Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: XZxTckpdxvBVv99ks0Etaq6aC996r9RfgZ3tu/FBkf8=
Subject key identifier: 5F:58:7A:16:DD:AC:DA:0C:E0:94:31:10:AB:11:2D:FA:17:E5:94:76
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 019D2703A7E531298565F1C98BFF6DA31664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: cfDDqdd4hSAVT9jHfRQpRa1SBMfizvLghAkwmmd830Q=)
2: vyyOv-ascCpg6vzLP5yhXC1Yn0U.roa (hash: QGwJqLzYBQrI7ZQVyRyoIjXKsPdPV3MLHZM6uCuAXZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a7:e5:31:29:85:65:f1:c9:8b:ff:6d:a3:16:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=5f587a16ddacda0ce0943110ab112dfa17e59476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:2d:5b:eb:89:aa:23:34:ea:c9:e5:cd:2b:
23:f5:17:81:f0:65:82:23:ae:e4:8e:85:0b:82:d1:
3b:34:f8:12:f8:51:1a:66:1b:37:0b:57:9b:f5:8d:
6b:a8:e3:c9:a9:b4:86:c2:e3:a3:f7:39:04:58:db:
c1:3c:78:94:10:d5:3a:66:a0:77:23:8b:bc:7c:49:
a5:ca:e4:19:81:56:48:7a:36:d6:fc:96:0b:46:85:
5a:d1:b7:00:6c:5a:56:45:49:10:02:e7:53:83:dd:
b1:2f:06:dd:37:75:1f:0c:8b:05:b9:3f:d7:ea:24:
cc:2b:35:c6:eb:b2:2e:58:0a:e8:d1:f9:49:ec:e1:
dd:7c:80:5f:db:9a:6c:ba:af:70:15:a6:ec:55:1c:
71:34:90:c7:04:db:6e:39:c5:7e:31:6b:a6:45:6c:
c3:62:96:10:db:17:a4:ce:c0:4f:91:66:8d:7c:c1:
8e:ca:56:e7:3f:1c:88:d1:72:3b:c6:d3:0d:2b:7c:
48:32:18:20:6f:09:34:fa:96:06:a3:25:ad:e4:72:
64:75:c9:20:cd:e7:24:45:29:94:52:0a:f6:b9:0b:
51:bf:7a:b8:ba:57:23:9b:dd:bf:e5:8d:c2:c9:d1:
5a:b7:f7:2b:db:9f:ce:78:e2:07:ac:11:ac:f3:4d:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:58:7A:16:DD:AC:DA:0C:E0:94:31:10:AB:11:2D:FA:17:E5:94:76
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:66:56:21:37:de:5d:fd:1f:74:d8:70:68:70:9b:64:b8:55:
0d:4f:e8:80:b0:0d:ed:c3:32:7c:3e:a9:9a:7c:fa:65:02:fd:
83:c3:15:08:a5:a3:58:4f:ee:26:15:3a:5e:bb:c1:cf:95:c7:
7f:aa:9f:b3:8e:ca:c3:9f:57:17:ca:47:89:58:a9:fc:81:5b:
ff:a8:ac:04:65:3a:b9:cb:d6:da:d0:0d:41:11:33:90:59:54:
4a:30:b5:d1:f6:03:9d:a6:f3:d4:68:8a:49:26:fd:00:81:f1:
26:d3:f8:9b:e4:50:95:f9:2c:5b:af:21:68:5e:37:48:6f:a2:
d6:fc:9c:b9:68:1b:eb:0e:bb:1c:7a:98:7f:f4:dc:41:14:6e:
87:29:e9:7a:dc:04:88:f1:89:95:b8:fd:84:af:bc:fb:3a:b7:
29:bb:9c:74:fd:bd:f5:d6:ca:bf:6f:38:1a:8a:8b:7f:1c:a4:
25:5a:4c:1b:32:30:17:bb:83:26:32:2b:a1:d0:04:aa:38:a9:
45:a7:1e:39:b1:13:09:d7:9e:b0:97:2a:aa:56:b8:46:c8:0c:
1a:92:c1:e5:b0:c9:11:65:51:cf:ec:11:c1:a5:92:21:fb:7c:
ca:62:75:18:50:57:95:f5:48:cb:7a:98:d4:1c:b1:c0:02:80:
10:3c:23:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA6flMSmFZfHJi/9toxZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2I0OTZlYTdjZjc2M2QwNTgzMDgzNzFlMWJmNjdlNTNi
YzdiYTMwHhcNMjYwMzI1MjIwMDQ0WhcNMjYwMzI2MjIwMDQ0WjAzMTEwLwYDVQQD
Eyg1ZjU4N2ExNmRkYWNkYTBjZTA5NDMxMTBhYjExMmRmYTE3ZTU5NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttItW+uJqiM06snlzSsj9ReB8GWC
I67kjoULgtE7NPgS+FEaZhs3C1eb9Y1rqOPJqbSGwuOj9zkEWNvBPHiUENU6ZqB3
I4u8fEmlyuQZgVZIejbW/JYLRoVa0bcAbFpWRUkQAudTg92xLwbdN3UfDIsFuT/X
6iTMKzXG67IuWAro0flJ7OHdfIBf25psuq9wFabsVRxxNJDHBNtuOcV+MWumRWzD
YpYQ2xekzsBPkWaNfMGOylbnPxyI0XI7xtMNK3xIMhggbwk0+pYGoyWt5HJkdckg
zeckRSmUUgr2uQtRv3q4ulcjm92/5Y3CydFat/cr25/OeOIHrBGs8012xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9YehbdrNoM4JQxEKsRLfoX5ZR2MB8GA1UdIwQY
MBaAFI97SW6nz3Y9BYMINx4b9n5TvHujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUt
MjUxYjAxOWQ1MWE4LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUtMjUxYjAxOWQ1MWE4
LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGZWITfe
Xf0fdNhwaHCbZLhVDU/ogLAN7cMyfD6pmnz6ZQL9g8MVCKWjWE/uJhU6XrvBz5XH
f6qfs47Kw59XF8pHiVip/IFb/6isBGU6ucvW2tANQREzkFlUSjC10fYDnabz1GiK
SSb9AIHxJtP4m+RQlfksW68haF43SG+i1vycuWgb6w67HHqYf/TcQRRuhynpetwE
iPGJlbj9hK+8+zq3KbucdP299dbKv284GoqLfxykJVpMGzIwF7uDJjIrodAEqjip
RaceObETCdeesJcqqla4RsgMGpLB5bDJEWVRz+wRwaWSIft8ymJ1GFBXlfVIy3qY
1ByxwAKAEDwjsA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:03 2026 by rpki-client