Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
File: jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json)
Hash identifier: ExEYwD1EAkOJMKH6a/VwI3KxXpLQfUDLe1XdWWugg8E=
Subject key identifier: D4:B3:DE:82:01:6D:D7:12:99:73:28:E8:E8:DD:B6:65:5C:F5:74:F1
Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
Certificate issuer: /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Certificate serial: 019D2AE1553B3D034BA1E35CBD880F0E4D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
Manifest number: 05E1
Signing time: Thu 26 Mar 2026 16:01:43 +0000
Manifest this update: Thu 26 Mar 2026 16:01:43 +0000
Manifest next update: Fri 27 Mar 2026 16:01:43 +0000
Files and hashes: 1: JF2M2FVJChHXjaz4-iqzuiKT9hQ.roa (hash: ozsUgi55PqXrZMHU8/mL25nms4xgRUsWssZu7r5ne60=)
2: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: 0iGfqorFfw7XpQTvu80jq4WgkZH6pfRH/uutk6YAlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:55:3b:3d:03:4b:a1:e3:5c:bd:88:0f:0e:4d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Validity
Not Before: Mar 26 16:01:43 2026 GMT
Not After : Mar 27 16:01:43 2026 GMT
Subject: CN=d4b3de82016dd712997328e8e8ddb6655cf574f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:13:d0:5a:59:6e:5e:8a:01:30:ec:22:8e:
23:37:ac:75:41:e6:8a:f1:ea:87:40:a4:ce:59:37:
55:d5:6a:b8:dc:e8:d2:2f:46:4b:3f:b1:a1:e7:e7:
ee:24:6a:ba:df:3b:62:63:03:21:84:31:9c:b1:61:
70:36:cc:95:71:1e:e9:6b:36:b9:f6:25:44:d7:63:
4f:42:77:bf:a2:fa:46:2b:5e:77:02:69:5a:16:cd:
09:c3:26:a6:81:57:c2:e2:67:1b:56:82:32:83:b3:
cf:de:4f:e0:17:61:b7:64:52:d9:a7:e5:92:72:66:
e4:fc:23:93:f8:12:77:93:b1:e8:12:56:8b:58:77:
b0:1d:26:ef:b2:9a:d2:75:a3:74:eb:9a:4e:cb:bb:
12:cd:91:29:5a:e3:b6:9b:a7:c8:29:b6:07:df:bc:
3b:6a:83:98:79:ac:09:16:83:4f:73:61:cb:94:df:
89:3b:b5:19:5c:5b:9b:58:d6:97:f5:02:a2:eb:4b:
7d:b7:97:c4:c8:1e:c4:d0:5b:c6:66:4c:98:64:04:
78:84:3c:09:19:08:e3:fa:6b:82:fe:e6:98:06:ce:
a1:d7:d3:02:e7:20:42:d7:fa:11:6e:7d:f3:fe:2e:
80:4e:df:1e:ee:f2:9f:8a:67:9a:21:2f:c9:00:81:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:DE:82:01:6D:D7:12:99:73:28:E8:E8:DD:B6:65:5C:F5:74:F1
X509v3 Authority Key Identifier:
keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:85:93:35:d9:95:0b:2e:6b:a6:fc:02:53:4d:3a:e7:5d:
bb:74:fd:14:21:6d:d3:68:de:11:88:6e:e3:ba:ea:93:f8:d8:
47:52:1d:e4:5d:d3:20:87:e4:fa:12:70:78:c2:8a:9f:38:b5:
3e:d0:10:55:69:a1:f0:af:0f:89:84:84:c7:d2:dd:68:6c:f8:
36:83:92:6e:37:32:e3:fe:67:74:20:da:a7:5c:dd:cb:4a:7d:
fd:62:a1:f3:61:cd:6b:68:03:9e:d2:92:be:26:cc:38:81:30:
da:41:c1:60:67:97:2b:e0:8b:d4:21:64:0d:13:b2:01:f1:50:
a7:71:0c:90:3a:4d:30:0a:df:f1:8a:c0:30:8a:88:5a:d4:4a:
e2:09:c8:00:59:04:f8:36:f2:b4:67:14:4a:1d:a1:f4:b6:60:
e2:19:a0:b1:10:8f:3f:3f:66:01:25:66:a4:57:d7:9d:0c:45:
5b:25:e9:22:eb:15:b5:e1:4e:02:1c:6e:e0:0e:a3:1f:24:44:
d9:19:65:dc:7d:a5:c5:40:1f:31:35:56:ff:5c:c3:2f:6c:a4:
16:32:30:67:90:94:cf:46:de:1a:de:a6:5f:52:8e:2c:3b:53:
f3:cd:11:e4:b3:10:56:fd:0a:46:b9:ba:b1:1a:36:a6:03:b1:
9d:66:3a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4VU7PQNLoeNcvYgPDk1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWY0ZTgyZGJhODAyMzk5OWVmYmRhZDM0YjI3MWExZjQ4
OTJlOWUwHhcNMjYwMzI2MTYwMTQzWhcNMjYwMzI3MTYwMTQzWjAzMTEwLwYDVQQD
EyhkNGIzZGU4MjAxNmRkNzEyOTk3MzI4ZThlOGRkYjY2NTVjZjU3NGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFkT0FpZbl6KATDsIo4jN6x1QeaK
8eqHQKTOWTdV1Wq43OjSL0ZLP7Gh5+fuJGq63ztiYwMhhDGcsWFwNsyVcR7paza5
9iVE12NPQne/ovpGK153AmlaFs0JwyamgVfC4mcbVoIyg7PP3k/gF2G3ZFLZp+WS
cmbk/COT+BJ3k7HoElaLWHewHSbvsprSdaN065pOy7sSzZEpWuO2m6fIKbYH37w7
aoOYeawJFoNPc2HLlN+JO7UZXFubWNaX9QKi60t9t5fEyB7E0FvGZkyYZAR4hDwJ
GQjj+muC/uaYBs6h19MC5yBC1/oRbn3z/i6ATt8e7vKfimeaIS/JAIEK4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSz3oIBbdcSmXMo6OjdtmVc9XTxMB8GA1UdIwQY
MBaAFI2fToLbqAI5me+9rTSycaH0iS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMt
ZmJkOWZlYjBmMTNjLzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hNjY0OTEtZmZiMC00YTQyLWJhMTMtZmJkOWZlYjBmMTNj
LzEvalo5T2d0dW9Bam1aNzcydE5MSnhvZlNKTHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmKFkzXZ
lQsua6b8AlNNOuddu3T9FCFt02jeEYhu47rqk/jYR1Id5F3TIIfk+hJweMKKnzi1
PtAQVWmh8K8PiYSEx9LdaGz4NoOSbjcy4/5ndCDap1zdy0p9/WKh82HNa2gDntKS
vibMOIEw2kHBYGeXK+CL1CFkDROyAfFQp3EMkDpNMArf8YrAMIqIWtRK4gnIAFkE
+DbytGcUSh2h9LZg4hmgsRCPPz9mASVmpFfXnQxFWyXpIusVteFOAhxu4A6jHyRE
2Rll3H2lxUAfMTVW/1zDL2ykFjIwZ5CUz0beGt6mX1KOLDtT880R5LMQVv0KRrm6
sRo2pgOxnWY6iw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:03 2026 by rpki-client