Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: xez4u4abbncFYhnRW19xq6siQB+O6NkuhLEBGzB1Zto=
Subject key identifier: CB:88:21:4E:08:2A:19:38:D2:C1:AD:DE:42:A3:01:49:D5:55:D1:34
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019D2704D070371F53534D5829864A0EACD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0C7A
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: bMET0vgbMSpak17KuCwZIPjOPiA.asa (hash: gPoFxfWrrJ7T/UwOlotNIRMMkTMt1S7z/4qqFihH3N0=)
2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: MiMmhyn5PPREHsJGNpmHOfwlfEDr2B0GtCVd06AOtho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d0:70:37:1f:53:53:4d:58:29:86:4a:0e:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=cb88214e082a1938d2c1adde42a30149d555d134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:12:2f:33:c5:87:c2:e1:1d:18:8a:62:c9:
69:77:cd:0c:d9:34:a7:b6:af:65:94:30:16:8f:a5:
31:81:8e:58:74:ff:eb:5e:74:26:49:2d:27:7f:2d:
b1:40:62:ec:a3:b1:44:d8:83:7c:57:59:f8:67:5f:
18:d0:8b:42:a5:74:8d:4c:6d:0b:8c:7b:91:e8:55:
1f:c2:06:00:c8:09:81:8b:a8:f6:9c:81:cd:11:1f:
4d:ee:19:12:c2:15:f1:d2:7d:8a:a1:8f:f6:d8:f9:
25:f6:91:5e:9d:96:43:33:9f:ef:c3:3b:e9:56:b9:
e3:4f:c0:7b:ab:e9:09:6e:02:75:3b:1b:fd:64:1c:
71:82:91:d3:23:28:78:f8:fd:fd:e5:3a:40:80:eb:
ea:b7:67:d1:1b:b2:43:d0:c8:5f:67:ac:35:5f:96:
10:fc:a0:f4:7a:a9:18:e8:8c:99:7e:24:ed:9f:a0:
00:7a:e9:69:e5:e4:30:a7:36:94:55:93:c6:78:9e:
4a:47:2f:aa:71:19:d4:2a:23:77:f4:87:ff:43:ea:
82:af:a0:c1:c4:d5:d6:72:af:03:94:bb:a3:b2:c6:
8a:1f:2a:23:66:b6:7e:85:74:c9:57:69:9e:9f:43:
11:59:b8:29:16:64:1b:e0:b9:99:61:13:3e:54:ce:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:21:4E:08:2A:19:38:D2:C1:AD:DE:42:A3:01:49:D5:55:D1:34
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5d:94:81:c4:ac:72:de:c6:a2:ab:a9:fa:8a:a8:8b:df:e2:
c5:6e:07:44:74:19:f9:98:3e:cb:31:b1:18:a1:3b:e2:45:19:
86:c5:3a:1b:2d:62:a4:d2:8d:74:c8:ab:d8:67:07:04:98:87:
ed:20:68:c4:54:e4:8a:bf:12:1a:62:00:2b:f4:1f:4f:2f:f2:
f3:43:8e:4b:88:2e:8f:51:d9:a1:51:d0:f5:6f:37:8b:f0:2b:
4d:a0:e8:85:0c:ce:c6:43:0e:2d:9a:4c:70:02:bd:57:2e:84:
9a:de:25:54:12:77:1d:5f:00:9d:81:f7:ad:2b:d5:6e:b6:e3:
5c:6c:e1:3b:94:13:27:84:c7:64:e6:4f:5f:1e:39:c2:da:9d:
24:cc:ef:d7:c1:85:73:78:97:af:9d:42:b0:53:f7:42:4f:79:
c0:e7:22:6f:27:fe:0c:73:e6:17:7b:55:75:de:ed:d1:cb:09:
3c:84:10:bd:b8:c6:dc:71:f3:d1:a1:15:1e:1d:5d:ff:5c:8f:
03:43:f0:97:60:14:b9:ab:a2:a5:a9:03:60:f7:17:8f:0e:b7:
8c:bd:61:39:a0:11:fd:6b:dc:21:14:01:88:db:a3:1c:11:b4:
b7:82:f2:52:9d:36:d3:60:90:76:3f:c1:7e:1e:e6:8a:97:7d:
f1:f4:5c:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNBwNx9TU01YKYZKDqzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMWU3MjBmZDc1ZGQ2MDEzNDViOTg3NmFlYTdmOTFhYjQ0
NmQ0N2YwHhcNMjYwMzI1MjIwMjAwWhcNMjYwMzI2MjIwMjAwWjAzMTEwLwYDVQQD
EyhjYjg4MjE0ZTA4MmExOTM4ZDJjMWFkZGU0MmEzMDE0OWQ1NTVkMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsioSLzPFh8LhHRiKYslpd80M2TSn
tq9llDAWj6UxgY5YdP/rXnQmSS0nfy2xQGLso7FE2IN8V1n4Z18Y0ItCpXSNTG0L
jHuR6FUfwgYAyAmBi6j2nIHNER9N7hkSwhXx0n2KoY/22Pkl9pFenZZDM5/vwzvp
VrnjT8B7q+kJbgJ1Oxv9ZBxxgpHTIyh4+P395TpAgOvqt2fRG7JD0MhfZ6w1X5YQ
/KD0eqkY6IyZfiTtn6AAeulp5eQwpzaUVZPGeJ5KRy+qcRnUKiN39If/Q+qCr6DB
xNXWcq8DlLujssaKHyojZrZ+hXTJV2men0MRWbgpFmQb4LmZYRM+VM7UjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuIIU4IKhk40sGt3kKjAUnVVdE0MB8GA1UdIwQY
MBaAFIwecg/XXdYBNFuYdq6n+Rq0RtR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYt
NDkxZmU3YWNjMWE5LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYtNDkxZmU3YWNjMWE5
LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAol2UgcSs
ct7Goqup+oqoi9/ixW4HRHQZ+Zg+yzGxGKE74kUZhsU6Gy1ipNKNdMir2GcHBJiH
7SBoxFTkir8SGmIAK/QfTy/y80OOS4guj1HZoVHQ9W83i/ArTaDohQzOxkMOLZpM
cAK9Vy6Emt4lVBJ3HV8AnYH3rSvVbrbjXGzhO5QTJ4THZOZPXx45wtqdJMzv18GF
c3iXr51CsFP3Qk95wOcibyf+DHPmF3tVdd7t0csJPIQQvbjG3HHz0aEVHh1d/1yP
A0Pwl2AUuauipakDYPcXjw63jL1hOaAR/WvcIRQBiNujHBG0t4LyUp0202CQdj/B
fh7mipd98fRcOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:12:34 2026 by rpki-client