Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File: jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier: lPgNmpJHkC014/ol4nEC58IdXlzRfK2vsoEwV+1OUXM=
Subject key identifier: E9:B1:83:2C:32:C3:3C:37:21:47:4B:2C:E9:6A:1A:C0:E9:7F:7F:3F
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 019D270496B44D743084245F20ECA0B12E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number: 0A23
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: DSk3FFy5gvsaRRg3bB7ZK-jhcAA.roa (hash: agD/2aG2MKwnSsEi4KQWHy0PJS0DxUvEeAaH6juJCD4=)
2: aS0hnguB3wClSQpmYD5FzYEMPg0.roa (hash: 31GWKlXGu0Qmox7TLiPrHYDKyJ/J1v6CE/ERUrNKaLk=)
3: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: 90hqJ8FJ6OqSHeDmuI41ZaPZ+dRo2Agzj2JgR7Fk7pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:96:b4:4d:74:30:84:24:5f:20:ec:a0:b1:2e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=e9b1832c32c33c3721474b2ce96a1ac0e97f7f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:b1:44:fc:dc:17:34:1e:e2:9e:00:26:2d:
a5:73:43:65:41:ef:1d:9a:af:c4:ab:30:9a:bf:a7:
73:4c:39:6f:e9:f2:9f:af:df:99:77:cd:37:eb:d7:
8d:aa:64:ce:5b:df:f6:46:ad:52:a0:40:c2:6f:1e:
f7:56:7e:61:db:17:5c:ba:f4:7e:3b:e1:29:9f:2e:
65:21:c1:6f:e2:27:91:91:0d:34:df:1a:97:20:d0:
87:7c:ed:82:65:79:b2:ef:ba:33:19:94:96:e6:2b:
d5:e7:47:c1:0a:3d:e0:f6:98:0b:fe:d1:77:9e:a1:
fb:7f:2c:a1:c3:53:ce:fd:73:80:73:80:00:af:22:
30:b5:ce:28:df:03:5f:af:0e:c5:3c:8c:88:84:52:
0c:81:11:6b:da:59:f3:d0:db:d0:43:ff:4c:c2:d7:
7e:af:29:35:3b:d1:73:95:6d:f6:1c:28:0e:ed:a1:
ce:a2:55:0a:96:83:99:96:f9:d9:ca:f8:be:47:61:
0e:8e:ef:bc:14:a7:0c:72:0a:c1:98:91:ab:8c:d2:
dd:a2:4e:f8:55:54:00:bd:04:6f:61:c8:78:67:09:
8d:74:59:da:90:26:b0:9f:21:a5:1d:69:9c:e6:d0:
bd:d5:14:a4:a3:ab:02:5f:ae:1a:fd:77:56:c5:71:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:83:2C:32:C3:3C:37:21:47:4B:2C:E9:6A:1A:C0:E9:7F:7F:3F
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:86:ac:1c:4a:d0:62:d5:b3:3c:4e:2f:c9:10:97:b8:ac:d1:
b2:db:b1:06:fa:dd:a8:e6:3c:6c:87:73:12:89:57:5b:1d:4a:
21:8e:91:13:a2:79:ac:a2:58:aa:85:c3:7a:d2:c2:4f:95:c7:
bf:a5:ae:04:60:bd:f3:99:1f:d3:6d:e1:e5:e0:cf:d1:9f:0b:
f8:1e:75:92:b4:2e:6f:86:44:8a:44:e5:0b:c5:97:b6:f9:17:
6b:7e:fd:05:37:ce:32:3b:84:73:43:05:03:29:52:81:14:0f:
1c:df:db:00:cf:44:5a:f4:af:7d:f1:21:ec:f1:24:d4:e0:d0:
b0:3c:4f:9a:9e:eb:eb:06:12:10:9b:f2:e0:c0:ac:2d:01:0a:
08:c3:ca:97:c8:b3:2a:72:4e:44:61:39:28:99:93:5c:c5:9a:
36:ee:9d:e2:12:84:51:de:a0:cf:92:ed:1d:1a:27:d2:2e:c0:
8c:a7:b3:9c:dd:a8:21:f5:7b:4e:30:8d:77:70:b6:e4:8e:41:
31:19:38:96:d5:bf:a3:f6:92:84:a6:4f:a5:fc:c5:28:69:e5:
79:f4:87:7d:50:2e:3b:2e:d4:50:ca:f1:0c:0e:bd:25:20:9f:
82:a2:d5:61:2f:40:20:f8:64:24:a4:df:2c:f0:fd:f3:d1:92:
9c:0b:2a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJa0TXQwhCRfIOygsS41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzQwMmVhZTAyN2FiY2Q5MjYwOTBjYzBkZGVmZjgwYWFi
OTJjMzUwHhcNMjYwMzI1MjIwMTQ1WhcNMjYwMzI2MjIwMTQ1WjAzMTEwLwYDVQQD
EyhlOWIxODMyYzMyYzMzYzM3MjE0NzRiMmNlOTZhMWFjMGU5N2Y3ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mqxRPzcFzQe4p4AJi2lc0NlQe8d
mq/EqzCav6dzTDlv6fKfr9+Zd80369eNqmTOW9/2Rq1SoEDCbx73Vn5h2xdcuvR+
O+Epny5lIcFv4ieRkQ003xqXINCHfO2CZXmy77ozGZSW5ivV50fBCj3g9pgL/tF3
nqH7fyyhw1PO/XOAc4AAryIwtc4o3wNfrw7FPIyIhFIMgRFr2lnz0NvQQ/9Mwtd+
ryk1O9FzlW32HCgO7aHOolUKloOZlvnZyvi+R2EOju+8FKcMcgrBmJGrjNLdok74
VVQAvQRvYch4ZwmNdFnakCawnyGlHWmc5tC91RSko6sCX64a/XdWxXGDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmxgywywzw3IUdLLOlqGsDpf38/MB8GA1UdIwQY
MBaAFI00AurgJ6vNkmCQzA3e/4CquSw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgt
ZjkyZDdkYzM3ZDJlLzEvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgtZjkyZDdkYzM3ZDJl
LzEvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYasHErQ
YtWzPE4vyRCXuKzRstuxBvrdqOY8bIdzEolXWx1KIY6RE6J5rKJYqoXDetLCT5XH
v6WuBGC985kf023h5eDP0Z8L+B51krQub4ZEikTlC8WXtvkXa379BTfOMjuEc0MF
AylSgRQPHN/bAM9EWvSvffEh7PEk1ODQsDxPmp7r6wYSEJvy4MCsLQEKCMPKl8iz
KnJORGE5KJmTXMWaNu6d4hKEUd6gz5LtHRon0i7AjKeznN2oIfV7TjCNd3C25I5B
MRk4ltW/o/aShKZPpfzFKGnlefSHfVAuOy7UUMrxDA69JSCfgqLVYS9AIPhkJKTf
LPD989GSnAsqnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:32 2026 by rpki-client