Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: 8WIMAXVeIMrDMUUm4rLMfk2lg9RAZhRTxfJgK9w0Z/U=
Subject key identifier: 4E:BA:BF:17:8A:49:A6:5C:63:23:8F:3F:0D:1F:CF:9F:50:84:0B:FF
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 019D2929873A30DCF633D6D9178799BFEE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 08:01:20 +0000
Manifest this update: Thu 26 Mar 2026 08:01:20 +0000
Manifest next update: Fri 27 Mar 2026 08:01:20 +0000
Files and hashes: 1: bxe8_OOghXeeJNBS1LJite_JTKQ.roa (hash: SNnvmAY3MhgDBPaAU8BXN9WC/xup6duxDsZh0j7XDCs=)
2: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: BtHsxvwd3dFUCgdIdjWapyQUtTBL6S0qCJvf2KVEfgg=)
3: yHADJb6BZs2ak9yCDQIwsQB2apk.roa (hash: Qk1v22VZ27KbOG3oqvgp5v/wTns71MuCYehYFMsTHqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:87:3a:30:dc:f6:33:d6:d9:17:87:99:bf:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Mar 26 08:01:20 2026 GMT
Not After : Mar 27 08:01:20 2026 GMT
Subject: CN=4ebabf178a49a65c63238f3f0d1fcf9f50840bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:e7:25:de:f0:92:74:02:9f:1d:46:8a:b3:
e3:55:d6:44:ba:8d:8a:d7:00:bd:cf:08:77:c8:0a:
59:ba:12:5b:62:ba:6f:6c:80:d7:5b:fc:ee:c0:b0:
75:95:15:51:2c:bd:36:2d:4f:d1:e3:a4:0c:bb:94:
9c:8d:b1:98:3c:2e:ec:d2:44:7b:cb:c3:01:7d:c4:
20:34:2b:12:15:42:de:b4:91:e6:a5:50:cc:8a:d0:
fa:e2:0c:0a:73:cf:ad:ed:cf:44:96:65:e1:d8:54:
05:ad:de:a4:10:12:6f:11:fe:b0:de:2a:ba:3a:cd:
4b:f2:e8:77:3a:e1:fc:59:26:0f:e9:99:5c:b6:52:
6e:f0:65:3a:0e:ab:16:84:6d:dc:c8:c8:13:b3:11:
45:41:53:fe:29:6c:66:4e:32:5d:a1:93:6c:0d:16:
3f:9a:ea:2d:ff:39:aa:74:bb:ab:98:85:24:39:d8:
a0:5a:65:03:26:ed:0a:9e:2a:c3:d7:b5:8e:fd:7a:
80:f1:72:7b:88:79:9e:f3:b8:38:cd:40:22:58:38:
c3:8d:41:05:08:c8:61:38:da:fe:0f:e7:b2:a1:25:
da:a5:c9:9a:02:f0:f8:bd:a4:72:28:35:78:42:77:
fd:15:57:0b:cb:9e:dd:4f:f3:73:ea:75:1f:70:91:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:BF:17:8A:49:A6:5C:63:23:8F:3F:0D:1F:CF:9F:50:84:0B:FF
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3c:2c:1b:59:e5:c5:a0:b1:99:98:66:43:7e:bb:fd:60:e8:
ad:4f:39:f7:55:a6:b8:a5:a7:41:96:f5:a3:ac:77:90:3c:13:
87:2d:68:3f:39:ef:e1:ac:87:93:82:b3:26:5f:60:24:ce:4e:
d6:ea:32:0c:58:59:21:1a:51:fb:31:e9:a3:f3:75:7c:8c:d5:
50:8e:01:e8:ee:ad:9a:ef:6b:d0:f8:2e:00:37:fc:43:15:9c:
77:30:31:0d:f5:c7:8a:7b:74:db:f8:48:1b:d8:04:71:2e:5a:
36:12:2b:3f:dd:e1:86:5c:b4:d6:e4:b0:c8:af:45:e7:2e:22:
b9:4f:25:ad:a6:3f:2a:73:f1:73:65:c2:c9:e6:14:92:72:3b:
5e:fa:a2:ab:13:b4:c1:f2:0d:be:06:25:b7:b8:89:98:41:94:
98:b4:a5:c1:77:7d:c0:3f:49:72:73:c1:c0:81:93:5b:97:eb:
2c:16:dc:bb:1e:76:97:43:58:9f:d5:f7:d3:d1:12:20:e8:69:
aa:22:30:c1:94:20:d7:73:63:f2:c7:57:9e:95:97:2e:f4:7a:
f7:ad:cf:96:bb:45:5b:3f:03:bd:7f:7b:6f:85:3b:19:d1:07:
f0:1c:2d:03:1a:e2:a4:76:9c:74:99:2e:54:25:ca:72:9a:8b:
2f:32:9b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKYc6MNz2M9bZF4eZv+6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMmVjNWI0MGM3MTcyNzU0MjU1ZDYyNmJmNmM5MjEzYTNk
YWZlNmYwHhcNMjYwMzI2MDgwMTIwWhcNMjYwMzI3MDgwMTIwWjAzMTEwLwYDVQQD
Eyg0ZWJhYmYxNzhhNDlhNjVjNjMyMzhmM2YwZDFmY2Y5ZjUwODQwYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY7nJd7wknQCnx1GirPjVdZEuo2K
1wC9zwh3yApZuhJbYrpvbIDXW/zuwLB1lRVRLL02LU/R46QMu5ScjbGYPC7s0kR7
y8MBfcQgNCsSFULetJHmpVDMitD64gwKc8+t7c9ElmXh2FQFrd6kEBJvEf6w3iq6
Os1L8uh3OuH8WSYP6ZlctlJu8GU6DqsWhG3cyMgTsxFFQVP+KWxmTjJdoZNsDRY/
muot/zmqdLurmIUkOdigWmUDJu0KnirD17WO/XqA8XJ7iHme87g4zUAiWDjDjUEF
CMhhONr+D+eyoSXapcmaAvD4vaRyKDV4Qnf9FVcLy57dT/Nz6nUfcJH3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE66vxeKSaZcYyOPPw0fz59QhAv/MB8GA1UdIwQY
MBaAFI0uxbQMcXJ1QlXWJr9skhOj2v5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUt
NDE1Y2I1ZjBiYTdlLzEvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUtNDE1Y2I1ZjBiYTdl
LzEvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjwsG1nl
xaCxmZhmQ367/WDorU8591WmuKWnQZb1o6x3kDwThy1oPznv4ayHk4KzJl9gJM5O
1uoyDFhZIRpR+zHpo/N1fIzVUI4B6O6tmu9r0PguADf8QxWcdzAxDfXHint02/hI
G9gEcS5aNhIrP93hhly01uSwyK9F5y4iuU8lraY/KnPxc2XCyeYUknI7XvqiqxO0
wfINvgYlt7iJmEGUmLSlwXd9wD9JcnPBwIGTW5frLBbcux52l0NYn9X309ESIOhp
qiIwwZQg13Nj8sdXnpWXLvR6963PlrtFWz8DvX97b4U7GdEH8BwtAxripHacdJku
VCXKcpqLLzKb5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:21 2026 by rpki-client