Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: aJKhgphMdaWpCcRC2dCLO8rJxaBFGPb+T/HxCKwHlnA=
Subject key identifier: 4D:7F:CE:79:45:30:FC:09:EA:76:16:D3:78:05:84:A8:91:A7:C8:F2
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019D27047A722C38295F967BF581B988302A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 186C
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: CTAJ3NVHiD0r0Y4SAs7Q5YprrvN1PPi2O3+GICyky/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7a:72:2c:38:29:5f:96:7b:f5:81:b9:88:30:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=4d7fce794530fc09ea7616d3780584a891a7c8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:0f:0e:5d:58:62:25:f2:63:a6:38:79:b8:
f2:c2:64:ac:26:69:fa:49:b9:b5:21:ef:8f:a7:ec:
27:9d:1f:a5:d3:59:16:8b:96:e6:cb:b8:6a:93:6a:
4e:b8:56:a7:2c:e0:55:a6:7d:0e:0a:60:1f:a9:5d:
f1:a6:b3:c2:f0:11:a4:06:f2:0a:6e:13:33:4d:2d:
20:51:43:43:5b:af:16:d0:44:fe:b7:df:eb:23:3b:
0a:04:c1:b2:a4:44:1f:a1:22:f7:a5:63:b2:0b:b5:
c9:f9:9a:a1:17:8b:49:aa:0f:79:f8:33:97:21:82:
5f:67:6d:3b:ac:78:bb:d7:6c:7a:75:40:7b:1c:1a:
f1:47:a5:d3:20:be:8b:99:da:2e:28:68:cf:e8:61:
3c:3b:20:8c:81:78:32:e3:cd:92:a5:ca:b5:b8:de:
81:99:31:d6:c1:42:d6:69:62:39:7a:e0:fe:b8:50:
37:fc:b2:49:86:e6:09:17:ac:b4:ee:af:9a:8a:9e:
5b:ee:12:66:4e:95:29:aa:2d:a5:93:28:03:7e:62:
c7:de:3c:77:50:39:d6:50:fb:14:ac:7f:68:f0:9b:
e1:6d:60:d2:7f:25:83:b2:34:68:8c:57:46:08:3b:
83:1b:ba:d4:10:01:57:fb:58:79:02:a3:6d:e0:ea:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:CE:79:45:30:FC:09:EA:76:16:D3:78:05:84:A8:91:A7:C8:F2
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4d:bf:bb:e5:45:f0:54:ad:5e:57:87:9a:a6:d4:4e:d5:8a:
56:82:61:1c:ac:ab:4a:52:91:a2:31:78:78:d2:b9:2e:3f:c1:
27:f7:dc:3a:46:2a:d1:74:5a:47:7c:16:6b:6e:9c:26:3a:b1:
25:ff:6e:c3:67:a7:da:43:40:d5:fb:3f:2c:fb:01:ef:59:c7:
ba:15:bb:bb:77:76:0b:ae:80:ba:85:82:a1:a7:f9:6b:73:d8:
04:d6:10:ec:6f:eb:a3:26:aa:a6:01:ad:44:2d:2f:64:2b:2b:
5c:33:e1:5c:2e:08:e9:0a:d8:df:5e:0c:9a:ea:d9:9a:c8:b4:
08:e6:2e:ff:a0:c6:cd:fe:3f:d9:a8:2e:66:b4:92:8d:93:e0:
53:e0:da:38:a4:b6:45:1b:f5:41:51:c1:eb:59:32:d5:f3:7b:
5f:7b:18:16:51:64:36:6b:6f:f5:4b:dc:35:1b:c7:05:f5:df:
9b:34:0d:f5:b7:f7:c7:77:94:85:ed:1a:93:b1:e3:a8:bc:0d:
8c:73:31:c1:7f:8b:e9:f5:65:70:24:38:91:40:a0:33:0b:71:
a5:00:d8:a7:a3:2e:4e:34:6e:b5:68:a4:58:81:de:6e:80:6a:
e8:ca:8d:a1:ad:bc:e5:16:12:9c:2a:f0:ee:7e:af:7d:4a:48:
d8:17:df:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHpyLDgpX5Z79YG5iDAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOTZjNjZhZjMzMWM5ODViODU5ZDQwM2IzNjk3NGMwNjMy
ZTFlZjIwHhcNMjYwMzI1MjIwMTM4WhcNMjYwMzI2MjIwMTM4WjAzMTEwLwYDVQQD
Eyg0ZDdmY2U3OTQ1MzBmYzA5ZWE3NjE2ZDM3ODA1ODRhODkxYTdjOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLkPDl1YYiXyY6Y4ebjywmSsJmn6
Sbm1Ie+Pp+wnnR+l01kWi5bmy7hqk2pOuFanLOBVpn0OCmAfqV3xprPC8BGkBvIK
bhMzTS0gUUNDW68W0ET+t9/rIzsKBMGypEQfoSL3pWOyC7XJ+ZqhF4tJqg95+DOX
IYJfZ207rHi712x6dUB7HBrxR6XTIL6LmdouKGjP6GE8OyCMgXgy482Spcq1uN6B
mTHWwULWaWI5euD+uFA3/LJJhuYJF6y07q+aip5b7hJmTpUpqi2lkygDfmLH3jx3
UDnWUPsUrH9o8JvhbWDSfyWDsjRojFdGCDuDG7rUEAFX+1h5AqNt4OpqHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1/znlFMPwJ6nYW03gFhKiRp8jyMB8GA1UdIwQY
MBaAFIyWxmrzMcmFuFnUA7NpdMBjLh7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgt
ODNhNDQzMTBhOTY0LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgtODNhNDQzMTBhOTY0
LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE2/u+VF
8FStXleHmqbUTtWKVoJhHKyrSlKRojF4eNK5Lj/BJ/fcOkYq0XRaR3wWa26cJjqx
Jf9uw2en2kNA1fs/LPsB71nHuhW7u3d2C66AuoWCoaf5a3PYBNYQ7G/royaqpgGt
RC0vZCsrXDPhXC4I6QrY314MmurZmsi0COYu/6DGzf4/2aguZrSSjZPgU+DaOKS2
RRv1QVHB61ky1fN7X3sYFlFkNmtv9UvcNRvHBfXfmzQN9bf3x3eUhe0ak7HjqLwN
jHMxwX+L6fVlcCQ4kUCgMwtxpQDYp6MuTjRutWikWIHeboBq6MqNoa285RYSnCrw
7n6vfUpI2Bfffg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:55 2026 by rpki-client