Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: Ss7l1Z26IVI3Wcv7Fx2PvIb6R/sNXy4GAGd70gNbY2k=
Subject key identifier: 9F:88:7B:94:26:08:E0:3D:D1:F8:1B:62:2F:48:49:54:59:A4:2E:64
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 019D2B17920593FE72F4A0110003C696AD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1897
Signing time: Thu 26 Mar 2026 17:00:58 +0000
Manifest this update: Thu 26 Mar 2026 17:00:58 +0000
Manifest next update: Fri 27 Mar 2026 17:00:58 +0000
Files and hashes: 1: bxe8_OOghXeeJNBS1LJite_JTKQ.roa (hash: SNnvmAY3MhgDBPaAU8BXN9WC/xup6duxDsZh0j7XDCs=)
2: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: 90ZHSIR4NhPIVH8BI3l+1sEzMbGrenwkvCtQwSBDqoE=)
3: yHADJb6BZs2ak9yCDQIwsQB2apk.roa (hash: Qk1v22VZ27KbOG3oqvgp5v/wTns71MuCYehYFMsTHqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:92:05:93:fe:72:f4:a0:11:00:03:c6:96:ad:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Mar 26 17:00:58 2026 GMT
Not After : Mar 27 17:00:58 2026 GMT
Subject: CN=9f887b942608e03dd1f81b622f48495459a42e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:0e:40:6e:47:46:12:ba:f0:26:cd:8b:63:
f6:a8:75:37:60:81:4c:15:15:5c:c4:6a:6f:8e:98:
28:30:ef:ab:16:a5:a0:b8:ae:80:50:5b:f4:e8:82:
db:45:7a:02:96:d6:4a:23:75:31:78:28:99:91:6c:
f6:94:5b:f0:06:dc:63:57:2e:db:f5:f0:6a:d9:0e:
ad:90:2b:b1:80:6b:d8:37:24:c0:61:a2:a3:9e:0e:
13:87:65:c8:6c:c1:95:27:f9:09:f8:37:58:5e:56:
e8:3a:48:a5:ac:da:1d:87:1b:a1:3e:6d:a4:58:e2:
3b:48:75:d4:c9:62:27:8f:92:7c:94:6f:7a:ec:5d:
81:8d:c2:ca:ee:45:bf:c9:50:a9:7c:32:27:9a:04:
e2:ff:51:7c:eb:cb:6c:f9:38:6e:4a:d3:bf:de:54:
ed:ca:c2:13:dc:88:42:49:dc:d2:12:bf:6c:01:c0:
08:e1:c4:65:07:5a:e6:55:56:02:fb:b0:70:13:29:
d8:0d:86:16:a3:7c:2e:89:ae:67:b0:08:84:a5:25:
3f:32:cd:0e:cf:e8:76:f5:cc:f5:f8:8f:c2:48:95:
a9:07:d2:3d:64:f7:4a:79:14:d4:66:03:6c:ba:a3:
ba:ca:f0:2a:7f:4d:93:84:6d:fb:03:78:2f:c4:f5:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:7B:94:26:08:E0:3D:D1:F8:1B:62:2F:48:49:54:59:A4:2E:64
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f4:6e:8e:33:df:ee:63:22:ca:6f:4f:12:09:79:bd:01:00:
1a:02:14:84:7d:0d:90:07:f0:60:71:c3:38:70:f9:9c:39:a3:
19:f0:6a:bf:0c:67:84:a8:8e:ea:32:c9:5a:34:85:74:f3:97:
d5:9f:00:34:be:90:40:eb:5c:d6:41:15:c0:f6:65:fd:cb:e4:
2f:55:af:89:2a:b8:12:cc:fd:78:b5:a7:56:c0:d0:62:b5:0a:
02:30:de:b0:05:fc:af:ff:f8:80:57:b6:0a:d2:0c:cc:5d:58:
e6:93:77:2a:3c:c7:d5:45:71:24:d5:7e:7d:b2:83:60:3d:aa:
fa:12:61:c7:46:8f:be:99:40:2f:f7:13:17:74:0b:4a:d7:e3:
82:2b:3e:13:77:37:d4:3b:5f:fd:80:8d:32:bb:2c:bf:56:fe:
85:c2:82:cf:17:1a:d9:f7:8b:e8:f3:4f:0c:c1:d1:e5:0c:f9:
b6:0b:54:9c:0d:ef:47:b6:35:d3:31:d7:46:21:c4:24:09:11:
01:11:b2:fd:e8:9c:d1:f8:07:1d:0d:41:59:96:80:ec:62:6b:
bc:4a:a1:f6:9d:3e:8a:dd:fe:85:35:6e:09:67:b6:8b:8d:70:
df:65:bd:22:6e:48:3e:45:e5:bc:70:0a:31:21:cb:17:48:aa:
e1:ce:53:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF5IFk/5y9KARAAPGlq1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMmVjNWI0MGM3MTcyNzU0MjU1ZDYyNmJmNmM5MjEzYTNk
YWZlNmYwHhcNMjYwMzI2MTcwMDU4WhcNMjYwMzI3MTcwMDU4WjAzMTEwLwYDVQQD
Eyg5Zjg4N2I5NDI2MDhlMDNkZDFmODFiNjIyZjQ4NDk1NDU5YTQyZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LAOQG5HRhK68CbNi2P2qHU3YIFM
FRVcxGpvjpgoMO+rFqWguK6AUFv06ILbRXoCltZKI3UxeCiZkWz2lFvwBtxjVy7b
9fBq2Q6tkCuxgGvYNyTAYaKjng4Th2XIbMGVJ/kJ+DdYXlboOkilrNodhxuhPm2k
WOI7SHXUyWInj5J8lG967F2BjcLK7kW/yVCpfDInmgTi/1F868ts+ThuStO/3lTt
ysIT3IhCSdzSEr9sAcAI4cRlB1rmVVYC+7BwEynYDYYWo3wuia5nsAiEpSU/Ms0O
z+h29cz1+I/CSJWpB9I9ZPdKeRTUZgNsuqO6yvAqf02ThG37A3gvxPUX5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+Ie5QmCOA90fgbYi9ISVRZpC5kMB8GA1UdIwQY
MBaAFI0uxbQMcXJ1QlXWJr9skhOj2v5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUt
NDE1Y2I1ZjBiYTdlLzEvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUtNDE1Y2I1ZjBiYTdl
LzEvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvRujjPf
7mMiym9PEgl5vQEAGgIUhH0NkAfwYHHDOHD5nDmjGfBqvwxnhKiO6jLJWjSFdPOX
1Z8ANL6QQOtc1kEVwPZl/cvkL1WviSq4Esz9eLWnVsDQYrUKAjDesAX8r//4gFe2
CtIMzF1Y5pN3KjzH1UVxJNV+fbKDYD2q+hJhx0aPvplAL/cTF3QLStfjgis+E3c3
1Dtf/YCNMrssv1b+hcKCzxca2feL6PNPDMHR5Qz5tgtUnA3vR7Y10zHXRiHEJAkR
ARGy/eic0fgHHQ1BWZaA7GJrvEqh9p0+it3+hTVuCWe2i41w32W9Im5IPkXlvHAK
MSHLF0iq4c5TIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:50 2026 by rpki-client