Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: YTZPhrOvbN+TNgw8E3BMDSssbhHe6n53CNCIv7ILc4A=
Subject key identifier: 51:A1:D2:CD:9D:11:EB:67:F8:A7:8F:CF:9C:87:2F:B5:F2:75:A2:23
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 019D284D4BA8A41332BEC3C87B73EE094AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 142A
Signing time: Thu 26 Mar 2026 04:00:47 +0000
Manifest this update: Thu 26 Mar 2026 04:00:47 +0000
Manifest next update: Fri 27 Mar 2026 04:00:47 +0000
Files and hashes: 1: IbKyp9_Uukax1Q8ZI-K3vY0ooZQ.roa (hash: gTefC/kLKJlQRjCqhwo1qEZQvhe2YWlgNO1XB76+Uz8=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: gQZdxMFMYYFFDgJxg9uRvJizS7NmgZFHUG1eukMf4DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4b:a8:a4:13:32:be:c3:c8:7b:73:ee:09:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Mar 26 04:00:47 2026 GMT
Not After : Mar 27 04:00:47 2026 GMT
Subject: CN=51a1d2cd9d11eb67f8a78fcf9c872fb5f275a223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:3c:3d:37:23:70:61:b0:b2:51:89:a8:21:
42:57:b9:51:83:cf:f8:0d:3f:ee:bf:1b:2d:7e:f2:
7c:5c:a9:c9:29:2b:f2:33:65:be:81:15:ea:e9:bc:
3a:9d:4e:e2:2e:4a:6b:7c:85:88:65:42:2e:f1:69:
e6:9f:29:cc:49:da:74:b5:b0:bd:30:7e:3b:dc:e9:
48:da:73:61:bd:2f:28:35:77:b9:20:99:de:5d:13:
93:87:f4:ab:45:ff:bc:e6:d5:08:9d:ca:92:b9:cf:
b1:b0:c2:27:83:10:80:fa:89:9a:91:b8:69:99:33:
5c:4c:37:8d:b2:11:a9:0f:25:f6:48:2c:f3:b5:b0:
d0:f8:3c:db:f6:50:56:29:5f:63:c5:d0:5c:ca:0c:
16:ac:1b:3c:b4:79:ab:a1:54:a1:84:5f:df:69:d1:
26:13:e1:fd:13:b2:0c:d5:da:9d:e8:8c:c6:d3:51:
78:2b:00:8f:b2:6f:1c:6f:ec:fa:2e:fb:22:61:f9:
a7:30:86:3f:68:16:0a:63:bf:f9:90:58:63:30:c2:
59:15:30:a7:72:e6:53:de:63:b2:b3:8e:ae:d8:98:
82:8a:9d:95:0c:79:bf:f3:62:69:9b:30:be:76:3d:
88:2e:81:cf:eb:51:89:9b:75:4f:4d:37:f7:24:d6:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A1:D2:CD:9D:11:EB:67:F8:A7:8F:CF:9C:87:2F:B5:F2:75:A2:23
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:df:d2:96:73:f8:e4:bb:eb:b6:4e:fd:b9:6a:7d:4d:4b:b9:
96:e0:9a:91:2b:b4:ec:c6:ce:3a:59:e3:84:b8:02:6f:2e:26:
0a:f7:81:63:0a:7c:81:d0:38:84:aa:ba:1b:6e:b1:4b:f1:4b:
fc:55:3f:1d:b3:38:25:31:b6:6a:db:df:7c:97:57:bf:9f:73:
d1:15:18:5a:77:c9:1b:96:aa:12:9c:d8:bc:a7:c5:88:13:fe:
36:71:ae:bb:9a:d7:33:dd:f9:b3:7e:14:75:f5:58:65:94:0c:
4e:4b:2e:ad:e3:11:13:d1:42:5a:41:00:9d:06:8b:4c:5e:d4:
0b:e7:74:82:13:b3:04:93:e8:63:11:b9:32:89:27:c2:9e:b4:
92:7a:43:77:f0:4a:f2:9e:7b:9c:51:5f:10:f1:cd:20:de:d0:
c5:33:ad:5a:f5:67:ae:73:ce:88:47:79:b3:96:65:91:df:64:
cc:19:16:bb:db:49:37:23:1b:33:6c:eb:bc:3f:3b:23:aa:8c:
be:79:92:4c:0a:19:ef:d3:80:fd:97:a3:b2:4f:80:48:ba:df:
d6:46:60:aa:9a:dd:27:3a:7e:f1:2f:c3:32:85:e7:c4:f4:e7:
72:45:06:8d:fa:16:52:8f:08:7a:d0:34:ad:14:ae:e5:e1:83:
0b:e9:0b:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTUuopBMyvsPIe3PuCUr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZjBiMGI0NmEwOGQxZTcwZmNiZGQ4NzdhZDkzOWEwMTMy
ZTEyNjkwHhcNMjYwMzI2MDQwMDQ3WhcNMjYwMzI3MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg1MWExZDJjZDlkMTFlYjY3ZjhhNzhmY2Y5Yzg3MmZiNWYyNzVhMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7k8PTcjcGGwslGJqCFCV7lRg8/4
DT/uvxstfvJ8XKnJKSvyM2W+gRXq6bw6nU7iLkprfIWIZUIu8WnmnynMSdp0tbC9
MH473OlI2nNhvS8oNXe5IJneXROTh/SrRf+85tUIncqSuc+xsMIngxCA+omakbhp
mTNcTDeNshGpDyX2SCzztbDQ+Dzb9lBWKV9jxdBcygwWrBs8tHmroVShhF/fadEm
E+H9E7IM1dqd6IzG01F4KwCPsm8cb+z6LvsiYfmnMIY/aBYKY7/5kFhjMMJZFTCn
cuZT3mOys46u2JiCip2VDHm/82JpmzC+dj2ILoHP61GJm3VPTTf3JNaNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGh0s2dEetn+KePz5yHL7XydaIjMB8GA1UdIwQY
MBaAFIzwsLRqCNHnD8vdh3rZOaATLhJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2Yt
OGYxODFkM2EzZThmLzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2YtOGYxODFkM2EzZThm
LzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9/SlnP4
5Lvrtk79uWp9TUu5luCakSu07MbOOlnjhLgCby4mCveBYwp8gdA4hKq6G26xS/FL
/FU/HbM4JTG2atvffJdXv59z0RUYWnfJG5aqEpzYvKfFiBP+NnGuu5rXM935s34U
dfVYZZQMTksureMRE9FCWkEAnQaLTF7UC+d0ghOzBJPoYxG5Moknwp60knpDd/BK
8p57nFFfEPHNIN7QxTOtWvVnrnPOiEd5s5Zlkd9kzBkWu9tJNyMbM2zrvD87I6qM
vnmSTAoZ79OA/Zejsk+ASLrf1kZgqprdJzp+8S/DMoXnxPTnckUGjfoWUo8IetA0
rRSu5eGDC+kLiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:50:55 2026 by rpki-client