Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: YmGsqz/hcv/ZovHXLWXe7I955cDP1dvpJ659OMsUe0o=
Subject key identifier: 40:36:3C:59:D8:17:81:B6:B5:12:0E:50:E3:CA:0F:8D:DC:2A:10:51
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019D284D4FE3179F5DC83D7ACA1EFDFE9481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 04:00:48 +0000
Manifest this update: Thu 26 Mar 2026 04:00:48 +0000
Manifest next update: Fri 27 Mar 2026 04:00:48 +0000
Files and hashes: 1: j14PejNnVbSoAydM85X_n83WDgE.roa (hash: jfj4OGqg5kVl4stoIRYlf4QdlrWh6mPZAlYSQkvc8+k=)
2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: Jd6FQDUTOm+TzsaB+thZQGB+C1V38JcgX9kY9sRi0c0=)
3: nbm3hVn9hJgrdxApoYW6_LkAHBw.roa (hash: /jIkd8Myn46sgXnoD9e4Sybc8r78RdvI4H7sLK3ci9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4f:e3:17:9f:5d:c8:3d:7a:ca:1e:fd:fe:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Mar 26 04:00:48 2026 GMT
Not After : Mar 27 04:00:48 2026 GMT
Subject: CN=40363c59d81781b6b5120e50e3ca0f8ddc2a1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:45:f0:bd:ab:4f:8a:48:fa:f0:e9:c6:d4:
29:f2:3f:2a:3b:84:62:84:ae:31:ad:ea:d8:5c:8b:
56:7f:dd:2c:ad:78:4c:24:71:99:a2:95:a0:16:6d:
e9:22:27:28:e2:49:f4:f8:2e:b1:fa:08:7e:df:27:
2a:dd:20:a9:3d:8e:9c:3f:85:4d:b1:1e:9f:ce:c0:
ed:95:44:61:2f:a4:3b:aa:3b:b0:c4:4e:5d:98:f4:
e1:cc:a6:c0:9b:49:88:27:85:df:a9:3f:25:1b:ba:
1c:da:39:e1:d0:b9:d1:cc:df:d3:36:5f:e1:20:fe:
11:18:f6:e1:27:43:ba:6c:77:b0:d1:71:72:7c:a6:
1f:7e:fd:b2:0a:94:20:05:9a:a6:f2:7b:42:68:59:
c0:25:e1:3f:c4:6b:d0:7d:e4:d8:05:85:08:47:71:
a9:4f:a3:f6:ba:2c:aa:31:e0:b0:c4:c1:14:b9:de:
91:94:24:98:22:a0:c8:9b:e3:2a:92:1f:e0:20:e9:
58:78:8b:9e:21:f7:2f:5c:e8:c7:3e:c4:a7:54:da:
71:55:ab:8b:cd:30:ed:85:f1:8b:11:c0:00:b8:76:
0d:9c:df:38:1a:eb:fa:8f:f2:81:d2:6c:82:d7:4f:
67:05:ec:e0:0c:44:43:7d:eb:95:c6:f8:23:38:92:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:36:3C:59:D8:17:81:B6:B5:12:0E:50:E3:CA:0F:8D:DC:2A:10:51
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ef:f2:c9:6b:27:c4:5d:c4:34:5d:04:d5:a0:56:99:7c:f7:
0b:8f:ac:fb:f3:7c:b6:17:7f:8c:4b:60:75:7b:82:43:b3:d1:
55:0b:9b:aa:87:38:8d:44:a1:bf:63:a7:b7:7e:f2:bc:98:36:
6a:a0:76:ed:a0:95:61:95:ef:32:b5:9a:3d:cb:2c:6e:8c:23:
ff:94:de:97:80:f5:f9:ac:41:c8:76:f7:c9:0e:2e:a2:83:e1:
ba:d8:4f:f5:28:61:e1:f3:e0:85:01:68:7e:05:18:23:ab:6d:
f0:fe:be:5f:c0:04:82:bc:a8:34:02:c3:ad:95:6f:f8:6b:a8:
db:a6:9e:c5:f4:69:4b:9e:05:90:59:e9:a0:55:7e:8c:66:a0:
d6:f8:75:1a:35:9a:d3:8e:71:a4:7f:ae:8a:4c:51:bc:8b:05:
ec:57:39:7f:fe:95:7e:cc:3c:24:fb:1b:ab:a7:33:c6:cf:b8:
77:ce:01:15:1e:d0:91:17:16:e8:db:65:18:7b:52:6c:da:fa:
19:0a:44:6c:f8:a3:8a:60:7c:34:a6:fe:1f:40:d6:8f:63:68:
b3:13:ed:ec:1d:4a:e3:a5:5f:19:87:20:b3:3b:d5:f2:e4:1b:
d0:5f:53:6e:45:3e:a0:7a:1b:0b:a1:d0:4f:ca:02:ac:f6:28:
e2:8a:d6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTU/jF59dyD16yh79/pSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTAzZTBkMDIwZWZjOTQ0YzFlZWJkYWVlNTQyN2QzNjVi
NzAwNzYwHhcNMjYwMzI2MDQwMDQ4WhcNMjYwMzI3MDQwMDQ4WjAzMTEwLwYDVQQD
Eyg0MDM2M2M1OWQ4MTc4MWI2YjUxMjBlNTBlM2NhMGY4ZGRjMmExMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQhF8L2rT4pI+vDpxtQp8j8qO4Ri
hK4xrerYXItWf90srXhMJHGZopWgFm3pIico4kn0+C6x+gh+3ycq3SCpPY6cP4VN
sR6fzsDtlURhL6Q7qjuwxE5dmPThzKbAm0mIJ4XfqT8lG7oc2jnh0LnRzN/TNl/h
IP4RGPbhJ0O6bHew0XFyfKYffv2yCpQgBZqm8ntCaFnAJeE/xGvQfeTYBYUIR3Gp
T6P2uiyqMeCwxMEUud6RlCSYIqDIm+Mqkh/gIOlYeIueIfcvXOjHPsSnVNpxVauL
zTDthfGLEcAAuHYNnN84Guv6j/KB0myC109nBezgDERDfeuVxvgjOJKwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA2PFnYF4G2tRIOUOPKD43cKhBRMB8GA1UdIwQY
MBaAFI2gPg0CDvyUTB7r2u5UJ9NltwB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjkt
ZmI3ZDdkY2EzNGE3LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjktZmI3ZDdkY2EzNGE3
LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAne/yyWsn
xF3ENF0E1aBWmXz3C4+s+/N8thd/jEtgdXuCQ7PRVQubqoc4jUShv2Ont37yvJg2
aqB27aCVYZXvMrWaPcssbowj/5Tel4D1+axByHb3yQ4uooPhuthP9Shh4fPghQFo
fgUYI6tt8P6+X8AEgryoNALDrZVv+Guo26aexfRpS54FkFnpoFV+jGag1vh1GjWa
045xpH+uikxRvIsF7Fc5f/6Vfsw8JPsbq6czxs+4d84BFR7QkRcW6NtlGHtSbNr6
GQpEbPijimB8NKb+H0DWj2NosxPt7B1K46VfGYcgszvV8uQb0F9TbkU+oHobC6HQ
T8oCrPYo4orWyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:46 2026 by rpki-client