Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: iAmNPPX9Gp94jkAPt5H85ybpvAKoQ7dEyMQ8vDl+bLM=
Subject key identifier: 5B:61:2B:92:DB:FC:9D:50:35:7E:4E:D0:9D:40:60:81:20:05:10:EC
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 019D27A861D8157F9A03011B139198EE7ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 01:00:39 +0000
Manifest this update: Thu 26 Mar 2026 01:00:39 +0000
Manifest next update: Fri 27 Mar 2026 01:00:39 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: qveghoztwxgZtAwxQZf9nKCr3tiPss/ygX+OrsP6ueI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:61:d8:15:7f:9a:03:01:1b:13:91:98:ee:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Mar 26 01:00:39 2026 GMT
Not After : Mar 27 01:00:39 2026 GMT
Subject: CN=5b612b92dbfc9d50357e4ed09d406081200510ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:b2:f6:be:28:d4:b3:fc:1f:0b:da:2c:60:
cd:f2:0b:72:a7:44:33:ef:3c:a7:c5:65:10:74:43:
a3:09:8c:d8:f9:2a:bd:e8:1d:59:5c:63:d7:cf:70:
ae:61:74:14:2b:fb:53:d5:bd:7d:26:ee:c6:c9:f5:
c1:42:9f:17:d8:4a:bd:d4:06:c2:a4:68:5d:8a:d4:
79:07:e7:ba:40:d5:41:51:28:38:5a:f4:2a:c2:c9:
60:77:43:4e:81:98:e3:78:68:56:10:31:ba:9b:69:
13:be:f1:a8:d1:35:5a:07:60:ad:e8:08:81:d3:ed:
c2:b4:0f:42:8d:88:59:a8:26:20:b7:85:a9:af:7b:
ab:0f:f9:84:8f:46:bf:4c:79:f6:40:03:60:19:f1:
6e:b1:04:01:9f:f7:f2:d8:d6:86:dd:77:0f:5f:23:
97:1b:c5:d6:34:f5:f1:a0:b4:92:d6:16:2c:17:fd:
b4:38:10:35:8d:de:9d:b3:67:cb:80:1d:0d:5c:78:
52:26:32:ae:3a:b7:c8:04:46:43:65:db:57:12:a1:
0e:bb:2f:7b:8b:3c:00:ce:97:db:ac:c5:bf:5d:04:
bd:52:93:a7:80:3c:7b:6b:50:40:c2:ad:b1:92:1b:
b3:de:e2:cb:4e:0e:20:35:49:be:67:f4:21:52:30:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:61:2B:92:DB:FC:9D:50:35:7E:4E:D0:9D:40:60:81:20:05:10:EC
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:51:e3:8d:8c:71:9f:d8:bb:0e:e7:ae:98:2c:e8:cc:49:d3:
43:78:64:64:a2:b2:07:56:05:94:56:a3:9b:2c:5e:a0:03:26:
eb:bf:f0:af:73:8e:1a:95:5a:2e:8b:8e:fd:ec:6c:bf:a6:7b:
ba:bc:b2:11:09:a4:67:29:c6:9b:93:ef:48:e9:a8:11:72:d2:
e4:50:9a:b4:1c:bf:0b:7c:10:19:d8:75:54:73:0d:8d:05:54:
2f:96:60:dc:ea:a2:54:7f:97:03:6f:0b:81:5d:03:f7:53:9e:
6e:aa:39:c6:3e:ec:07:56:cd:f6:4f:2f:f1:e3:ca:92:77:aa:
d7:b2:c0:60:70:94:eb:c4:6a:d5:bb:97:20:95:b5:70:cf:5a:
4c:c0:97:c8:6a:ad:ee:d1:d5:e0:f2:70:cf:1e:4c:47:32:4e:
f6:1a:6e:5a:21:d6:2f:58:79:bb:74:cb:21:e3:4a:80:94:9e:
0a:25:10:09:4d:b2:9f:be:03:00:b6:51:bb:f4:c7:f6:62:7d:
18:de:7d:ba:7e:86:14:42:27:c7:50:e8:21:00:2a:ee:1a:45:
3a:5a:a1:08:f5:17:ba:0b:8a:6c:71:56:b3:9a:5b:02:f1:90:
c9:9a:9e:c3:77:27:99:b3:98:72:36:6b:08:94:9b:25:fc:10:
69:c3:4c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGHYFX+aAwEbE5GY7n7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGU5NzdjMWNkMmE0ZDdlYzI5MGEwMWY5YmVjMzdkZThk
YzljZTIwHhcNMjYwMzI2MDEwMDM5WhcNMjYwMzI3MDEwMDM5WjAzMTEwLwYDVQQD
Eyg1YjYxMmI5MmRiZmM5ZDUwMzU3ZTRlZDA5ZDQwNjA4MTIwMDUxMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR6y9r4o1LP8HwvaLGDN8gtyp0Qz
7zynxWUQdEOjCYzY+Sq96B1ZXGPXz3CuYXQUK/tT1b19Ju7GyfXBQp8X2Eq91AbC
pGhditR5B+e6QNVBUSg4WvQqwslgd0NOgZjjeGhWEDG6m2kTvvGo0TVaB2Ct6AiB
0+3CtA9CjYhZqCYgt4Wpr3urD/mEj0a/THn2QANgGfFusQQBn/fy2NaG3XcPXyOX
G8XWNPXxoLSS1hYsF/20OBA1jd6ds2fLgB0NXHhSJjKuOrfIBEZDZdtXEqEOuy97
izwAzpfbrMW/XQS9UpOngDx7a1BAwq2xkhuz3uLLTg4gNUm+Z/QhUjCvaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFthK5Lb/J1QNX5O0J1AYIEgBRDsMB8GA1UdIwQY
MBaAFI1Ol3wc0qTX7CkKAfm+w33o3JziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDIt
M2UwNjMzMDJjYjA5LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDItM2UwNjMzMDJjYjA5
LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFHjjYxx
n9i7DueumCzozEnTQ3hkZKKyB1YFlFajmyxeoAMm67/wr3OOGpVaLouO/exsv6Z7
uryyEQmkZynGm5PvSOmoEXLS5FCatBy/C3wQGdh1VHMNjQVUL5Zg3OqiVH+XA28L
gV0D91Oebqo5xj7sB1bN9k8v8ePKkneq17LAYHCU68Rq1buXIJW1cM9aTMCXyGqt
7tHV4PJwzx5MRzJO9hpuWiHWL1h5u3TLIeNKgJSeCiUQCU2yn74DALZRu/TH9mJ9
GN59un6GFEInx1DoIQAq7hpFOlqhCPUXuguKbHFWs5pbAvGQyZqew3cnmbOYcjZr
CJSbJfwQacNM6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:44 2026 by rpki-client