Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: r1vFVhQ0KW6yXB0uPaS7caCg2YSIth3MOT7AH4DPX84=
Subject key identifier: 01:BD:02:F5:5F:7A:13:F6:80:8C:DD:7A:B9:19:B5:89:2A:E4:33:25
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 019D29CE626687D0BE3EA860C23C2A576ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 13E3
Signing time: Thu 26 Mar 2026 11:01:24 +0000
Manifest this update: Thu 26 Mar 2026 11:01:24 +0000
Manifest next update: Fri 27 Mar 2026 11:01:24 +0000
Files and hashes: 1: EXnm5GMNBH3ppLUeSGSb-X8qsSY.roa (hash: kwkA+KaKZn+wsqhhu9W1i6vshCDzT/Icaj+nQRUQM3o=)
2: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: FP/glaIrMHEju1OxWh0VfV2ig8Kvng6QxjL7FTLlWgw=)
3: kobHaurqZr4UJ_TNZculY22rr9E.roa (hash: EwXQXheqMoCgMhiAqNTZhN9jvAagt9eGoH6XnF9Zxto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:62:66:87:d0:be:3e:a8:60:c2:3c:2a:57:6e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Mar 26 11:01:24 2026 GMT
Not After : Mar 27 11:01:24 2026 GMT
Subject: CN=01bd02f55f7a13f6808cdd7ab919b5892ae43325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:eb:8a:0d:d8:1a:54:b8:82:f4:f8:8f:b5:
0b:d6:7b:ce:d1:f4:da:ae:66:a7:4a:4e:43:db:3a:
ce:a6:e9:f6:61:e8:34:f7:c8:2f:6f:6c:92:9f:55:
6a:b6:eb:e7:da:15:3f:a0:d6:fd:31:96:3a:7f:04:
ca:c8:ac:23:8d:06:5b:22:4f:f3:8c:b0:ad:30:81:
ea:e6:7a:fb:ba:7e:9d:c3:fd:c3:9d:c5:0f:af:64:
bb:aa:aa:c0:1f:56:1d:7c:70:3b:47:55:fd:e6:8e:
79:68:d6:d3:a5:52:12:3d:37:c3:97:d1:a3:f4:67:
2e:08:56:a0:a1:77:43:38:86:6b:82:ad:0c:d7:74:
e1:5a:00:c5:af:a7:a7:c6:ad:f6:bb:7e:be:92:e5:
77:c4:91:72:d2:6e:40:84:61:27:b0:de:56:38:48:
8f:66:aa:4b:20:a2:dc:9f:ce:f6:61:3e:1d:b1:ca:
05:5d:cd:d8:54:39:b3:8f:e9:d5:7d:af:68:5c:81:
ca:5f:df:83:7f:93:68:1e:05:48:73:39:8a:48:ad:
e9:3c:7d:78:44:8f:4d:94:0d:8c:da:cb:0f:96:f1:
25:22:11:3a:a9:8b:67:e0:ed:44:bd:f8:f9:ec:a3:
fc:a6:42:d2:6d:ef:a3:80:65:d7:af:8f:96:97:57:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:02:F5:5F:7A:13:F6:80:8C:DD:7A:B9:19:B5:89:2A:E4:33:25
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ed:bb:b0:3e:3b:c5:28:e7:52:33:27:3a:76:8e:ad:de:32:
b4:ec:e3:b2:ed:30:38:1b:0e:f5:2a:20:06:af:d8:52:d9:de:
a9:44:34:af:e3:23:d7:31:70:da:c2:42:40:54:94:22:9e:86:
b3:61:bb:c8:43:27:ff:4f:e8:d3:03:61:ab:0e:14:9a:31:4b:
09:d4:f7:30:71:5d:c5:b1:1b:51:c4:92:23:67:5c:b2:4c:c1:
69:f5:11:cc:23:c0:9e:92:cb:bd:5b:c8:fe:de:bd:86:f2:df:
b2:2e:2b:a4:0e:51:a9:31:1d:e0:49:62:ef:39:23:1b:b2:fe:
cb:b8:f9:14:1c:ef:b8:b6:3b:e8:82:aa:f2:5b:48:9c:6a:1b:
74:cc:05:90:3b:89:a5:04:9f:da:d7:00:22:12:e8:4f:e7:88:
a8:00:f4:1a:23:cc:8c:f9:fb:71:d8:5a:06:05:51:06:8f:ed:
f2:87:87:38:f0:79:1e:6c:f0:6a:8b:d9:39:8d:a5:1a:37:29:
7b:32:b1:1b:cc:2a:13:12:05:66:aa:1d:e1:cc:41:23:24:7d:
9b:2c:21:7d:f6:9b:5a:c0:3d:c8:a0:a6:ca:70:7f:c5:70:b4:
bf:e8:26:9c:8b:f1:93:a7:e8:00:85:6e:ce:fe:9b:dc:32:b5:
a4:83:a8:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzmJmh9C+PqhgwjwqV27YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm
NzQzMTIwHhcNMjYwMzI2MTEwMTI0WhcNMjYwMzI3MTEwMTI0WjAzMTEwLwYDVQQD
EygwMWJkMDJmNTVmN2ExM2Y2ODA4Y2RkN2FiOTE5YjU4OTJhZTQzMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRnrig3YGlS4gvT4j7UL1nvO0fTa
rmanSk5D2zrOpun2Yeg098gvb2ySn1Vqtuvn2hU/oNb9MZY6fwTKyKwjjQZbIk/z
jLCtMIHq5nr7un6dw/3DncUPr2S7qqrAH1YdfHA7R1X95o55aNbTpVISPTfDl9Gj
9GcuCFagoXdDOIZrgq0M13ThWgDFr6enxq32u36+kuV3xJFy0m5AhGEnsN5WOEiP
ZqpLIKLcn872YT4dscoFXc3YVDmzj+nVfa9oXIHKX9+Df5NoHgVIczmKSK3pPH14
RI9NlA2M2ssPlvElIhE6qYtn4O1Evfj57KP8pkLSbe+jgGXXr4+Wl1fDPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAG9AvVfehP2gIzderkZtYkq5DMlMB8GA1UdIwQY
MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt
ZjBmOGIwNzc1NTIzLzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz
LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+27sD47
xSjnUjMnOnaOrd4ytOzjsu0wOBsO9SogBq/YUtneqUQ0r+Mj1zFw2sJCQFSUIp6G
s2G7yEMn/0/o0wNhqw4UmjFLCdT3MHFdxbEbUcSSI2dcskzBafURzCPAnpLLvVvI
/t69hvLfsi4rpA5RqTEd4Eli7zkjG7L+y7j5FBzvuLY76IKq8ltInGobdMwFkDuJ
pQSf2tcAIhLoT+eIqAD0GiPMjPn7cdhaBgVRBo/t8oeHOPB5HmzwaovZOY2lGjcp
ezKxG8wqExIFZqod4cxBIyR9mywhffabWsA9yKCmynB/xXC0v+gmnIvxk6foAIVu
zv6b3DK1pIOoEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:53 2026 by rpki-client