Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: QdIppmv5M7d3itYKtInnnzILyNo7JdF08TS9M4uIA/8=
Subject key identifier: E8:FE:CD:40:5A:B1:EA:E5:7E:88:F9:05:CF:99:98:15:CD:1F:C9:76
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 019D28F2EA7118488FA6A60B8C860D745FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0AD3
Signing time: Thu 26 Mar 2026 07:01:41 +0000
Manifest this update: Thu 26 Mar 2026 07:01:41 +0000
Manifest next update: Fri 27 Mar 2026 07:01:41 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: 9D6QP4XObMjeP167qi9LiUnIsFM4NVFY7UOMmjMgOMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ea:71:18:48:8f:a6:a6:0b:8c:86:0d:74:5f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Mar 26 07:01:41 2026 GMT
Not After : Mar 27 07:01:41 2026 GMT
Subject: CN=e8fecd405ab1eae57e88f905cf999815cd1fc976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:49:de:b5:8e:04:88:71:a7:d7:61:2e:8f:
13:e5:3e:f9:8a:84:72:a4:80:7c:c5:9b:5c:42:96:
ec:3d:58:78:db:33:fc:6f:b3:5d:3e:2e:e4:23:77:
13:bb:f7:8f:85:8a:d4:37:5e:b5:12:ca:f8:fa:30:
9e:af:af:4b:e9:fa:c6:b9:0d:1d:4e:1d:cb:06:ca:
ee:37:bf:ed:d3:12:75:6e:a5:5e:ff:75:2b:8e:c0:
1e:e7:e4:9b:8b:1a:fb:f4:93:66:41:96:76:97:56:
28:07:a3:0f:d7:b7:c8:da:ea:f9:00:c5:9e:0a:d3:
8b:8a:40:ec:70:74:f3:3b:21:ef:fc:ed:5f:db:a0:
f1:d7:75:28:96:8e:45:49:00:84:9c:f2:a0:15:a0:
d4:e7:2e:96:e4:56:a3:73:1b:6c:9a:17:1e:35:53:
e9:24:3c:4d:f2:17:4d:80:f3:2b:1f:ef:0d:c1:cd:
f5:1d:6a:59:d9:96:5e:7a:e8:80:ff:95:60:4f:f5:
c6:43:41:f8:b2:f1:9b:a4:cf:41:1b:9a:05:c8:fb:
5d:28:43:f2:1f:73:96:19:95:70:c1:5b:79:f7:dd:
f0:58:82:83:40:3a:d9:14:23:b0:17:af:0d:07:fb:
39:17:76:b7:71:c7:25:39:a3:bc:25:5e:7e:ff:b7:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:CD:40:5A:B1:EA:E5:7E:88:F9:05:CF:99:98:15:CD:1F:C9:76
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:ed:f9:79:7d:72:db:48:ed:18:72:10:65:89:9f:36:10:
33:8d:5f:2a:09:ab:7a:e4:1e:5c:27:7e:bf:65:d6:c1:7f:ce:
6f:69:56:86:d8:24:69:72:e1:3a:b4:a3:bb:87:92:cf:61:fa:
87:a5:86:41:69:4e:08:db:6a:9f:71:20:ac:50:5a:09:40:f6:
be:23:a2:50:e2:9d:d4:cc:e7:bf:40:4e:83:39:aa:ce:e3:7d:
32:56:c6:e6:21:e0:f1:07:c2:3e:fb:54:30:39:ab:bd:3c:55:
f8:87:fa:2f:c5:84:18:d6:46:3e:b6:20:b6:c8:e3:59:84:e3:
2f:23:a8:bd:cf:b1:16:15:30:98:9a:71:e0:31:32:63:fe:1b:
47:29:9b:61:c9:ba:29:35:f3:90:45:39:65:33:2b:af:a9:d9:
20:d4:65:ed:02:62:ce:77:02:3d:f5:3b:e0:c7:e9:92:d5:2f:
46:ca:6c:23:9a:52:57:4a:4d:01:65:12:cd:1d:80:af:96:77:
29:72:50:65:32:57:e1:52:be:e8:26:cf:77:91:92:dc:06:cd:
c4:64:de:9f:e0:2c:79:95:c4:f7:c5:1f:9f:81:ad:a0:03:b8:
2b:59:10:23:54:1f:66:f4:eb:92:b5:80:52:65:b6:fc:c7:42:
f1:f8:7e:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8upxGEiPpqYLjIYNdF/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzI0NDdjNDFlMjVjNGVmNWI3ODM3NTUyMWM0ZTk3ZTkx
YWI1YzAwHhcNMjYwMzI2MDcwMTQxWhcNMjYwMzI3MDcwMTQxWjAzMTEwLwYDVQQD
EyhlOGZlY2Q0MDVhYjFlYWU1N2U4OGY5MDVjZjk5OTgxNWNkMWZjOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv1J3rWOBIhxp9dhLo8T5T75ioRy
pIB8xZtcQpbsPVh42zP8b7NdPi7kI3cTu/ePhYrUN161Esr4+jCer69L6frGuQ0d
Th3LBsruN7/t0xJ1bqVe/3UrjsAe5+Sbixr79JNmQZZ2l1YoB6MP17fI2ur5AMWe
CtOLikDscHTzOyHv/O1f26Dx13Uolo5FSQCEnPKgFaDU5y6W5FajcxtsmhceNVPp
JDxN8hdNgPMrH+8Nwc31HWpZ2ZZeeuiA/5VgT/XGQ0H4svGbpM9BG5oFyPtdKEPy
H3OWGZVwwVt5993wWIKDQDrZFCOwF68NB/s5F3a3ccclOaO8JV5+/7fThQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj+zUBaserlfoj5Bc+ZmBXNH8l2MB8GA1UdIwQY
MBaAFI9yRHxB4lxO9beDdVIcTpfpGrXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83MzlmMTAtYTE1Ni00OWFjLTg5NWIt
MzYxMzhiZmMxYzIwLzEvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi83MzlmMTAtYTE1Ni00OWFjLTg5NWItMzYxMzhiZmMxYzIw
LzEvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgPt+Xl9
cttI7RhyEGWJnzYQM41fKgmreuQeXCd+v2XWwX/Ob2lWhtgkaXLhOrSju4eSz2H6
h6WGQWlOCNtqn3EgrFBaCUD2viOiUOKd1Mznv0BOgzmqzuN9MlbG5iHg8QfCPvtU
MDmrvTxV+If6L8WEGNZGPrYgtsjjWYTjLyOovc+xFhUwmJpx4DEyY/4bRymbYcm6
KTXzkEU5ZTMrr6nZINRl7QJizncCPfU74MfpktUvRspsI5pSV0pNAWUSzR2Ar5Z3
KXJQZTJX4VK+6CbPd5GS3AbNxGTen+AseZXE98Ufn4GtoAO4K1kQI1QfZvTrkrWA
UmW2/MdC8fh+Sw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:50 2026 by rpki-client