Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: O7Ibcxmn04Ux3KQ3ofw8s864+EDdxYQWIAM/6Y4qp2w=
Subject key identifier: AE:30:56:BF:C0:AD:9F:3B:08:83:44:16:D3:42:86:19:1D:CE:3C:19
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 019D2961A2CBF1A833E0F5239C5803A1E27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 0B13
Signing time: Thu 26 Mar 2026 09:02:37 +0000
Manifest this update: Thu 26 Mar 2026 09:02:37 +0000
Manifest next update: Fri 27 Mar 2026 09:02:37 +0000
Files and hashes: 1: GyqUfMO0Omp9MapGvwm3OQxHuzY.roa (hash: eLOF15igrreolUrbJjNbYGfrAHmsABhFJ5BXUuXuCaI=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: l+26K9gIa2XRhGPe06ff16xpZqGau/mW3TCWMpjQO/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a2:cb:f1:a8:33:e0:f5:23:9c:58:03:a1:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Mar 26 09:02:37 2026 GMT
Not After : Mar 27 09:02:37 2026 GMT
Subject: CN=ae3056bfc0ad9f3b08834416d34286191dce3c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:12:01:31:23:dd:00:50:ac:61:9e:75:76:
ba:3c:0e:f9:74:2c:f2:49:f5:f4:5c:dc:e5:35:ec:
81:1c:10:43:00:2e:96:2b:e3:67:b8:ab:54:4d:a7:
c8:48:5b:bf:36:a2:a1:a3:08:6d:48:cc:c2:5e:d3:
2c:8a:ca:ae:98:6d:32:1a:15:97:47:7f:47:6c:8e:
fc:79:33:42:3f:05:db:a8:04:4d:1c:16:63:38:be:
0c:9c:fc:ad:83:d5:95:62:3d:ec:8c:1a:68:a4:46:
f4:ca:df:e3:b7:cb:06:66:92:b0:2a:e4:7c:c5:62:
19:6e:c2:3b:b2:ba:98:da:94:47:c4:4f:4d:30:6d:
e1:0d:46:cf:ec:63:43:c9:e3:7a:0c:dc:39:41:d4:
2f:17:3c:e0:92:e3:e9:0b:9d:4f:29:d1:db:9c:28:
bf:23:bf:b2:6b:a4:5c:93:1e:65:6b:fc:1e:4e:b6:
06:4d:b7:0e:68:23:03:64:5a:7c:d2:aa:7e:de:8d:
fb:3b:9d:9e:c1:6a:0e:c8:d5:b0:ef:08:35:9f:90:
46:8e:9f:ab:da:7b:b4:b6:88:94:0e:e6:56:67:a6:
b5:33:53:06:26:a8:32:b6:02:7e:19:0b:e0:c3:2a:
90:a8:5c:e6:f6:2d:9a:79:a7:09:2f:4a:b8:b4:7a:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:56:BF:C0:AD:9F:3B:08:83:44:16:D3:42:86:19:1D:CE:3C:19
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:46:59:ee:73:a6:bc:bf:19:a5:bf:e4:54:6d:7b:3e:aa:bf:
4b:27:e9:23:b4:6c:5d:73:a7:88:b4:9f:87:9b:0a:76:cc:f0:
6a:45:76:5a:85:c7:d6:06:88:21:02:0e:06:ee:46:b2:97:ff:
fb:1b:91:2b:76:55:09:1e:99:5f:f1:1a:ed:28:f0:6f:29:bd:
cc:61:83:62:d7:38:80:41:65:ad:e0:14:80:bf:81:7f:29:60:
89:a3:12:8a:fb:c8:e7:69:76:e1:f1:c5:25:8c:ac:7a:cb:b1:
ae:e6:24:a8:ac:db:db:c4:57:c3:45:b6:2e:2e:a9:4f:d9:b4:
81:89:a5:db:b6:7a:e1:7a:46:0d:2d:e7:73:d5:5e:e4:53:70:
c5:9b:12:bc:79:b0:25:e7:84:0f:ea:d8:b8:22:85:87:4c:e2:
a7:b6:01:50:cd:c1:a7:1e:7b:1a:e0:08:4b:1d:c4:ea:2b:1b:
e5:78:dd:1f:c9:a5:4d:87:36:25:0c:49:12:a3:75:f2:f8:f5:
da:28:8d:4a:ec:86:52:4c:54:4c:9c:74:04:64:70:88:e1:a3:
5b:2b:a8:3d:c3:09:de:9e:ec:83:66:32:a4:60:50:62:28:51:
ea:10:95:a8:c8:3f:48:29:07:7a:90:0a:51:f6:9a:e8:23:e6:
22:c6:12:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYaLL8agz4PUjnFgDoeJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTU2YjUyYjhlNGU3MDlmYTU2OWI1YWUzNzJjNmUyODI2
NmYyMzIwHhcNMjYwMzI2MDkwMjM3WhcNMjYwMzI3MDkwMjM3WjAzMTEwLwYDVQQD
EyhhZTMwNTZiZmMwYWQ5ZjNiMDg4MzQ0MTZkMzQyODYxOTFkY2UzYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4oSATEj3QBQrGGedXa6PA75dCzy
SfX0XNzlNeyBHBBDAC6WK+NnuKtUTafISFu/NqKhowhtSMzCXtMsisqumG0yGhWX
R39HbI78eTNCPwXbqARNHBZjOL4MnPytg9WVYj3sjBpopEb0yt/jt8sGZpKwKuR8
xWIZbsI7srqY2pRHxE9NMG3hDUbP7GNDyeN6DNw5QdQvFzzgkuPpC51PKdHbnCi/
I7+ya6Rckx5la/weTrYGTbcOaCMDZFp80qp+3o37O52ewWoOyNWw7wg1n5BGjp+r
2nu0toiUDuZWZ6a1M1MGJqgytgJ+GQvgwyqQqFzm9i2aeacJL0q4tHqpFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4wVr/ArZ87CINEFtNChhkdzjwZMB8GA1UdIwQY
MBaAFI5Va1K45OcJ+labWuNyxuKCZvIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMt
Y2RlNzAyYzBlYzhiLzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMtY2RlNzAyYzBlYzhi
LzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkZZ7nOm
vL8Zpb/kVG17Pqq/SyfpI7RsXXOniLSfh5sKdszwakV2WoXH1gaIIQIOBu5Gspf/
+xuRK3ZVCR6ZX/Ea7Sjwbym9zGGDYtc4gEFlreAUgL+BfylgiaMSivvI52l24fHF
JYysesuxruYkqKzb28RXw0W2Li6pT9m0gYml27Z64XpGDS3nc9Ve5FNwxZsSvHmw
JeeED+rYuCKFh0zip7YBUM3Bpx57GuAISx3E6isb5XjdH8mlTYc2JQxJEqN18vj1
2iiNSuyGUkxUTJx0BGRwiOGjWyuoPcMJ3p7sg2YypGBQYihR6hCVqMg/SCkHepAK
Ufaa6CPmIsYSAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:15 2026 by rpki-client