update: Sat 28 Mar 2026 04:00:47 +0000
Manifest next update: Sun 29 Mar 2026 04:00:47 +0000
Files and hashes: 1: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (hash: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: VBjc9OE3amFdsWPKWkuVxTT3hQqEolY/yqgI2Pf6rQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:05:7c:5e:5a:b4:fb:c4:49:55:1a:8c:1f:47:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Mar 28 04:00:47 2026 GMT
Not After : Mar 29 04:00:47 2026 GMT
Subject: CN=ac27a3030412089f0cc35e06b0ba31aee586e0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:08:7e:53:89:24:a8:3d:54:4e:b7:40:5c:
9f:31:64:5b:6d:5a:9e:fb:2d:a9:3b:d2:01:af:bf:
08:23:da:1d:7d:50:1d:49:a3:01:9b:f0:70:84:65:
62:cd:6c:f1:29:d9:44:7b:c5:69:d5:c3:04:b3:ea:
60:ab:4b:1f:ea:a3:18:f8:0d:5f:3e:3c:49:c7:b3:
51:28:fb:5a:9e:b7:48:2d:9b:a3:2c:15:90:ae:e6:
46:cb:7b:36:f1:e5:ad:8c:db:9b:06:51:e1:29:22:
35:31:3e:94:4d:81:c8:2c:14:be:f1:85:fd:6f:48:
aa:45:f9:bd:f5:44:a5:c5:bb:80:bd:4c:32:7b:e1:
0d:77:ce:3a:ac:c1:85:be:98:24:9a:da:21:77:a0:
41:be:ef:2d:43:6c:6b:cb:5a:92:80:78:68:80:ce:
73:32:9d:9a:26:73:18:97:db:ff:55:27:33:6a:9d:
78:02:0e:4d:9a:ab:83:42:73:c5:7e:23:91:1f:f3:
b1:eb:19:25:7d:8a:2d:56:b1:49:4d:3d:f7:11:90:
2f:af:60:db:a0:bf:67:17:83:7e:f5:d1:3c:67:2e:
0e:bb:32:c9:e1:bd:92:d2:7e:04:f4:4b:23:21:ab:
3e:01:93:b7:ba:29:d3:29:9e:28:2a:b6:77:ce:1f:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:A3:03:04:12:08:9F:0C:C3:5E:06:B0:BA:31:AE:E5:86:E0:DC
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:63:9d:ee:c6:e9:b4:23:cc:36:3f:82:fa:f4:a7:19:af:f7:
a0:98:c7:4a:16:c5:2f:bb:86:66:ea:3d:0c:e4:db:d7:62:9a:
e5:34:cb:23:ae:e2:d9:7c:31:43:96:09:c1:f3:ca:2c:31:77:
42:2e:13:12:e7:9c:11:a5:d5:d4:5d:e7:e4:74:b8:9e:0d:2b:
97:4e:b0:1d:97:07:c5:38:c9:b5:a5:84:00:b3:27:b0:dd:6a:
0e:5e:ba:6c:ef:d1:ce:bc:0f:86:c3:b2:d6:f8:ff:50:45:e9:
30:d7:c6:45:ff:dd:ee:e2:97:8a:90:cd:89:62:57:4c:82:71:
69:0a:76:85:29:c1:f8:0a:be:9f:d1:45:50:2a:a3:7f:fa:de:
a2:dd:b0:06:05:4c:18:22:33:18:a6:35:85:1c:65:70:82:86:
6b:2e:16:46:5e:fa:d2:bb:2d:6b:d6:14:c5:71:a0:ea:cd:a7:
01:e9:b2:1c:a0:b3:2f:4c:da:97:2c:ae:6a:27:61:a8:e0:da:
72:f2:cc:79:88:ed:3c:25:1f:e2:18:ea:30:69:88:e1:c7:d5:
5f:4e:ce:1f:6b:3b:8b:d2:d4:30:ca:34:44:0b:ac:78:a9:84:
cb:4e:d7:11:79:74:34:8f:52:09:cd:49:cb:e4:95:f2:46:73:
ec:63:4d:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymgV8Xlq0+8RJVRqMH0fPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzYxMTcxMzVmNmI4NmQwYTllMWZhNjdlMDRiYWY1YmNk
ODYxNjkwHhcNMjYwMzI4MDQwMDQ3WhcNMjYwMzI5MDQwMDQ3WjAzMTEwLwYDVQQD
EyhhYzI3YTMwMzA0MTIwODlmMGNjMzVlMDZiMGJhMzFhZWU1ODZlMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YUIflOJJKg9VE63QFyfMWRbbVqe
+y2pO9IBr78II9odfVAdSaMBm/BwhGVizWzxKdlEe8Vp1cMEs+pgq0sf6qMY+A1f
PjxJx7NRKPtanrdILZujLBWQruZGy3s28eWtjNubBlHhKSI1MT6UTYHILBS+8YX9
b0iqRfm99USlxbuAvUwye+ENd846rMGFvpgkmtohd6BBvu8tQ2xry1qSgHhogM5z
Mp2aJnMYl9v/VSczap14Ag5NmquDQnPFfiORH/Ox6xklfYotVrFJTT33EZAvr2Db
oL9nF4N+9dE8Zy4OuzLJ4b2S0n4E9EsjIas+AZO3uinTKZ4oKrZ3zh+ZYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwnowMEEgifDMNeBrC6Ma7lhuDcMB8GA1UdIwQY
MBaAFI42EXE19rhtCp4fpn4EuvW82GFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUt
Yzg1YjYwZmQ4YzhiLzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZGI0ZDMtMzNjOC00NWRjLWE0MGUtYzg1YjYwZmQ4Yzhi
LzEvampZUmNUWDJ1RzBLbmgtbWZnUzY5YnpZWVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2Od7sbp
tCPMNj+C+vSnGa/3oJjHShbFL7uGZuo9DOTb12Ka5TTLI67i2XwxQ5YJwfPKLDF3
Qi4TEuecEaXV1F3n5HS4ng0rl06wHZcHxTjJtaWEALMnsN1qDl66bO/RzrwPhsOy
1vj/UEXpMNfGRf/d7uKXipDNiWJXTIJxaQp2hSnB+Aq+n9FFUCqjf/reot2wBgVM
GCIzGKY1hRxlcIKGay4WRl760rsta9YUxXGg6s2nAemyHKCzL0zalyyuaidhqODa
cvLMeYjtPCUf4hjqMGmI4cfVX07OH2s7i9LUMMo0RAuseKmEy07XEXl0NI9SCc1J
y+SV8kZz7GNNCQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:29 2026 by rpki-client