Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: AjoEaBzRhHhrVi/XGadHX4xC5EX2TUHZP9Lnxzuosfk=
Subject key identifier: F2:AA:E3:70:6E:E8:B6:B8:53:E2:12:B0:FD:3A:74:48:6D:60:9E:A8
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 019D265EDD94F8EBCA4EDAD0BBE4F4490033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 1520
Signing time: Wed 25 Mar 2026 19:00:44 +0000
Manifest this update: Wed 25 Mar 2026 19:00:44 +0000
Manifest next update: Thu 26 Mar 2026 19:00:44 +0000
Files and hashes: 1: 4LLVtuowBMlt-elcg04sJ4SEZ4U.roa (hash: 9EzE57I9U9jlMNZnR2WQt4Ucc7HAdhe5JFz8hozLIH0=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: DGl+0hKQ59tBCcwe7C7UP0/Ltiy1nrI/HupVx16Fiws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:dd:94:f8:eb:ca:4e:da:d0:bb:e4:f4:49:00:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Mar 25 19:00:44 2026 GMT
Not After : Mar 26 19:00:44 2026 GMT
Subject: CN=f2aae3706ee8b6b853e212b0fd3a74486d609ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:70:73:36:f7:96:88:a8:b4:44:0d:e1:2f:
43:b7:1c:1a:6b:28:b1:4f:62:94:2d:27:6a:a6:ef:
76:90:49:b8:6b:c1:e8:be:76:84:5a:46:0b:0b:54:
e2:5a:84:90:ca:38:3c:21:a5:00:10:ab:34:44:0a:
0f:bf:be:27:4a:fa:aa:c5:e3:76:26:b2:b3:f4:a7:
e1:aa:b1:07:7e:5f:e4:ae:41:b9:24:c2:23:c7:6d:
4c:0e:14:86:07:37:0a:17:35:b2:24:ce:02:2f:7e:
e8:11:97:29:05:80:0e:04:d4:04:f9:2f:43:62:28:
78:3a:3d:0e:96:08:5f:d5:e5:22:87:0e:3b:fb:00:
a5:09:4d:3a:fb:d6:8f:43:e9:f4:f0:03:a5:5d:b6:
38:30:e6:c7:7b:b9:df:14:89:53:51:0d:45:25:11:
b5:a7:b3:8d:be:dd:5d:f7:3e:07:99:8e:2f:1c:ae:
1b:c7:d1:1a:50:18:67:fe:a0:11:80:3c:52:55:01:
c2:b4:f4:32:8b:ee:22:d0:72:fd:2b:c2:f2:a6:95:
72:c7:1b:03:14:5b:41:46:37:d1:2d:93:74:9f:b2:
94:30:9e:29:f6:3b:64:56:1a:ec:41:70:b6:a9:e9:
68:c5:2c:92:56:6a:25:5f:4f:b0:99:29:7a:e9:e8:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AA:E3:70:6E:E8:B6:B8:53:E2:12:B0:FD:3A:74:48:6D:60:9E:A8
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:27:dd:36:eb:c7:5b:2e:7c:4f:e1:9f:91:21:06:d0:36:84:
29:5c:0c:0a:75:7f:a2:d0:61:2c:87:8e:5e:4b:d6:07:a4:0a:
ba:a6:68:ce:7e:b7:95:63:95:04:ca:6d:c6:31:e0:ff:53:ba:
23:6a:fb:41:29:26:99:16:14:cf:8d:c3:65:93:ef:19:14:b6:
7b:8d:c4:bf:41:a0:49:00:6b:ac:64:c1:aa:65:ad:66:71:81:
bf:05:e8:5f:fc:23:bd:29:c0:84:cd:de:c5:2c:95:f4:b8:89:
e9:91:4d:61:55:3d:ed:40:4f:ff:34:17:0b:e0:cb:5d:e0:ed:
ae:1b:90:3b:fc:b5:5d:7b:68:25:ad:3d:c0:5b:b7:77:b4:1c:
e1:29:13:a2:0c:d0:8c:d1:b6:77:2f:b0:cf:d4:46:7f:5d:26:
20:9b:58:b8:57:3f:57:f5:2b:fa:b2:63:54:95:33:1a:af:e3:
40:5a:a2:f2:35:3f:b5:33:55:90:3e:3d:f7:62:5e:a4:d1:ef:
6c:cf:25:05:53:bc:da:01:8c:dd:31:60:a0:89:fa:41:cf:5a:
a4:3d:10:47:10:7f:3f:fc:e4:17:7c:cf:2c:34:17:ac:03:a1:
fc:00:e0:dc:df:39:83:d3:59:ef:3b:a9:d0:29:96:dc:e0:90:
b6:ac:1d:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXt2U+OvKTtrQu+T0SQAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDdlY2Q3NjY2Y2NlZjkxZTgyZjdlY2JjZTBiYTI4NTMz
NmZiNDUwHhcNMjYwMzI1MTkwMDQ0WhcNMjYwMzI2MTkwMDQ0WjAzMTEwLwYDVQQD
EyhmMmFhZTM3MDZlZThiNmI4NTNlMjEyYjBmZDNhNzQ0ODZkNjA5ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yhwczb3loiotEQN4S9Dtxwaayix
T2KULSdqpu92kEm4a8HovnaEWkYLC1TiWoSQyjg8IaUAEKs0RAoPv74nSvqqxeN2
JrKz9KfhqrEHfl/krkG5JMIjx21MDhSGBzcKFzWyJM4CL37oEZcpBYAOBNQE+S9D
Yih4Oj0Olghf1eUihw47+wClCU06+9aPQ+n08AOlXbY4MObHe7nfFIlTUQ1FJRG1
p7ONvt1d9z4HmY4vHK4bx9EaUBhn/qARgDxSVQHCtPQyi+4i0HL9K8LyppVyxxsD
FFtBRjfRLZN0n7KUMJ4p9jtkVhrsQXC2qeloxSySVmolX0+wmSl66eiDBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKq43Bu6La4U+ISsP06dEhtYJ6oMB8GA1UdIwQY
MBaAFIwH7NdmbM75HoL37LzguihTNvtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NDg0MDYtNTgyNi00ZGJjLWI5M2Ut
NWQyN2M3NWFhZTZmLzEvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NDg0MDYtNTgyNi00ZGJjLWI5M2UtNWQyN2M3NWFhZTZm
LzEvakFmczEyWnN6dmtlZ3Zmc3ZPQzZLRk0yLTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyfdNuvH
Wy58T+GfkSEG0DaEKVwMCnV/otBhLIeOXkvWB6QKuqZozn63lWOVBMptxjHg/1O6
I2r7QSkmmRYUz43DZZPvGRS2e43Ev0GgSQBrrGTBqmWtZnGBvwXoX/wjvSnAhM3e
xSyV9LiJ6ZFNYVU97UBP/zQXC+DLXeDtrhuQO/y1XXtoJa09wFu3d7Qc4SkTogzQ
jNG2dy+wz9RGf10mIJtYuFc/V/Ur+rJjVJUzGq/jQFqi8jU/tTNVkD4992JepNHv
bM8lBVO82gGM3TFgoIn6Qc9apD0QRxB/P/zkF3zPLDQXrAOh/ADg3N85g9NZ7zup
0CmW3OCQtqwdRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:53 2026 by rpki-client