Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
File: jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json)
Hash identifier: hWaxNTigmxgLNsvTWEPrLRV795G434RPGFJihJyJlS8=
Subject key identifier: 6F:0A:79:56:00:E7:00:E7:23:91:31:E4:25:7D:92:A4:0D:24:0C:68
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Certificate issuer: /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial: 019D2583CB0D866AEE33458A9195E3015357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 15:01:27 +0000
Manifest this update: Wed 25 Mar 2026 15:01:27 +0000
Manifest next update: Thu 26 Mar 2026 15:01:27 +0000
Files and hashes: 1: 4bTXmGhsxtuFXj4LFcQly9l8q-g.roa (hash: vtBxAeTUSDqb7QyMrleFLdTGUG4t5qmz9DhHOiNE2wM=)
2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: d2ZNMtVQ6O39tJNF0zOPBA3CBdqBZu3Hu8ioJLN+cqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:cb:0d:86:6a:ee:33:45:8a:91:95:e3:01:53:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Validity
Not Before: Mar 25 15:01:27 2026 GMT
Not After : Mar 26 15:01:27 2026 GMT
Subject: CN=6f0a795600e700e7239131e4257d92a40d240c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:8e:b2:6d:97:96:9f:77:84:1a:2c:52:6c:
61:de:25:bc:f2:65:9a:2a:1b:c9:a4:c9:e1:ea:2d:
54:15:e9:f2:25:f3:ce:56:4a:70:5d:bb:ea:78:eb:
98:86:1e:61:f0:d5:9a:0c:fe:4e:27:0a:fa:fb:09:
83:78:b7:44:50:26:58:d5:86:c7:0a:73:65:97:b6:
fa:dc:35:97:48:19:b7:35:b0:16:07:99:d2:7a:f0:
02:d4:a5:6b:79:4c:7a:86:1c:9d:dc:ab:af:a2:94:
5f:80:46:f6:50:0c:56:a3:01:b1:86:94:35:02:83:
b8:26:38:54:39:fe:7f:25:92:40:59:64:6b:fa:03:
a3:b0:7e:be:b6:60:17:25:59:3a:30:e4:0d:74:e4:
93:8d:24:aa:b8:1b:e1:87:c2:1f:ea:6a:39:74:c0:
4b:e8:d8:36:04:70:ba:33:76:16:75:7b:49:5e:80:
92:23:66:da:3c:8e:c0:70:05:e5:7d:8c:66:1c:2c:
d3:73:ca:e3:57:c8:5a:fb:10:85:cf:f3:e7:40:a3:
37:b7:d9:67:4e:9f:56:ea:86:68:da:cd:91:9b:2e:
bb:61:18:62:33:96:77:2f:e6:97:40:f9:9b:bd:ae:
39:8f:c4:55:32:81:c8:a9:a7:32:df:18:6d:cf:a6:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:79:56:00:E7:00:E7:23:91:31:E4:25:7D:92:A4:0D:24:0C:68
X509v3 Authority Key Identifier:
keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:fc:e6:7d:07:8f:54:59:1a:91:cb:ae:03:8e:98:03:04:
a1:bd:96:c1:ef:5b:70:69:7b:a5:48:59:2c:be:7e:78:07:2f:
34:d0:af:5c:94:8b:c6:df:37:ce:72:64:70:5f:30:1f:1b:87:
29:3a:db:31:dc:38:40:09:53:9a:1d:8f:98:7f:61:f2:39:a1:
bf:ed:66:02:85:54:57:7e:40:e7:be:86:69:00:25:78:1b:25:
bf:43:f8:e2:cf:51:b9:2a:f9:26:28:86:9c:09:84:c4:03:5d:
e1:36:06:ba:90:0d:36:0c:af:10:ee:9f:8c:3f:e2:56:48:14:
7c:f1:93:d4:ff:45:81:ad:8f:16:d7:b0:68:70:f3:57:a7:96:
55:46:fa:86:83:73:19:bd:87:25:28:31:14:22:f1:a4:6f:2b:
e1:26:da:d4:4f:ec:07:0a:29:e9:dc:7d:46:d4:38:af:10:38:
b6:e6:eb:ee:56:5f:b6:24:81:39:3c:b8:e7:45:7f:fb:48:4e:
8e:78:93:cb:2b:67:7c:ef:d6:69:da:bd:5c:53:d8:7e:14:61:
5f:72:91:d9:b8:ae:fb:47:e4:4f:15:57:58:ee:ba:d7:00:6e:
9e:20:30:8d:e7:80:26:5a:04:cc:68:c8:05:c6:23:9c:04:90:
4f:5c:53:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg8sNhmruM0WKkZXjAVNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2FlZTM1NTlmY2MzMWJmZWQ3N2VlY2U4Yjc0NzljOGU4
NTZhNWIwHhcNMjYwMzI1MTUwMTI3WhcNMjYwMzI2MTUwMTI3WjAzMTEwLwYDVQQD
Eyg2ZjBhNzk1NjAwZTcwMGU3MjM5MTMxZTQyNTdkOTJhNDBkMjQwYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5qOsm2Xlp93hBosUmxh3iW88mWa
KhvJpMnh6i1UFenyJfPOVkpwXbvqeOuYhh5h8NWaDP5OJwr6+wmDeLdEUCZY1YbH
CnNll7b63DWXSBm3NbAWB5nSevAC1KVreUx6hhyd3KuvopRfgEb2UAxWowGxhpQ1
AoO4JjhUOf5/JZJAWWRr+gOjsH6+tmAXJVk6MOQNdOSTjSSquBvhh8If6mo5dMBL
6Ng2BHC6M3YWdXtJXoCSI2baPI7AcAXlfYxmHCzTc8rjV8ha+xCFz/PnQKM3t9ln
Tp9W6oZo2s2Rmy67YRhiM5Z3L+aXQPmbva45j8RVMoHIqacy3xhtz6Z9FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8KeVYA5wDnI5Ex5CV9kqQNJAxoMB8GA1UdIwQY
MBaAFI567jVZ/MMb/td+7Oi3R5yOhWpbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDct
OTExNjBiYjRjNjU5LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDctOTExNjBiYjRjNjU5
LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrn85n0H
j1RZGpHLrgOOmAMEob2Wwe9bcGl7pUhZLL5+eAcvNNCvXJSLxt83znJkcF8wHxuH
KTrbMdw4QAlTmh2PmH9h8jmhv+1mAoVUV35A576GaQAleBslv0P44s9RuSr5JiiG
nAmExANd4TYGupANNgyvEO6fjD/iVkgUfPGT1P9Fga2PFtewaHDzV6eWVUb6hoNz
Gb2HJSgxFCLxpG8r4Sba1E/sBwop6dx9RtQ4rxA4tubr7lZftiSBOTy450V/+0hO
jniTyytnfO/Wadq9XFPYfhRhX3KR2biu+0fkTxVXWO661wBuniAwjeeAJloEzGjI
BcYjnASQT1xTrw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:46 2026 by rpki-client